Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          1+QfqGJbZVOXDGoLXLpnxafCeyZm3IZ/qCUEApNWKWM=
Subject key identifier:   C6:45:2F:27:5C:0B:44:69:C5:48:B9:75:A7:D3:D0:8A:5C:EC:48:B3
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       529DFE0E15A41C4096F418E63B6F68EE8C9109A7
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 29 May 2026 00:44:43 +0000
ROA not before:           Fri 29 May 2026 00:39:43 +0000
ROA not after:            Fri 28 May 2027 00:44:43 +0000
asID:                     273123
IP address blocks:        2803:450:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9d:fe:0e:15:a4:1c:40:96:f4:18:e6:3b:6f:68:ee:8c:91:09:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: May 29 00:39:43 2026 GMT
            Not After : May 28 00:44:43 2027 GMT
        Subject: CN=C6452F275C0B4469C548B975A7D3D08A5CEC48B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:66:c3:97:05:ee:f3:4a:44:d6:c9:0b:d0:
                    af:bb:73:84:12:be:f9:b0:9b:de:98:20:6e:77:c4:
                    1f:a0:27:08:aa:73:51:47:99:44:a2:2b:09:12:d0:
                    f8:5a:a7:88:b0:f1:2c:80:a6:84:1e:c9:e0:0e:32:
                    7b:52:d1:b8:f1:a7:bd:b8:62:da:64:bb:87:a6:e8:
                    33:f3:2b:2b:b4:98:fe:e3:83:55:e9:07:25:c8:93:
                    24:9b:31:09:65:e7:15:8b:22:39:9c:9c:1a:62:53:
                    11:d8:44:35:05:aa:f9:b2:04:b5:41:49:85:28:06:
                    1b:be:ff:08:71:fc:e8:c1:db:9e:9c:82:09:c1:9c:
                    fd:67:39:a7:d9:8a:52:3d:7c:fb:d1:87:81:88:71:
                    80:01:31:71:c2:3b:02:da:36:43:2f:4e:96:af:d3:
                    c3:00:ac:58:f2:fd:0c:82:45:fa:1e:7c:eb:57:ab:
                    77:87:2e:f7:f8:7b:ee:bd:11:db:3e:6f:01:82:d7:
                    67:9f:96:78:78:c8:15:86:49:df:c6:a0:d6:11:34:
                    ed:7c:c7:ed:a6:33:8a:e0:9b:ca:00:69:f5:30:01:
                    bd:8f:06:37:57:88:f7:40:27:ec:5d:bd:01:b6:87:
                    fd:73:ec:18:2e:99:d9:eb:7c:58:d5:ac:de:e2:4d:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:45:2F:27:5C:0B:44:69:C5:48:B9:75:A7:D3:D0:8A:5C:EC:48:B3
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:52:a4:4e:0e:ff:9b:bd:3b:33:ac:18:53:b1:e1:d9:bc:c4:
         54:fd:07:b9:43:41:7a:d6:57:ad:ee:c6:5c:70:b3:57:68:35:
         58:0d:1a:f9:79:7a:0d:91:ba:87:81:1c:90:51:40:5b:8f:fa:
         58:40:5f:65:63:4d:3a:80:7b:53:eb:40:37:41:4e:47:22:b6:
         56:b3:60:b7:9b:19:4f:13:cc:29:40:7d:2a:d1:f6:12:cd:e1:
         94:7c:5f:7e:da:86:cb:49:3b:07:20:c1:42:6b:5d:1e:51:a4:
         56:38:be:d8:bd:b5:2f:d1:ed:83:9e:e5:f0:5c:aa:59:94:aa:
         d7:c7:9b:61:a9:64:04:ee:4a:1a:8b:e6:c5:68:b2:af:28:ec:
         62:3c:83:48:b7:6c:01:ed:96:7a:aa:eb:b0:e1:98:99:68:c4:
         0a:6e:4e:78:d7:ce:49:f6:24:60:d9:52:97:57:35:9a:9f:9b:
         c7:f7:ce:f7:a0:2b:84:ad:b2:03:59:11:90:be:c4:2a:19:e9:
         73:be:a3:96:d0:99:15:09:7d:d3:5f:cf:55:40:a5:b8:9a:f4:
         d5:c8:5f:47:a6:a2:72:9a:e6:84:75:be:25:04:ca:ed:61:61:
         1c:c0:8d:d0:b1:29:f5:f5:a5:74:ad:e9:b7:bf:37:67:83:ae:
         ef:6f:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:42:56 2026 by rpki-client