Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/323830333a3165303a3a2f33322d3438203d3e20323639393930.roa
File:                     323830333a3165303a3a2f33322d3438203d3e20323639393930.roa (raw, json)
Hash identifier:          UIYxEHk6J7EulraKBIjqa9SBtznmzEYAo6rFqhUa+3k=
Subject key identifier:   5D:90:46:80:8B:10:51:1E:13:3C:2D:DB:00:72:53:66:AD:6B:C0:9D
Certificate issuer:       /CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1
Certificate serial:       1CC84C35667CF33A9F4D8D65423B0876F4885E63
Authority key identifier: 5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/323830333a3165303a3a2f33322d3438203d3e20323639393930.roa
Signing time:             Thu 16 Apr 2026 21:40:00 +0000
ROA not before:           Thu 16 Apr 2026 21:35:00 +0000
ROA not after:            Thu 15 Apr 2027 21:40:00 +0000
asID:                     269990
IP address blocks:        2803:1e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c8:4c:35:66:7c:f3:3a:9f:4d:8d:65:42:3b:08:76:f4:88:5e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1
        Validity
            Not Before: Apr 16 21:35:00 2026 GMT
            Not After : Apr 15 21:40:00 2027 GMT
        Subject: CN=5D9046808B10511E133C2DDB00725366AD6BC09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:d6:ca:b8:90:c8:4e:f0:4a:77:5f:24:46:
                    29:b4:63:29:d1:50:ae:47:d7:4c:2e:7c:83:cc:4f:
                    fc:5e:d3:95:c0:21:4d:46:23:dd:da:04:33:2e:68:
                    96:1b:21:ff:43:25:8c:22:50:c2:63:c9:52:b4:b6:
                    27:a4:48:a9:66:ed:7c:f9:fe:c3:a2:5b:bc:63:96:
                    73:cd:10:f7:62:e0:fb:42:9d:bc:e4:ff:0a:27:6f:
                    4a:e9:c9:ff:60:90:5f:f0:96:01:ab:8a:21:1a:35:
                    ff:da:6d:d1:4f:74:11:c0:4a:fb:f7:5f:16:2d:c5:
                    e4:56:59:d5:7e:34:38:1f:e0:a8:53:12:14:bc:76:
                    8b:97:51:58:ee:db:c9:42:30:86:5b:f5:e0:c0:a0:
                    9d:c5:62:d2:1f:2f:c1:e0:a0:78:9c:a2:1b:fe:d0:
                    45:53:b5:15:ab:76:38:23:7d:b1:80:1f:dc:cc:f3:
                    0e:bf:1f:4b:b1:7b:86:f4:ae:84:46:9a:5e:18:69:
                    df:c9:fc:51:e3:18:e0:64:1a:69:f5:aa:37:bd:90:
                    84:52:ba:f9:df:f4:f6:f2:38:89:35:24:0f:36:f8:
                    c8:32:02:49:bd:3f:59:4b:d5:c7:8a:49:05:8b:fa:
                    8b:d5:93:64:81:8a:bc:74:66:18:54:41:3f:d6:7b:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:46:80:8B:10:51:1E:13:3C:2D:DB:00:72:53:66:AD:6B:C0:9D
            X509v3 Authority Key Identifier:
                keyid:5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/323830333a3165303a3a2f33322d3438203d3e20323639393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:93:14:87:08:26:10:09:8d:5b:ef:08:8f:e1:5f:ab:b8:46:
         1b:89:9e:1b:a4:31:9e:a3:c9:45:b4:c7:3f:97:d8:1b:e6:dc:
         48:49:19:7c:ec:46:12:42:ce:a8:29:ee:2e:ed:52:47:c3:cf:
         31:29:ca:84:04:30:12:36:2f:eb:4b:5a:79:a4:58:0d:e2:c4:
         22:73:6e:91:6c:24:15:8e:2f:aa:a9:e1:52:24:3f:10:dd:5a:
         45:f6:e2:39:be:c0:af:ce:d6:96:5e:aa:04:ee:a5:7d:76:be:
         25:9a:53:07:c0:88:60:4c:bf:90:81:b4:18:06:2c:14:e0:bc:
         4c:f2:eb:8a:e5:74:51:41:e2:aa:b4:93:73:15:3e:c9:5e:2d:
         3c:7a:6e:b0:98:c8:ff:0f:cd:ee:49:41:4b:d3:4c:55:78:4c:
         42:e0:53:de:18:5b:63:41:e5:fa:4a:3a:b0:b2:85:57:fa:5c:
         a3:57:3a:ae:ba:b9:a2:2b:5c:64:49:07:77:9e:9f:77:3b:60:
         36:b0:62:35:26:f1:61:e5:53:21:02:d0:1b:df:f3:a1:30:d5:
         8d:06:54:3b:fb:83:63:c7:fc:9d:97:de:7c:9f:c2:58:d8:d6:
         ee:9a:6a:77:51:5e:71:d3:c3:6c:1d:d7:ef:30:dc:bd:37:77:
         38:8d:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:04:32 2026 by rpki-client