Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/323830333a393765303a3a2f33322d3438203d3e203237373531.roa
File:                     323830333a393765303a3a2f33322d3438203d3e203237373531.roa (raw, json)
Hash identifier:          jMjRVKb7epdhDtCKre+zeA1Bto+3LKBoq4mrIXuLiEs=
Subject key identifier:   83:BB:56:14:95:7F:37:F5:04:59:E8:2B:12:29:88:B2:F3:DD:58:5D
Certificate issuer:       /CN=09C50B7474321823614A1B0D1BED884AB007C32D
Certificate serial:       7419A20090489EC64E47BA2F224835E6EA52995E
Authority key identifier: 09:C5:0B:74:74:32:18:23:61:4A:1B:0D:1B:ED:88:4A:B0:07:C3:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09C50B7474321823614A1B0D1BED884AB007C32D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/323830333a393765303a3a2f33322d3438203d3e203237373531.roa
Signing time:             Mon 06 Apr 2026 15:05:00 +0000
ROA not before:           Mon 06 Apr 2026 15:00:00 +0000
ROA not after:            Mon 05 Apr 2027 15:05:00 +0000
asID:                     27751
IP address blocks:        2803:97e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/09C50B7474321823614A1B0D1BED884AB007C32D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/09C50B7474321823614A1B0D1BED884AB007C32D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09C50B7474321823614A1B0D1BED884AB007C32D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:19:a2:00:90:48:9e:c6:4e:47:ba:2f:22:48:35:e6:ea:52:99:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C50B7474321823614A1B0D1BED884AB007C32D
        Validity
            Not Before: Apr  6 15:00:00 2026 GMT
            Not After : Apr  5 15:05:00 2027 GMT
        Subject: CN=83BB5614957F37F50459E82B122988B2F3DD585D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:67:d8:43:9d:de:2a:50:ad:83:68:d1:16:
                    2b:b5:b4:19:ff:95:26:2f:a6:a9:f8:4f:8f:bc:bb:
                    84:fa:94:33:41:4c:46:36:ca:d8:3d:ca:8f:57:d8:
                    95:b7:2d:e1:54:02:f2:67:57:65:87:c0:29:b4:10:
                    22:2d:a3:90:87:da:55:2e:b8:2d:48:aa:3b:80:03:
                    31:c2:bf:90:c0:2a:b0:70:43:0c:a6:ab:c9:b4:4c:
                    b2:bf:11:24:95:43:32:ce:54:26:2a:13:ad:ad:e8:
                    7f:1a:69:18:f1:6d:c6:e5:0e:12:17:73:fd:05:e6:
                    26:0f:cc:c4:d2:2b:5e:ed:c4:96:f6:cf:f6:a8:fa:
                    23:86:29:df:ef:97:a8:47:ad:b3:b7:54:ed:58:18:
                    73:14:41:35:ae:4b:6f:d0:05:71:35:8a:09:2c:fa:
                    73:76:7a:af:42:be:0d:49:cf:d4:ed:e1:73:70:02:
                    cd:17:16:08:bd:f1:09:87:e9:48:38:88:ed:4b:d5:
                    7c:da:d6:f9:23:73:e4:62:9c:bc:98:22:d7:09:05:
                    1d:fd:01:95:8a:ce:05:0c:76:1e:90:ed:34:8e:c2:
                    ea:73:b9:f0:0f:38:b2:28:c7:8e:7f:36:76:2f:63:
                    52:bd:26:37:6f:f1:23:69:da:f2:0f:ff:b5:63:67:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BB:56:14:95:7F:37:F5:04:59:E8:2B:12:29:88:B2:F3:DD:58:5D
            X509v3 Authority Key Identifier:
                keyid:09:C5:0B:74:74:32:18:23:61:4A:1B:0D:1B:ED:88:4A:B0:07:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/09C50B7474321823614A1B0D1BED884AB007C32D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09C50B7474321823614A1B0D1BED884AB007C32D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/323830333a393765303a3a2f33322d3438203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:97e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:92:24:1b:07:8a:6c:34:80:b1:95:1a:43:00:a2:50:cd:92:
         06:98:f3:d6:b0:d0:e4:3c:1b:36:30:4f:b0:ac:67:3a:f2:1e:
         22:bc:4c:1f:d3:b5:6e:a9:b8:82:79:17:dd:d0:10:9a:8c:65:
         f9:fa:b0:2f:80:68:87:fa:37:3a:c5:88:73:5b:f5:bf:e0:d9:
         2b:5d:e1:9a:4b:f7:46:ed:c4:e6:0c:0d:a3:58:db:99:d7:12:
         82:b9:10:d1:58:dc:88:b6:17:85:6b:d8:2c:79:35:d9:de:50:
         af:ec:c3:a1:26:bf:0d:2d:ec:55:d2:cc:26:7c:9b:19:8a:cc:
         d4:24:db:35:9c:29:6f:b1:09:8d:42:cd:ec:c1:d6:9a:a1:f5:
         58:9d:47:09:26:66:c4:a4:22:e5:eb:a6:07:ed:92:2e:ef:a2:
         ca:cc:2e:da:67:29:5c:81:e2:09:aa:fd:81:41:56:09:87:d0:
         1c:56:42:d1:61:8a:45:d0:2b:70:fd:2e:23:29:55:ed:19:34:
         86:92:86:e3:3b:68:4f:79:b8:53:e2:6e:8a:bd:89:de:40:48:
         02:0a:ee:2c:34:75:9e:bf:5c:e7:a7:8f:92:86:42:e9:e1:e6:
         d5:f0:3f:76:a4:a9:34:94:c9:96:0a:bc:4c:31:ee:bd:cf:10:
         32:17:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:12 2026 by rpki-client