Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e2033333536.roa
File:                     323830333a383335303a3a2f33322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          4jUolSrOddnenzrh9wpWouJAV1rSf4Gp9l+aKr1nl0g=
Subject key identifier:   8E:9B:2E:AD:15:08:65:96:F6:0B:08:E6:B8:F9:6F:0C:12:70:7E:98
Certificate issuer:       /CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B
Certificate serial:       062614CA6C000951171465C7C30AFA21B0124366
Authority key identifier: A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e2033333536.roa
Signing time:             Mon 30 Mar 2026 20:36:42 +0000
ROA not before:           Mon 30 Mar 2026 20:31:42 +0000
ROA not after:            Mon 29 Mar 2027 20:36:42 +0000
asID:                     3356
IP address blocks:        2803:8350::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 04:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:14:ca:6c:00:09:51:17:14:65:c7:c3:0a:fa:21:b0:12:43:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B
        Validity
            Not Before: Mar 30 20:31:42 2026 GMT
            Not After : Mar 29 20:36:42 2027 GMT
        Subject: CN=8E9B2EAD15086596F60B08E6B8F96F0C12707E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:e2:41:ab:31:c6:84:4f:de:89:c3:ea:11:
                    0a:cb:49:d5:d5:e8:3a:aa:84:19:ea:9d:19:d9:6a:
                    b0:5e:b3:b4:f4:a2:49:80:13:a9:d2:ec:a8:97:c3:
                    45:bf:a8:20:b6:b0:9e:a9:fa:f3:04:75:8c:e6:66:
                    e7:bb:a5:6f:66:8a:97:5a:d9:b3:ec:f5:4b:b5:bf:
                    1f:b6:99:f4:75:2c:d3:31:2f:20:d3:06:c2:4b:66:
                    a2:9c:1f:65:1e:8f:0c:8d:1e:21:51:60:8a:57:c8:
                    10:d5:11:7e:f7:7e:e5:38:91:69:ca:25:a2:d6:ed:
                    90:62:1e:4b:76:19:97:ec:ec:84:c8:54:9b:e9:eb:
                    48:0c:26:4b:ce:c2:b2:b3:93:94:b5:29:f1:11:a7:
                    61:33:03:df:72:ee:9f:d1:dc:2f:11:65:b9:0e:23:
                    71:57:b9:c2:ef:32:0a:02:2d:06:0d:e4:3c:e0:57:
                    f7:14:27:1d:3e:91:5a:52:c2:e7:0a:77:8a:62:39:
                    81:d6:44:b7:57:4e:6b:b9:fb:12:ed:b3:2f:a4:ac:
                    d1:6a:41:ad:ee:1d:c7:cf:45:76:0c:0e:61:54:55:
                    3b:7a:23:0d:a6:02:6a:2b:e5:3b:dd:98:d6:df:b3:
                    db:bf:e9:dc:31:97:f4:63:8d:fe:03:18:d3:e9:1a:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:2E:AD:15:08:65:96:F6:0B:08:E6:B8:F9:6F:0C:12:70:7E:98
            X509v3 Authority Key Identifier:
                keyid:A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/323830333a383335303a3a2f33322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8350::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:2d:f2:88:71:32:0f:e0:1b:f8:4f:71:8f:13:73:b3:3f:
         c7:f4:a4:cd:e9:aa:51:1b:25:f3:9f:90:2c:b4:e1:23:35:a7:
         f6:a3:31:b9:c1:60:8f:7f:74:5a:9b:98:ef:f0:ea:76:a3:16:
         4f:31:1c:42:25:4f:82:34:28:9b:9a:9f:a2:e8:44:df:3e:62:
         03:47:db:39:dd:a4:bd:ef:03:e4:63:bd:2b:0e:b3:cc:55:6e:
         da:5c:72:ee:1a:c7:8b:e0:73:a6:17:5d:69:2d:ca:3c:c0:b9:
         31:85:b5:53:35:ef:72:41:fa:4d:cf:6a:fc:30:8f:bb:d2:58:
         7d:61:8d:97:de:b2:71:ae:fc:75:c3:7c:b6:3e:65:4d:36:24:
         df:69:59:57:d1:07:d8:9e:c7:c2:0c:32:40:72:25:18:3d:1c:
         dd:3c:30:b0:e5:53:fe:89:de:15:a4:5c:00:63:6b:ac:1a:e8:
         64:54:72:da:86:03:4e:cc:cf:55:8b:e4:0a:d8:ac:e8:0f:9c:
         34:b4:db:33:8d:59:8c:6f:b2:bf:9e:c2:dd:ee:6c:17:53:e9:
         9f:05:d7:f6:fb:68:ac:f8:2e:ea:14:30:1d:4a:18:e4:71:c0:
         c1:1b:dc:05:32:d8:7f:ea:50:ee:15:0d:5c:ae:7f:63:15:99:
         b5:ad:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:08:48 2026 by rpki-client