Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D2096C9D6E9674BF06EA180B6740524E279D7258888DFE1442AAFBCEFA8F89/0/323830333a313933303a3a2f33322d3332203d3e20323734393531.roa
File:                     323830333a313933303a3a2f33322d3332203d3e20323734393531.roa (raw, json)
Hash identifier:          I6pP9BDAF83X5DfxGRLzp+Yff0iR0Fml2fM8UHDXGvU=
Subject key identifier:   4D:12:1E:53:67:72:D5:0D:89:5D:BD:57:5B:A7:50:99:C2:22:E9:31
Certificate issuer:       /CN=81632C8B5EC9B451DFF56CE07EA159E0743A989F
Certificate serial:       249C5DD2F4C56D947AC712D74133E76C63539C1E
Authority key identifier: 81:63:2C:8B:5E:C9:B4:51:DF:F5:6C:E0:7E:A1:59:E0:74:3A:98:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81632C8B5EC9B451DFF56CE07EA159E0743A989F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D2096C9D6E9674BF06EA180B6740524E279D7258888DFE1442AAFBCEFA8F89/0/323830333a313933303a3a2f33322d3332203d3e20323734393531.roa
Signing time:             Wed 10 Jun 2026 17:20:00 +0000
ROA not before:           Wed 10 Jun 2026 17:15:00 +0000
ROA not after:            Wed 09 Jun 2027 17:20:00 +0000
asID:                     274951
IP address blocks:        2803:1930::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D2096C9D6E9674BF06EA180B6740524E279D7258888DFE1442AAFBCEFA8F89/0/81632C8B5EC9B451DFF56CE07EA159E0743A989F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D2096C9D6E9674BF06EA180B6740524E279D7258888DFE1442AAFBCEFA8F89/0/81632C8B5EC9B451DFF56CE07EA159E0743A989F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81632C8B5EC9B451DFF56CE07EA159E0743A989F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9c:5d:d2:f4:c5:6d:94:7a:c7:12:d7:41:33:e7:6c:63:53:9c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81632C8B5EC9B451DFF56CE07EA159E0743A989F
        Validity
            Not Before: Jun 10 17:15:00 2026 GMT
            Not After : Jun  9 17:20:00 2027 GMT
        Subject: CN=4D121E536772D50D895DBD575BA75099C222E931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:c3:45:8d:37:0e:61:65:f0:0c:53:f8:e4:
                    41:84:c2:58:e2:e0:78:5f:48:c4:0a:1c:89:47:bf:
                    09:5b:1c:6e:04:4f:06:b7:2c:98:da:80:9a:cb:ba:
                    86:3b:f5:62:aa:7b:70:95:97:44:2d:9d:6b:cb:94:
                    3a:83:db:75:eb:aa:78:db:76:c5:e6:08:2b:c2:94:
                    43:5e:c0:66:83:17:91:50:88:19:fd:de:fa:45:dc:
                    e0:e0:3e:c3:08:bc:d4:0a:21:d7:8a:5a:21:33:37:
                    2d:56:f8:02:07:c8:75:30:4a:16:36:5b:2e:66:2d:
                    e5:33:6f:73:97:cc:89:11:d4:87:c4:c2:e7:17:c0:
                    27:11:c4:02:76:ce:56:2a:6a:7d:60:d3:44:dc:76:
                    3e:9e:f4:48:a4:39:e9:5c:4f:79:0d:d4:83:b5:85:
                    df:a9:c6:3f:64:b3:06:a4:b2:a1:2c:db:1c:ad:c0:
                    0a:e7:3b:5c:ba:91:db:4f:8f:dc:e0:10:f6:78:5e:
                    05:28:68:bc:de:1a:5d:ad:ac:73:fd:f4:3e:22:5e:
                    96:6c:1a:81:ad:d3:4b:92:3f:4a:ad:57:a7:e9:29:
                    1c:a2:9e:b1:d2:29:2a:d4:51:18:0f:b7:84:3b:f7:
                    f5:3a:6f:ff:72:b4:57:1a:49:90:8a:44:5d:1c:a0:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:12:1E:53:67:72:D5:0D:89:5D:BD:57:5B:A7:50:99:C2:22:E9:31
            X509v3 Authority Key Identifier:
                keyid:81:63:2C:8B:5E:C9:B4:51:DF:F5:6C:E0:7E:A1:59:E0:74:3A:98:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D2096C9D6E9674BF06EA180B6740524E279D7258888DFE1442AAFBCEFA8F89/0/81632C8B5EC9B451DFF56CE07EA159E0743A989F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81632C8B5EC9B451DFF56CE07EA159E0743A989F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D2096C9D6E9674BF06EA180B6740524E279D7258888DFE1442AAFBCEFA8F89/0/323830333a313933303a3a2f33322d3332203d3e20323734393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1930::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:49:d2:c7:be:39:4d:de:33:58:61:da:b4:69:59:f8:d2:
         27:c3:32:b4:be:00:07:70:20:89:e4:78:ea:9f:bf:cf:b5:2b:
         b7:b5:fe:7a:84:39:64:3e:94:86:02:28:cd:a3:52:7c:9e:3b:
         b0:43:66:fc:55:c8:8e:e6:61:47:23:4a:5c:53:9c:e7:f1:de:
         85:14:73:cf:8f:8b:36:88:22:69:0b:2c:bb:bd:7b:be:aa:2d:
         f9:23:cd:f2:70:25:c3:b8:1d:ab:57:0c:2e:e9:ef:a6:22:0a:
         1f:19:db:c2:21:f4:71:2c:8f:97:0f:66:48:57:b4:42:7a:bc:
         3d:f8:98:5b:55:38:27:da:7e:d7:f8:54:85:0b:50:f6:e2:86:
         89:1e:18:54:1e:45:c6:9a:1d:42:f6:9e:b0:51:8e:7d:e5:1c:
         43:66:91:12:09:24:2a:0a:f9:8a:88:90:2c:42:65:e7:0c:ed:
         a9:0e:db:3d:59:2f:5a:7e:ff:5a:ec:64:2b:3e:99:0d:f1:f2:
         95:90:f9:42:a7:22:4e:2d:f9:a8:98:1c:a2:80:5e:31:71:51:
         c0:78:4a:0a:16:ca:ce:16:c3:09:6c:59:40:45:f6:53:55:70:
         d4:18:8c:5f:a9:3f:f2:87:10:0b:eb:d7:5c:90:c1:46:08:1d:
         b1:39:49:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:03:29 2026 by rpki-client