Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          p0L2EEDpcl6lWFHm/greZrpvmXpfqgQD/ZzzynolPsg=
Subject key identifier:   EA:67:C7:7D:F9:B6:74:C6:4C:C5:FF:61:4D:E0:49:A1:95:AB:94:48
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       7927D598CEBDAD3830540EF8A2A4A8546850752D
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 29 May 2026 00:44:40 +0000
ROA not before:           Fri 29 May 2026 00:39:40 +0000
ROA not after:            Fri 28 May 2027 00:44:40 +0000
asID:                     273123
IP address blocks:        2803:450:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:27:d5:98:ce:bd:ad:38:30:54:0e:f8:a2:a4:a8:54:68:50:75:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: May 29 00:39:40 2026 GMT
            Not After : May 28 00:44:40 2027 GMT
        Subject: CN=EA67C77DF9B674C64CC5FF614DE049A195AB9448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:4b:dc:55:d4:22:3c:f4:b1:fb:00:11:ba:
                    a5:b9:36:ad:cb:b0:fd:c8:f3:c8:dc:49:9f:6f:dc:
                    55:37:9c:7f:36:a1:a5:91:c2:51:b3:cc:3b:55:51:
                    07:40:b8:e7:37:26:45:16:25:55:b8:73:b5:dd:0b:
                    41:5a:28:3c:b6:aa:c0:03:54:81:a4:95:2a:95:12:
                    40:07:8a:83:eb:20:0d:e0:0f:fb:56:24:21:e3:6d:
                    02:08:d9:d8:b1:87:87:3f:eb:a2:4c:3d:5d:51:26:
                    24:f6:9c:4f:ad:9a:82:7e:96:2a:9a:d2:b8:78:d2:
                    28:6e:9f:e5:10:6c:ce:82:6d:76:ee:d7:79:f0:26:
                    93:2e:23:db:55:0c:26:e1:6e:b5:b0:e6:8e:34:d9:
                    a4:e1:03:37:60:00:a2:95:75:b1:3c:2b:15:d2:12:
                    a7:db:5d:a6:a1:67:d2:e9:33:2b:54:f1:0d:1c:cd:
                    5d:29:b8:ec:1a:53:ad:d6:bb:da:97:94:4d:42:e5:
                    a1:51:84:d6:5c:6c:3f:ae:7d:0c:e3:29:00:16:3e:
                    76:09:dd:ad:08:7c:8e:ca:55:ca:c0:a3:94:ed:2b:
                    69:9a:cf:20:a6:cb:d5:d6:31:62:0b:8b:da:13:f8:
                    92:ca:1c:d8:95:5e:cc:93:16:9f:87:fa:b4:ef:94:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:67:C7:7D:F9:B6:74:C6:4C:C5:FF:61:4D:E0:49:A1:95:AB:94:48
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:49:a0:7f:05:02:15:45:8b:cc:ba:42:d4:4e:ce:fb:77:7c:
         8f:75:74:45:e4:0c:c7:ad:ae:e5:53:92:3e:20:e6:49:1c:72:
         62:70:00:2b:32:e0:db:44:5c:2e:60:1a:46:86:06:5f:ed:69:
         2f:f3:32:db:ec:d9:9b:ba:71:25:3f:43:fa:20:22:3d:8c:6f:
         0c:43:5a:4c:3c:c5:23:b4:12:b9:ba:32:2c:aa:c0:8b:07:03:
         dd:d5:2c:65:21:c8:ae:c4:26:fe:0c:cc:d8:1c:a6:d9:4b:c3:
         ff:f2:9b:11:bd:ef:ef:14:99:43:57:d5:58:47:7c:b3:d5:77:
         f2:4d:c5:44:98:c8:b8:8e:96:8d:dc:95:aa:79:ee:76:d7:9e:
         9a:e6:61:66:b4:1e:32:aa:f7:1b:32:5d:c1:90:82:a1:d9:e2:
         b3:47:78:f5:39:e9:3d:9d:e3:35:6c:b2:13:34:59:81:42:1f:
         33:e1:89:c4:45:03:b4:dc:20:c1:dc:8a:de:77:be:22:2d:36:
         2f:d5:ac:d4:b9:69:90:a7:42:b6:72:df:b6:c5:df:ed:4a:5a:
         00:e7:4e:95:21:4d:ca:1e:af:4c:1e:f4:50:68:19:c6:f3:99:
         3b:ce:9d:90:9c:c0:bb:7d:2c:3c:b5:29:5b:7c:11:07:32:f0:
         47:a0:5b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:40:45 2026 by rpki-client