Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa
File:                     323830333a383439303a3a2f33322d3438203d3e20323732383133.roa (raw, json)
Hash identifier:          Q8hguMRAnIqYPoZyM1c1g4wj8aTGge4mwCgRWo1dSBs=
Subject key identifier:   0A:8B:EB:0B:0C:43:4E:DF:97:D1:97:A2:6B:E6:72:32:48:F1:48:BB
Certificate issuer:       /CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
Certificate serial:       16C53444834A756D3FC78A1A4F60F0A20DDFBBA1
Authority key identifier: 86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa
Signing time:             Thu 09 Apr 2026 22:38:17 +0000
ROA not before:           Thu 09 Apr 2026 22:33:17 +0000
ROA not after:            Thu 08 Apr 2027 22:38:17 +0000
asID:                     272813
IP address blocks:        2803:8490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c5:34:44:83:4a:75:6d:3f:c7:8a:1a:4f:60:f0:a2:0d:df:bb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
        Validity
            Not Before: Apr  9 22:33:17 2026 GMT
            Not After : Apr  8 22:38:17 2027 GMT
        Subject: CN=0A8BEB0B0C434EDF97D197A26BE6723248F148BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:02:38:94:c9:45:e5:15:c7:bc:31:91:c5:
                    d4:39:21:bc:d6:bd:04:2a:fc:a3:4a:76:7b:70:b6:
                    12:ec:2a:3d:e0:d6:19:5d:f3:68:dc:40:99:8a:ca:
                    25:24:e0:d1:91:83:45:dd:0c:9b:44:ec:b8:44:b3:
                    5a:97:31:7d:80:61:ee:9e:ba:8c:61:7e:90:70:91:
                    5b:7a:3b:7b:7d:ab:3f:cf:0e:16:00:a3:29:be:b6:
                    55:4d:83:bc:69:7f:ff:c0:39:e6:91:b4:06:0b:e5:
                    fc:34:09:00:00:e3:e2:1a:91:02:8e:fe:e5:db:32:
                    e7:7c:d1:ff:74:2c:3c:63:c4:1c:5c:da:a5:73:01:
                    91:ca:65:67:f3:dc:3b:de:7b:24:ab:97:f4:b1:b8:
                    b5:89:87:47:f5:95:37:62:da:c6:78:55:9f:7a:79:
                    b6:1a:df:13:96:52:b6:9c:96:3f:a7:26:18:f9:13:
                    c4:1c:5e:68:23:ce:3f:a7:28:be:9b:b2:6c:ae:2d:
                    55:cb:b8:ff:5d:73:78:f2:20:9e:8f:8f:47:15:27:
                    3a:17:28:c6:ae:03:e6:66:fb:18:db:84:06:ae:10:
                    a8:95:24:bd:8c:3f:e4:37:69:63:85:81:f6:08:22:
                    5f:a6:d9:9b:0d:a9:d1:4a:42:e5:b8:71:77:d0:95:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:EB:0B:0C:43:4E:DF:97:D1:97:A2:6B:E6:72:32:48:F1:48:BB
            X509v3 Authority Key Identifier:
                keyid:86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8490::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:78:42:14:b5:72:fd:02:85:c3:52:d1:b7:9f:21:0c:bf:
         3b:3c:dc:8c:52:ec:7f:2e:6b:de:5a:52:f1:2c:70:2c:59:7e:
         72:ce:86:2a:fd:c5:3b:79:6e:f2:c7:3a:39:31:b8:8e:2e:d6:
         03:0c:da:b3:74:ff:24:a3:11:9a:f4:a9:18:5d:fd:c1:e4:9c:
         c1:fa:d3:f1:08:88:a5:e2:c4:f2:2a:c6:06:fa:03:72:80:f1:
         21:cc:95:6e:a7:9a:4b:cc:0f:b2:e5:67:92:00:41:77:5e:05:
         0b:f7:7e:b3:9e:63:14:37:9a:69:8e:19:a7:76:10:38:c8:21:
         d2:12:4c:1b:87:29:69:e8:73:64:e2:20:96:40:38:5f:17:eb:
         23:91:15:2f:e8:88:a5:b5:23:3a:ab:cc:2e:9c:39:8b:92:91:
         98:6c:09:98:d2:0c:30:bf:4c:35:c5:87:6c:3a:c6:00:3f:ab:
         fb:70:b5:ba:d7:41:87:00:2e:6d:59:b5:22:ed:64:ea:60:a3:
         6c:69:c1:39:d2:79:1b:4e:93:40:23:9f:44:a2:3f:78:a5:e1:
         d9:e9:33:4d:ea:a7:ee:16:76:02:76:6a:72:87:20:c3:7e:88:
         58:e6:5a:ec:a3:77:65:48:32:6f:7f:03:73:dd:f9:6c:b6:7e:
         29:4b:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:20:54 2026 by rpki-client