Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          OpuT4N6yCd13Qmy+2mAklVbFopltzQ2ofIOqggAvkYY=
Subject key identifier:   3F:71:A1:AD:C6:5B:3B:5A:D9:61:7A:F1:D9:4C:C6:23:92:FB:9B:78
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       387234B11FC359352510D6DD934067CE20F83175
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 29 May 2026 00:44:40 +0000
ROA not before:           Fri 29 May 2026 00:39:40 +0000
ROA not after:            Fri 28 May 2027 00:44:40 +0000
asID:                     273123
IP address blocks:        2803:450:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:72:34:b1:1f:c3:59:35:25:10:d6:dd:93:40:67:ce:20:f8:31:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: May 29 00:39:40 2026 GMT
            Not After : May 28 00:44:40 2027 GMT
        Subject: CN=3F71A1ADC65B3B5AD9617AF1D94CC62392FB9B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:e8:9c:1d:0d:31:f6:4a:3c:5b:d7:84:b4:
                    19:81:e9:cc:02:f2:e3:a6:ae:2c:c3:38:d3:05:21:
                    59:f4:c1:43:c7:2a:85:1b:0a:f1:a9:bd:08:18:17:
                    4a:f1:89:17:d5:f3:97:cb:20:b0:8c:53:be:39:7d:
                    a3:4f:65:49:56:8e:b8:50:ae:27:ce:2a:e1:83:1b:
                    c7:72:c9:dc:65:b8:1b:b7:4b:78:12:37:32:a2:48:
                    cc:78:75:f4:ce:8e:2c:50:4a:a0:2e:aa:54:b9:e8:
                    3e:73:df:48:96:1c:17:c1:97:00:ac:2a:50:25:ac:
                    c0:7b:d2:05:2e:aa:57:e6:42:83:ee:27:06:cd:41:
                    49:85:ae:c8:a3:bb:6d:bd:39:0f:33:20:f7:eb:ec:
                    64:4a:23:6f:50:0a:f6:b7:6c:c1:d4:c2:ac:24:75:
                    4c:9b:cc:39:19:75:8e:7f:98:85:3e:99:1d:5c:63:
                    03:3d:20:cf:f6:3d:ac:03:d7:02:70:92:61:e9:39:
                    c1:6c:b1:8b:12:a7:55:95:91:98:46:cb:ab:21:1f:
                    01:ac:38:43:d9:f7:0a:45:4a:1d:89:1b:34:23:9f:
                    52:cc:b0:97:30:56:4b:b2:1a:ce:57:d4:bf:3b:f7:
                    e7:00:d5:26:9c:db:8b:b6:82:72:d5:0f:73:7b:5e:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:A1:AD:C6:5B:3B:5A:D9:61:7A:F1:D9:4C:C6:23:92:FB:9B:78
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:a1:40:0c:b3:74:ae:49:77:23:c5:5e:45:c0:d3:87:de:
         a4:7c:a7:f1:f6:4c:6b:45:08:77:7d:a2:67:3f:a1:ce:fa:70:
         6d:c2:fa:9e:8c:df:b0:c8:37:16:b1:17:45:ed:ec:90:3b:c4:
         87:43:73:08:32:40:90:f1:90:39:f0:25:b1:e6:ff:6d:d0:cb:
         63:cf:76:98:28:bb:9e:6f:4f:c4:70:64:fe:e6:47:61:93:1a:
         9c:71:bb:8d:66:69:f1:10:0f:91:76:1c:37:2f:4e:72:f7:f3:
         4b:f8:3a:c2:ca:94:ce:64:04:ab:20:3d:fd:b6:0c:4f:04:ab:
         b7:22:79:71:5a:c7:ba:98:49:cc:a4:21:57:5c:f0:75:46:4a:
         5c:4f:47:3a:cf:dd:cd:4b:e7:9c:ad:c1:b4:3c:46:6d:67:17:
         1b:29:7e:50:87:dd:14:d8:37:89:8c:1e:16:72:fa:60:a7:2e:
         8c:94:82:ed:18:fd:93:fa:40:fe:bc:7a:39:e1:50:07:47:de:
         4d:95:d0:1c:d4:f6:60:ec:3a:70:d8:b3:bf:ec:17:51:3e:af:
         ad:ef:64:06:fb:a6:af:2a:1d:57:bb:7c:48:bc:82:7b:c7:82:
         b7:b5:ff:7d:54:4e:61:80:f3:45:ed:47:82:d1:12:ec:e5:a6:
         4a:54:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:42:19 2026 by rpki-client