Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313830313a3a2f34382d3438203d3e20323730303735.roa
File:                     323830333a633365303a313830313a3a2f34382d3438203d3e20323730303735.roa (raw, json)
Hash identifier:          HEirM2upHg+4WjuGrs8GIzIpHX34FnQn4bTgqGBFEmc=
Subject key identifier:   9F:F8:80:78:93:61:94:50:E3:2D:A6:26:4C:07:DD:45:0A:18:E9:40
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       6C0481487CA4ECE8950EDB3F0F6DF0656569B700
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313830313a3a2f34382d3438203d3e20323730303735.roa
Signing time:             Thu 11 Jun 2026 14:47:23 +0000
ROA not before:           Thu 11 Jun 2026 14:42:23 +0000
ROA not after:            Thu 10 Jun 2027 14:47:23 +0000
asID:                     270075
IP address blocks:        2803:c3e0:1801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:04:81:48:7c:a4:ec:e8:95:0e:db:3f:0f:6d:f0:65:65:69:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Jun 11 14:42:23 2026 GMT
            Not After : Jun 10 14:47:23 2027 GMT
        Subject: CN=9FF8807893619450E32DA6264C07DD450A18E940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:d0:90:f9:5b:18:2d:6e:0e:b1:92:fb:b9:
                    89:69:a0:9e:b7:6b:3b:b1:55:ca:75:2f:04:9d:b9:
                    14:75:58:fd:ee:28:ee:32:49:8b:36:ad:e4:a9:ee:
                    ff:37:e7:e7:e5:fd:44:3c:ae:5c:ba:41:c5:cf:27:
                    3e:a7:17:15:29:46:3a:93:c4:08:2f:fb:b4:aa:3b:
                    5e:98:ea:1b:2f:00:8d:21:6c:f4:7c:84:49:32:cd:
                    98:7d:07:b5:6e:ec:02:56:b3:c0:ea:da:0c:ca:60:
                    58:eb:ec:7c:c1:6a:e3:16:06:a5:1c:55:23:ac:b4:
                    60:77:ca:bf:46:b4:20:37:19:6d:e6:4c:7b:8b:d4:
                    80:5f:4e:2b:a9:0a:11:61:92:4c:f5:54:5b:f0:9e:
                    d4:30:83:4d:56:91:11:34:43:c2:d2:c4:80:2f:05:
                    ce:6e:f3:29:10:d1:cd:6d:15:08:80:2e:89:af:d2:
                    a3:0d:ac:af:95:6f:5d:49:df:60:17:76:04:26:80:
                    b8:ee:62:08:ec:09:9b:5e:30:3c:d2:ac:bb:9c:b7:
                    e4:54:97:d6:2a:a1:a6:fc:4f:1f:c4:05:f6:bd:18:
                    04:cb:52:9e:30:f9:da:be:11:db:0a:2b:97:ed:2e:
                    e7:d4:51:00:c8:b7:34:0e:cf:18:f5:77:b2:1b:9c:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F8:80:78:93:61:94:50:E3:2D:A6:26:4C:07:DD:45:0A:18:E9:40
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313830313a3a2f34382d3438203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:de:1e:97:b5:c8:8e:41:4e:80:a2:c9:40:22:b4:13:d4:9e:
         2d:97:05:83:a7:86:b9:5f:9c:8d:63:8a:f0:69:a0:1c:8a:21:
         00:8e:c1:27:93:ef:9b:13:ce:c4:5b:84:e9:d1:f2:97:d2:2d:
         30:e1:2a:ba:0b:a0:fd:29:76:9d:0f:98:d5:81:e5:03:86:8f:
         5b:a6:b1:2b:28:64:70:d3:46:59:90:73:3c:17:b6:bd:bf:5f:
         cc:fe:71:38:fd:43:4b:79:a1:c2:7f:4f:7a:8c:68:51:51:fe:
         22:91:fb:60:bf:c6:3e:20:cf:c8:ff:f8:26:48:78:68:31:1d:
         6e:bf:b3:d1:e3:cd:3c:4c:b3:a0:86:64:89:0f:9b:4d:54:b4:
         c1:ca:b0:f6:5b:0a:98:d9:35:e5:29:1e:e5:9d:19:e7:d6:02:
         f0:93:73:c0:37:0f:d7:a7:01:07:41:83:ff:86:c1:5b:ce:30:
         ea:bb:67:a5:3d:2f:65:64:31:77:c6:83:94:0f:c5:7d:5e:d0:
         24:31:cb:16:8b:c1:e1:1d:6e:aa:bc:99:f8:a6:c4:f1:17:23:
         22:38:da:0e:f9:5f:0a:99:6a:01:79:b1:98:d9:18:49:cf:c1:
         69:20:1a:52:e2:b0:e4:bd:9b:72:0f:5f:0f:83:c4:84:2f:2a:
         83:b3:7e:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:34 2026 by rpki-client