Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          uA2jzZAYGzwGPNjyWazIb8Q6cHRXfqi5erbI3ITaadg=
Subject key identifier:   1F:E2:09:CA:04:96:87:9C:FA:DE:C5:0B:0A:98:EB:AE:36:BE:8E:68
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       2F93DAD142DCE21788574F25F13E69A3DC477C42
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Wed 15 Apr 2026 17:38:55 +0000
ROA not before:           Wed 15 Apr 2026 17:33:55 +0000
ROA not after:            Wed 14 Apr 2027 17:38:55 +0000
asID:                     273142
IP address blocks:        2803:2c50:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 01:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:93:da:d1:42:dc:e2:17:88:57:4f:25:f1:3e:69:a3:dc:47:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Apr 15 17:33:55 2026 GMT
            Not After : Apr 14 17:38:55 2027 GMT
        Subject: CN=1FE209CA0496879CFADEC50B0A98EBAE36BE8E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:4e:64:93:86:10:91:52:4b:b3:a7:58:2c:
                    ff:d8:19:7d:67:20:c7:c3:13:03:89:f2:13:07:18:
                    3e:8b:72:94:c1:9a:9e:06:0f:30:dd:8e:84:e0:cf:
                    2c:16:2e:82:65:9d:02:44:4f:46:0b:e4:a4:e6:db:
                    69:e7:de:b1:79:75:c0:ba:d5:bf:a3:c2:51:fe:be:
                    db:43:b7:4e:b7:6b:4a:8a:9f:3b:29:98:75:5b:68:
                    cc:74:27:e8:dd:c2:84:5e:cd:5b:2c:1a:38:d1:fb:
                    19:ef:70:74:7a:d4:6c:4e:25:e0:49:96:64:e3:44:
                    fd:ed:d9:d3:f9:c7:df:87:03:c8:1b:9d:0c:8e:59:
                    07:1b:86:86:d1:d5:f6:2d:d1:52:b2:b2:b9:e6:f7:
                    04:05:31:c3:4e:a9:bf:4d:97:7e:16:4f:f3:ba:ea:
                    02:97:61:67:b2:57:ee:60:04:45:56:d2:14:dd:0c:
                    e8:6f:0b:de:f3:d1:77:39:14:12:2e:22:25:f0:ef:
                    0e:e4:5e:a1:e2:4f:6d:b0:c3:e8:c7:a2:c3:6c:1d:
                    5d:b0:e1:2e:de:3b:62:12:26:d7:b6:49:f0:4a:f1:
                    6d:1c:07:9e:6f:2d:62:c9:a7:f2:d6:fb:c6:2b:26:
                    a7:86:0f:3f:21:d1:ae:43:30:c8:d6:19:7a:3d:82:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E2:09:CA:04:96:87:9C:FA:DE:C5:0B:0A:98:EB:AE:36:BE:8E:68
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:56:14:c3:46:58:fb:f7:96:3c:23:b1:79:69:4c:1b:b0:ba:
         5b:1e:88:e1:b6:30:0b:6e:7d:71:a3:37:24:04:5d:71:9c:c1:
         0d:94:29:a8:f6:90:c9:ea:07:bd:de:30:8c:89:18:42:b8:4d:
         91:43:9f:85:7f:08:85:b1:82:c0:c9:94:ad:e8:d9:3d:90:b1:
         7e:69:49:ff:49:0a:e5:f2:c3:12:0d:5b:76:03:16:75:11:c5:
         8d:bd:43:24:4f:a2:78:3c:c5:86:15:87:5a:90:09:82:54:98:
         8e:18:b2:a9:f2:03:0c:da:b8:0a:c8:18:80:0f:c1:bc:e0:d9:
         7c:03:ef:a2:f9:bd:5e:e7:88:30:b0:60:66:a4:04:33:13:b1:
         3f:77:a1:53:fc:a1:f4:5d:55:c2:a8:ed:83:f1:d1:71:be:51:
         82:52:db:a5:0e:2b:f0:df:6b:0a:38:4c:02:ab:60:71:32:7a:
         54:42:2e:3e:01:b0:db:d7:b2:2b:ef:47:ba:3d:9d:ae:b3:b1:
         a3:dc:2b:04:06:55:de:46:80:f6:b1:b7:8f:58:f1:21:31:f1:
         d6:a4:97:55:21:23:f2:54:5a:ac:0d:1a:0f:1d:33:3e:29:32:
         23:da:7f:cc:d6:da:ab:08:25:01:71:b6:2d:2a:a7:ab:e6:53:
         b2:ce:50:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:25:27 2026 by rpki-client