Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3a2f33322d3332203d3e20323732383737.roa
File:                     323830333a326139303a3a2f33322d3332203d3e20323732383737.roa (raw, json)
Hash identifier:          xN4Tqd2cvneBrACOnM4UWqR3RNre8ATrwE2kICv5N7k=
Subject key identifier:   34:D6:8E:65:CB:E2:09:24:88:C1:04:65:B9:3D:81:D8:7B:FE:1C:F2
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       5EA96C4220B622A1A2A9489673903E4479817975
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3a2f33322d3332203d3e20323732383737.roa
Signing time:             Mon 08 Jun 2026 12:05:00 +0000
ROA not before:           Mon 08 Jun 2026 12:00:00 +0000
ROA not after:            Mon 07 Jun 2027 12:05:00 +0000
asID:                     272877
IP address blocks:        2803:2a90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 09:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a9:6c:42:20:b6:22:a1:a2:a9:48:96:73:90:3e:44:79:81:79:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Jun  8 12:00:00 2026 GMT
            Not After : Jun  7 12:05:00 2027 GMT
        Subject: CN=34D68E65CBE2092488C10465B93D81D87BFE1CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:90:39:48:ff:5d:10:4d:7c:2c:79:50:21:c4:
                    ff:6b:1d:d5:fd:ee:f1:8a:ab:f2:08:c4:ad:2c:e2:
                    56:69:5d:d2:d2:4c:f3:e7:7a:18:56:0e:25:37:05:
                    7a:4d:ea:4d:a1:40:32:74:20:5b:2a:6c:4f:43:d4:
                    e2:0f:9f:7d:70:57:d3:0c:e3:88:e0:e2:dd:2f:7e:
                    72:9f:be:32:d1:b3:9a:d0:43:74:4e:c2:15:de:4e:
                    0a:5d:eb:81:c7:9c:04:7a:27:ae:30:87:f9:1f:37:
                    8e:d8:de:46:e4:5e:17:2e:c9:59:b1:4f:7b:4a:4d:
                    56:95:de:f1:fe:96:4c:fd:7c:d2:a3:d1:b6:6d:87:
                    2f:ad:ac:db:e6:ed:6f:9a:86:79:98:70:9b:14:14:
                    63:93:0e:41:01:db:1d:e2:b5:70:a8:6f:1f:29:8b:
                    10:41:89:be:4f:27:67:55:68:c7:ee:10:85:1f:71:
                    a2:d8:db:a7:79:b8:26:f9:d8:76:3a:57:2c:6c:9b:
                    3c:00:f4:5e:8e:2f:90:5e:38:f5:43:73:95:de:af:
                    5a:71:fc:46:7e:1e:96:08:cb:bf:6a:c8:80:70:65:
                    a8:17:b6:ee:79:e9:34:e4:e7:4a:fb:07:8f:f2:f0:
                    97:7c:12:f6:42:57:79:01:b3:39:00:b3:42:3c:5f:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:8E:65:CB:E2:09:24:88:C1:04:65:B9:3D:81:D8:7B:FE:1C:F2
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3a2f33322d3332203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:da:be:1e:37:39:95:cd:ad:e5:2d:cf:ea:9a:a7:e0:f7:
         18:5f:62:96:c0:db:21:fa:1c:78:30:02:8c:11:de:00:fd:ab:
         b3:d8:a3:50:b8:5a:20:db:0c:da:c3:1c:75:9f:48:0b:e4:6b:
         91:e9:98:67:b2:71:d6:28:ba:35:26:65:e1:f7:88:5c:78:37:
         5c:a8:c1:bd:8f:5d:0a:6d:80:e5:3a:be:fa:63:45:f6:10:d6:
         63:10:3e:4f:54:21:8d:40:82:89:67:3e:f9:9c:ce:ae:98:cf:
         ae:a0:76:44:ff:47:dc:54:3b:04:fa:c1:c8:a1:c5:a6:4b:28:
         2c:84:88:ec:32:34:c2:c4:e0:4a:aa:1c:15:d1:04:eb:c1:37:
         82:ed:50:2a:6e:61:41:f1:9c:7f:53:49:2b:ee:50:d5:64:79:
         e7:40:af:98:31:4e:a4:db:ca:54:ed:20:38:20:a6:a0:e1:2a:
         72:9e:e7:44:3f:82:52:cf:8b:47:c0:9c:02:86:21:c7:84:f7:
         8d:c8:33:4e:3d:31:dd:6d:d7:f0:89:a1:84:71:53:8f:a2:59:
         19:88:de:bb:d5:fa:d2:40:7e:a5:73:49:7f:2f:0e:ff:63:f8:
         bb:47:c2:16:4a:e8:b7:d1:de:5a:d2:09:61:37:e5:e9:0c:83:
         94:b6:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:34 2026 by rpki-client