Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/323830333a346436303a3a2f33322d3438203d3e20323639373638.roa
File:                     323830333a346436303a3a2f33322d3438203d3e20323639373638.roa (raw, json)
Hash identifier:          mI8/NMUK6h5bQb2WRApppddDj1JO6dE+ruo7vWGfGYk=
Subject key identifier:   E6:FD:1D:3C:F8:38:77:7C:A9:C4:D4:10:99:07:53:05:7E:C3:C9:5F
Certificate issuer:       /CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
Certificate serial:       520AB2680DCA01D682262E09DD21667CC2AC317E
Authority key identifier: B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/323830333a346436303a3a2f33322d3438203d3e20323639373638.roa
Signing time:             Tue 06 Jan 2026 19:00:43 +0000
ROA not before:           Tue 06 Jan 2026 18:55:43 +0000
ROA not after:            Tue 05 Jan 2027 19:00:43 +0000
asID:                     269768
IP address blocks:        2803:4d60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0a:b2:68:0d:ca:01:d6:82:26:2e:09:dd:21:66:7c:c2:ac:31:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
        Validity
            Not Before: Jan  6 18:55:43 2026 GMT
            Not After : Jan  5 19:00:43 2027 GMT
        Subject: CN=E6FD1D3CF838777CA9C4D410990753057EC3C95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:27:a9:60:a4:3f:2c:23:18:4d:ce:20:7a:
                    a9:a6:49:9d:69:1e:00:ac:9c:2f:e1:df:01:ef:35:
                    e0:ae:a5:26:ce:68:6a:dc:bc:2b:38:84:a4:13:51:
                    b8:6d:5a:60:c0:ac:19:e5:dd:7d:86:27:b0:78:8b:
                    be:41:6d:78:62:f8:fb:29:ff:79:7f:f5:a3:30:aa:
                    5f:dd:eb:70:da:d3:2a:4d:e6:e9:ca:7f:8d:46:6c:
                    26:ca:06:78:37:78:3f:73:a5:16:79:e0:71:2c:b4:
                    a7:0c:d3:ff:7c:f8:7d:e6:5b:dc:3e:0a:a9:a4:d6:
                    1c:bb:23:6a:cd:0c:8c:90:d7:0d:f0:47:f4:da:34:
                    ea:75:52:4b:d0:76:6c:e9:8b:4f:59:06:14:e1:de:
                    07:00:20:34:68:bc:34:98:df:6e:eb:40:9a:ba:37:
                    1e:b9:fc:b2:54:f5:78:f8:6a:b9:e2:30:e3:5a:02:
                    9f:b6:f2:8c:87:c6:0d:a5:6e:92:cb:b0:df:93:31:
                    ed:e6:e3:4e:ca:d2:2e:ad:92:99:48:0f:3c:15:2a:
                    e1:2e:88:60:f3:e6:01:eb:bb:55:e6:49:9c:11:0f:
                    33:b8:53:cc:8f:2d:26:1e:e4:84:3e:6f:e7:b3:02:
                    82:af:01:9c:2f:57:03:62:da:e6:f2:a2:d8:2f:25:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FD:1D:3C:F8:38:77:7C:A9:C4:D4:10:99:07:53:05:7E:C3:C9:5F
            X509v3 Authority Key Identifier:
                keyid:B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/323830333a346436303a3a2f33322d3438203d3e20323639373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:12:cb:37:36:a8:45:27:95:ba:99:c9:df:cc:04:22:b1:6b:
         e3:5b:cd:3c:d8:a1:eb:1a:5e:e9:32:ca:73:e1:6e:5e:2c:7b:
         76:15:7b:34:56:ca:25:68:6c:04:db:d0:d3:c1:25:e1:40:d3:
         64:cf:db:cf:d1:1f:7f:3d:ee:da:25:b2:b2:ab:52:80:d0:83:
         50:c0:86:00:4e:9d:76:91:01:ba:7d:6e:d5:54:5d:e1:17:e2:
         4b:f6:1a:54:81:39:71:67:2d:27:0c:69:0a:e1:6e:29:dc:7c:
         5c:20:7c:a3:cf:3d:6a:f3:f2:83:79:97:fd:a5:13:d6:f1:65:
         de:93:2e:a0:6a:00:80:a5:6a:98:6a:ec:d8:5a:75:a4:5e:14:
         37:97:7c:cb:eb:35:4e:37:11:2f:c0:ff:1c:b7:c9:fe:31:4e:
         86:c1:4e:18:4e:ed:ca:8f:cc:ba:20:c0:c3:35:fa:c3:a7:1a:
         7e:9b:e2:0f:9b:f2:93:f1:db:ba:5c:27:42:8f:4e:41:7b:bd:
         cc:6c:3b:55:25:14:a6:16:49:00:82:a6:86:71:d6:3e:8a:26:
         b7:e1:1a:55:3f:7f:19:0d:95:af:54:35:d7:84:7b:85:0c:60:
         fa:d2:88:8d:f0:9a:b9:0e:91:48:e9:dd:30:22:2a:69:54:61:
         ca:af:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:00:05 2026 by rpki-client