Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/323830333a636334303a3a2f33322d3438203d3e20323633373931.roa
File:                     323830333a636334303a3a2f33322d3438203d3e20323633373931.roa (raw, json)
Hash identifier:          MdHFk27fq5pSVdggqqSgysohTW2zYGw2K0XHcr4hhxw=
Subject key identifier:   22:D2:94:96:56:6B:2C:2F:7B:C2:89:5E:7A:C6:AF:E2:83:29:9B:E8
Certificate issuer:       /CN=1835B744338D1D3CF4275EF6C6406F020B5075CA
Certificate serial:       4D1D7DD5716046E0F98FBE1D3AF1AD7F6BF43FEE
Authority key identifier: 18:35:B7:44:33:8D:1D:3C:F4:27:5E:F6:C6:40:6F:02:0B:50:75:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/323830333a636334303a3a2f33322d3438203d3e20323633373931.roa
Signing time:             Tue 26 May 2026 22:50:00 +0000
ROA not before:           Tue 26 May 2026 22:45:00 +0000
ROA not after:            Tue 25 May 2027 22:50:00 +0000
asID:                     263791
IP address blocks:        2803:cc40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1d:7d:d5:71:60:46:e0:f9:8f:be:1d:3a:f1:ad:7f:6b:f4:3f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1835B744338D1D3CF4275EF6C6406F020B5075CA
        Validity
            Not Before: May 26 22:45:00 2026 GMT
            Not After : May 25 22:50:00 2027 GMT
        Subject: CN=22D29496566B2C2F7BC2895E7AC6AFE283299BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:08:41:a2:f8:67:e2:a8:c9:ef:df:57:90:
                    55:50:ec:cf:28:00:cc:b3:06:f7:3b:1f:7d:b2:cf:
                    9b:84:4c:1b:f5:71:b6:82:6e:f4:eb:29:82:f2:d1:
                    6b:7a:f4:d4:4c:51:80:26:ab:95:d9:06:bd:8a:40:
                    1e:2d:06:ef:f1:e6:49:d9:60:26:a5:39:3d:bd:80:
                    80:f1:af:c8:50:dd:1f:4e:84:e1:4a:0d:16:ed:bb:
                    88:ac:90:43:d6:fa:9e:a2:de:58:1f:f0:c7:92:88:
                    3b:33:0e:b6:4b:a6:1a:c2:33:ed:71:7d:f5:3e:a6:
                    28:89:6f:99:3b:7d:08:bd:95:1d:ab:b7:76:e7:ee:
                    e5:fb:69:d8:f1:7a:3e:db:34:a8:fc:33:2f:97:16:
                    c9:29:3a:de:dd:6d:34:1e:d6:d4:24:69:7c:68:3c:
                    98:26:40:8f:47:ca:64:bb:ff:d1:f1:67:04:60:10:
                    6b:93:c1:4c:2b:1d:98:68:33:bc:7a:cd:7d:60:6f:
                    f0:fe:6b:1a:6e:b7:3e:02:8c:82:df:3c:52:de:4c:
                    42:cd:74:3f:b0:b2:d0:96:9e:6e:bf:6c:1a:cd:4e:
                    cd:80:79:8f:ca:ca:5c:71:b7:20:e2:02:66:14:ca:
                    f2:25:27:00:03:29:90:5c:5f:fd:11:02:4d:2c:e6:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D2:94:96:56:6B:2C:2F:7B:C2:89:5E:7A:C6:AF:E2:83:29:9B:E8
            X509v3 Authority Key Identifier:
                keyid:18:35:B7:44:33:8D:1D:3C:F4:27:5E:F6:C6:40:6F:02:0B:50:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/323830333a636334303a3a2f33322d3438203d3e20323633373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:d0:a7:a3:e4:e5:61:cf:db:17:f5:f0:e6:95:05:e4:8f:02:
         60:37:c5:f0:c6:fd:29:6c:52:f0:c1:3c:09:03:21:62:a7:64:
         62:06:2b:d5:1b:9a:d1:b5:ef:f4:61:54:d9:d1:53:1a:69:aa:
         6b:66:83:74:c1:1b:54:7a:4d:8c:83:d5:bc:99:be:86:b2:84:
         24:a5:ce:32:e8:16:20:ed:50:4c:37:f3:6e:30:33:fb:91:a8:
         e8:ce:b0:74:74:b9:25:c1:0b:0b:c6:c8:7d:66:48:1e:52:a8:
         14:52:4e:aa:54:d0:d7:ca:61:1b:d7:c6:bd:d7:9c:08:06:2e:
         c4:36:95:87:76:16:0d:f8:f1:19:e9:29:c3:82:a7:5f:02:3e:
         81:23:9d:c5:10:17:fe:58:1b:3b:31:77:f8:bf:cd:8b:40:ba:
         a5:52:2f:b8:bc:e7:df:d3:6a:a2:a3:1d:66:29:db:a4:f4:18:
         7f:ea:e5:ad:6d:12:2a:ea:82:f7:db:99:57:9d:f7:d5:f1:96:
         50:e9:eb:b1:a1:dc:aa:4d:a3:59:a6:9c:a4:61:52:e5:8f:b8:
         01:16:23:ce:62:ef:23:cc:d4:f2:b9:e1:68:97:99:54:1b:ae:
         35:af:c7:a7:ec:1f:e6:95:dc:09:fb:8d:5f:01:ce:1f:22:16:
         e6:21:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:20 2026 by rpki-client