Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203634333339.roa
File:                     323830333a323634303a3a2f33322d3332203d3e203634333339.roa (raw, json)
Hash identifier:          pNqcmZ4Jg1l8QRNPCEfguWPIr1FRgPLHqPdRkf9AISU=
Subject key identifier:   77:EF:A3:3D:4C:4F:D7:EF:A8:0C:D8:EB:DE:0D:DD:2E:21:4D:45:FA
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       5C137D1F9BCA5EA88B4A5496948ACB253BDA804D
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203634333339.roa
Signing time:             Wed 03 Jun 2026 19:46:26 +0000
ROA not before:           Wed 03 Jun 2026 19:41:26 +0000
ROA not after:            Wed 02 Jun 2027 19:46:26 +0000
asID:                     64339
IP address blocks:        2803:2640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:13:7d:1f:9b:ca:5e:a8:8b:4a:54:96:94:8a:cb:25:3b:da:80:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Jun  3 19:41:26 2026 GMT
            Not After : Jun  2 19:46:26 2027 GMT
        Subject: CN=77EFA33D4C4FD7EFA80CD8EBDE0DDD2E214D45FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:dc:54:95:b3:a1:d7:8a:66:ff:17:d6:64:
                    b7:e0:60:09:dd:e9:ce:f7:09:01:d6:44:e9:e8:73:
                    97:56:e2:57:dc:b2:15:00:23:3e:a3:4f:8c:2c:e7:
                    37:78:a7:80:02:0d:bb:e5:8a:9a:50:f6:56:f1:48:
                    99:69:30:40:b2:8f:85:f4:e7:54:1f:de:a9:62:58:
                    b9:07:17:a1:78:53:00:c1:53:d7:d3:6f:f1:db:0e:
                    6d:7a:23:54:62:dc:ad:59:fe:56:dd:25:90:43:86:
                    d8:2f:10:9a:cb:f7:83:b5:2d:98:5e:10:c0:b3:54:
                    41:79:f5:8f:d3:04:a1:e9:15:0c:18:ca:a6:60:22:
                    1e:17:0d:0f:77:1a:98:ac:e0:93:e8:e0:ee:a0:06:
                    23:29:81:b3:55:54:3d:6f:2d:19:59:09:d0:90:dd:
                    cd:13:38:09:48:63:24:02:1c:c7:c3:ed:5d:d5:9d:
                    47:55:c4:08:f3:45:4e:cd:a9:42:4e:1d:5c:31:7a:
                    3c:a6:05:57:80:4f:18:7d:60:7f:ec:11:c5:9b:6f:
                    3b:47:af:00:1c:8e:de:74:24:01:6f:c3:74:1a:0a:
                    c7:6e:bb:15:7a:d6:60:07:2d:70:dd:60:84:3e:0f:
                    af:8f:a0:ba:ac:0a:2e:fc:b5:a6:48:83:c1:5d:a1:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EF:A3:3D:4C:4F:D7:EF:A8:0C:D8:EB:DE:0D:DD:2E:21:4D:45:FA
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203634333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:f7:83:10:40:4b:69:d8:ae:42:8e:f5:d0:ef:71:39:1e:
         88:42:6e:e8:14:e1:4b:6c:72:bf:c5:71:72:2e:72:bd:1d:3a:
         bf:88:8f:c8:ac:74:66:4d:18:aa:a2:84:fb:a9:79:7d:73:1d:
         23:24:d6:94:ee:00:6d:9b:a5:dc:e3:13:39:06:d7:ea:9d:ef:
         49:60:5a:55:d9:50:e5:b1:04:d4:92:12:a2:ed:fc:f6:ab:2a:
         c2:53:f6:c7:ea:62:b5:9e:b1:14:6f:8b:46:49:f8:bc:91:7a:
         d2:cc:25:e1:8b:60:a8:e9:6e:36:9a:a9:42:04:5c:c9:f6:7c:
         00:19:1f:db:a5:81:27:78:c7:48:a1:71:d1:0e:8c:2d:e4:c7:
         7e:b8:d8:d9:5e:67:51:3b:61:2f:68:05:fe:92:3e:d3:26:54:
         42:7d:4e:6e:bb:d7:34:49:cc:30:18:d6:96:e1:2d:42:76:fc:
         99:9d:dc:57:5b:b3:5d:cc:d6:e4:05:24:e8:cf:95:5a:59:62:
         bf:7c:4d:a3:dc:e2:26:44:1b:0e:1b:28:df:64:a5:41:60:da:
         31:d6:d9:9a:d3:7c:10:f0:29:02:f3:82:e3:71:3c:ce:93:e1:
         60:25:f5:f2:ae:8c:ba:53:51:b1:88:3f:bf:f4:bd:39:4b:82:
         df:f3:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:38:46 2026 by rpki-client