Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71BECA372793A99D3E591C81902021327D583F419C5B0B1220FF86EC8AC4612B/0/323830333a643335303a3a2f33322d3438203d3e20323733383936.roa
File:                     323830333a643335303a3a2f33322d3438203d3e20323733383936.roa (raw, json)
Hash identifier:          IupK1JhDcoTtWetbIzT3PaCeUyIIa7FknBP43w0juqU=
Subject key identifier:   36:F4:40:11:92:8B:EB:B8:27:D7:DD:6D:90:7B:CD:5F:89:51:0D:11
Certificate issuer:       /CN=FA00C82AC77430DBBB71B042ED963939544C4283
Certificate serial:       609FA1780847B02F63519DE2FC9A97ED2CB4BF78
Authority key identifier: FA:00:C8:2A:C7:74:30:DB:BB:71:B0:42:ED:96:39:39:54:4C:42:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA00C82AC77430DBBB71B042ED963939544C4283.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71BECA372793A99D3E591C81902021327D583F419C5B0B1220FF86EC8AC4612B/0/323830333a643335303a3a2f33322d3438203d3e20323733383936.roa
Signing time:             Fri 12 Jun 2026 17:47:30 +0000
ROA not before:           Fri 12 Jun 2026 17:42:30 +0000
ROA not after:            Fri 11 Jun 2027 17:47:30 +0000
asID:                     273896
IP address blocks:        2803:d350::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71BECA372793A99D3E591C81902021327D583F419C5B0B1220FF86EC8AC4612B/0/FA00C82AC77430DBBB71B042ED963939544C4283.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71BECA372793A99D3E591C81902021327D583F419C5B0B1220FF86EC8AC4612B/0/FA00C82AC77430DBBB71B042ED963939544C4283.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA00C82AC77430DBBB71B042ED963939544C4283.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9f:a1:78:08:47:b0:2f:63:51:9d:e2:fc:9a:97:ed:2c:b4:bf:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA00C82AC77430DBBB71B042ED963939544C4283
        Validity
            Not Before: Jun 12 17:42:30 2026 GMT
            Not After : Jun 11 17:47:30 2027 GMT
        Subject: CN=36F44011928BEBB827D7DD6D907BCD5F89510D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:37:19:e6:4b:86:68:d6:65:42:0e:57:bb:
                    dc:76:cf:a4:6a:19:d4:fa:6f:10:89:d6:29:54:c1:
                    cd:8e:3c:e5:67:ec:4d:77:5a:79:bd:30:c0:5f:39:
                    ed:bf:08:34:92:ba:22:06:8f:bc:64:76:8f:b2:c4:
                    82:cf:7a:77:d9:9e:8d:24:1c:02:56:6b:b2:76:e1:
                    ad:41:24:3c:91:b4:93:dc:8b:de:45:5c:23:bd:3b:
                    6f:4a:60:ae:82:8e:00:d3:cd:c7:d7:da:b8:c8:0f:
                    c0:76:ee:41:05:2b:a5:45:23:6b:25:41:84:2e:ab:
                    b6:3a:7f:2c:0f:f8:60:7b:4a:38:13:8f:af:82:7f:
                    da:d3:8e:26:47:1e:2d:15:2e:ec:ff:a7:d2:17:b7:
                    ca:b4:ca:7a:00:78:a9:59:ce:eb:fd:11:ae:e8:9a:
                    01:d8:5f:b7:c7:5f:74:da:6f:91:91:e2:9a:27:bf:
                    6b:64:b6:99:f2:7f:fe:ed:ba:de:6d:32:8c:95:80:
                    7c:4a:42:a2:ec:b5:ef:c9:d4:00:3b:50:3b:63:91:
                    5d:a3:e4:32:aa:29:38:a4:65:e6:16:84:b6:5c:d8:
                    c9:d2:db:ee:c0:4f:1f:c3:fe:54:aa:cc:b3:08:fb:
                    0c:49:e2:c6:34:c2:08:04:5a:b8:b0:84:6b:31:57:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:40:11:92:8B:EB:B8:27:D7:DD:6D:90:7B:CD:5F:89:51:0D:11
            X509v3 Authority Key Identifier:
                keyid:FA:00:C8:2A:C7:74:30:DB:BB:71:B0:42:ED:96:39:39:54:4C:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71BECA372793A99D3E591C81902021327D583F419C5B0B1220FF86EC8AC4612B/0/FA00C82AC77430DBBB71B042ED963939544C4283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA00C82AC77430DBBB71B042ED963939544C4283.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71BECA372793A99D3E591C81902021327D583F419C5B0B1220FF86EC8AC4612B/0/323830333a643335303a3a2f33322d3438203d3e20323733383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d350::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:d6:1a:b2:80:f8:01:fd:c3:aa:d9:a5:71:9a:b8:a5:22:
         ae:27:be:44:42:2a:be:53:6c:ca:15:48:ad:21:9f:cb:8f:aa:
         d7:56:2f:9a:9f:1f:dc:29:10:24:c3:43:92:cb:69:97:4e:a6:
         49:2a:57:79:bd:63:fc:cc:f3:47:9a:4b:77:19:30:7f:82:86:
         55:fc:f9:ff:f2:bb:00:dd:3b:5a:8e:5d:62:ed:90:f9:a5:01:
         d6:f9:82:6b:c1:4d:f3:b5:b4:9a:cd:e6:ab:ea:5d:27:e1:7e:
         53:23:15:6d:b4:5b:cd:0c:ce:61:07:e4:0e:b5:86:8a:1d:c7:
         1d:55:1f:7a:ba:9a:14:cc:dc:42:bd:29:59:36:c4:a6:f1:34:
         92:aa:4d:70:25:8d:bc:38:56:f7:3d:40:3e:ab:0e:c8:e0:f1:
         4e:25:1b:60:22:98:f8:d3:3a:e7:c9:78:80:01:aa:f3:17:31:
         fb:21:91:2a:f9:69:37:2d:9e:7f:59:1a:10:ca:91:08:8f:a1:
         81:5a:bc:57:b1:ed:b4:8c:01:86:53:a2:1c:bb:3d:16:bf:38:
         84:e6:ff:72:db:ba:1f:7d:4e:41:a9:8d:14:0b:e9:10:69:23:
         36:60:72:b2:a1:03:99:f8:89:d3:03:3d:36:65:86:c3:e1:e3:
         9a:46:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:14:30 2026 by rpki-client