Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3930303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a3930303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          +XhM/IP1abUL13gCa2xeOXrvDcG90UDed78YYY8odlk=
Subject key identifier:   FF:43:E3:4F:16:FD:FC:2D:48:B8:3D:4C:09:09:20:BD:66:79:9B:BA
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       C370C14DED74B4D9DA3999A665CB8C31BA2769
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3930303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Fri 29 May 2026 00:44:41 +0000
ROA not before:           Fri 29 May 2026 00:39:41 +0000
ROA not after:            Fri 28 May 2027 00:44:41 +0000
asID:                     273123
IP address blocks:        2803:450:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c3:70:c1:4d:ed:74:b4:d9:da:39:99:a6:65:cb:8c:31:ba:27:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: May 29 00:39:41 2026 GMT
            Not After : May 28 00:44:41 2027 GMT
        Subject: CN=FF43E34F16FDFC2D48B83D4C090920BD66799BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:ba:6b:cf:33:68:6e:c3:b8:ff:7d:ce:8f:
                    c9:3c:73:a1:bd:9c:2d:b5:3a:a7:b4:4b:72:3c:49:
                    f1:cd:a0:7a:6f:68:83:95:fd:4c:45:1b:fe:77:8d:
                    4b:e5:88:8d:82:9d:8a:e3:ce:54:5b:71:92:eb:48:
                    56:e2:18:1b:59:65:d3:fb:48:e9:b3:5c:b9:81:dc:
                    27:cf:03:9a:38:3f:e4:70:64:e3:d3:61:ce:5e:3a:
                    11:93:57:44:dc:0d:e5:ab:17:dc:df:c8:4e:ea:05:
                    35:44:9d:66:38:16:06:ff:a9:34:4d:b5:55:3b:f2:
                    38:f6:c5:99:43:77:be:1b:ed:c5:13:51:63:a1:f9:
                    6b:e1:ba:0f:a7:70:f8:40:aa:bc:cd:e2:93:40:88:
                    dd:cf:9e:c9:1d:73:61:0e:3e:00:5d:4c:dc:10:42:
                    3b:f8:f5:a3:b9:db:99:3c:d7:6d:4c:59:06:b2:1b:
                    92:4e:cf:cb:70:5a:b4:48:7b:aa:32:a9:fe:fa:9d:
                    aa:34:71:4e:63:b5:b3:eb:83:af:41:2f:36:b2:d5:
                    8e:4f:13:3f:59:ba:e2:01:92:21:76:ea:09:f8:bd:
                    8e:50:fe:24:b1:64:dc:e6:06:56:db:69:68:eb:63:
                    55:cd:6e:09:02:0f:cb:fc:e6:e3:c7:d5:cf:f5:a8:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:43:E3:4F:16:FD:FC:2D:48:B8:3D:4C:09:09:20:BD:66:79:9B:BA
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3930303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:ec:05:7e:94:b1:b9:08:9e:4c:4f:53:b2:41:75:86:c9:
         f6:70:35:7b:32:d1:e7:a5:7b:f9:c9:0b:16:d0:f5:85:4d:c2:
         c3:88:b1:b8:3e:4b:5f:09:b2:09:80:90:c6:33:e8:c0:f4:90:
         8d:d5:d0:d1:3d:c9:30:65:e7:95:ee:f7:81:34:17:33:8a:33:
         9e:d4:8a:f0:2a:4e:4e:48:bb:9e:81:b2:14:1f:fa:a7:2a:16:
         f9:43:a1:29:45:2f:28:44:c6:e3:3c:4e:49:75:a5:34:6b:9e:
         34:2d:76:b1:a3:2a:af:88:df:e6:e2:7d:73:63:4e:db:cd:7d:
         26:59:5c:48:37:b7:6a:99:19:b3:ff:61:6d:ab:a3:f2:28:f6:
         fa:48:71:36:63:b9:87:73:83:d2:27:fc:3f:08:00:42:b2:38:
         bc:c8:b4:2e:7a:dd:5d:fb:45:5a:60:04:47:44:87:5d:72:9e:
         3d:08:3c:62:51:05:aa:fc:68:c9:d7:47:61:72:49:88:38:b4:
         4d:28:34:2d:7f:05:b1:70:5f:8d:8e:06:9a:cb:5a:f6:30:34:
         65:9f:80:0e:4e:6e:c2:7f:9a:79:7e:0e:08:6e:dc:60:4f:5b:
         b4:fb:ba:7c:c2:f8:c2:15:bc:98:8c:15:8a:92:03:dd:d1:f9:
         28:c4:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:41:36 2026 by rpki-client