Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a383030303a3a2f33342d3334203d3e20323639383131.roa
File:                     323830333a336236303a383030303a3a2f33342d3334203d3e20323639383131.roa (raw, json)
Hash identifier:          PoQdyYrpimDxgq5FEkoqW+TMis/zsoJ1P6GRSQVTcLs=
Subject key identifier:   A0:4B:4D:8C:BF:3F:08:A4:3C:D0:EE:61:E1:16:AA:CC:DF:78:AD:51
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       31E192691058A0E783DD09BDC3AE5E8E82F88C68
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a383030303a3a2f33342d3334203d3e20323639383131.roa
Signing time:             Tue 02 Jun 2026 03:25:20 +0000
ROA not before:           Tue 02 Jun 2026 03:20:20 +0000
ROA not after:            Tue 01 Jun 2027 03:25:20 +0000
asID:                     269811
IP address blocks:        2803:3b60:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:92:69:10:58:a0:e7:83:dd:09:bd:c3:ae:5e:8e:82:f8:8c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Jun  2 03:20:20 2026 GMT
            Not After : Jun  1 03:25:20 2027 GMT
        Subject: CN=A04B4D8CBF3F08A43CD0EE61E116AACCDF78AD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:94:08:79:6f:94:c7:3c:63:7a:6c:07:12:
                    60:1f:43:dd:84:ea:20:34:ad:cc:3e:f1:49:74:c9:
                    f0:7c:9f:82:f2:4d:07:2c:aa:57:10:ef:2b:ae:1f:
                    70:32:99:6d:75:d5:ad:69:88:78:6e:ba:60:10:92:
                    55:ca:21:af:9b:63:64:16:a3:3d:3b:67:d0:ea:6d:
                    f7:77:7e:4c:c8:ab:93:b2:81:da:51:8c:94:fd:6b:
                    ce:ea:97:a0:34:a6:58:5f:85:7a:db:63:18:64:fb:
                    32:ab:98:81:29:8a:57:8e:93:8a:ad:37:7e:54:18:
                    54:a1:84:96:87:ea:83:9e:15:4f:1e:2c:ae:87:ad:
                    6f:86:c3:c6:f9:52:9b:96:2e:88:c4:5a:a8:56:61:
                    88:b0:86:5c:2b:1a:13:91:dd:3c:ff:03:d6:19:da:
                    4f:12:09:97:b5:fa:14:50:b4:37:ad:a2:22:3b:80:
                    d2:ae:bd:8c:e3:7a:23:08:8b:50:80:c8:c0:23:2f:
                    94:36:be:9d:02:11:7c:6f:a8:94:33:27:63:75:7f:
                    03:14:d9:72:0d:5d:d2:cd:90:e8:74:f2:0d:d9:89:
                    a3:34:92:73:57:e9:33:c5:d5:ef:6a:e9:6c:ff:ed:
                    be:08:83:55:60:d2:23:5f:1f:73:60:7a:da:f0:aa:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:4D:8C:BF:3F:08:A4:3C:D0:EE:61:E1:16:AA:CC:DF:78:AD:51
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a383030303a3a2f33342d3334203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:d9:92:57:ee:5c:6f:21:46:2c:49:b9:fe:30:b1:b5:f2:c3:
         05:4a:4a:59:22:de:b4:d5:b4:16:dd:f1:19:20:e9:e7:7d:2e:
         ad:2e:49:7e:ec:d7:58:54:15:88:1f:cf:6d:88:b1:3c:f6:4b:
         fc:8c:b6:96:49:8c:c9:55:90:17:35:0e:ab:a0:b7:68:f9:45:
         85:d9:fa:18:51:c3:28:bd:e9:a6:bf:b2:4f:07:5f:46:9b:8e:
         44:ea:62:29:41:62:a0:14:2b:ae:ae:7c:23:61:81:0c:7d:02:
         a0:12:0a:97:72:15:94:a4:25:be:da:6d:d9:79:82:41:ee:26:
         48:90:37:a7:de:e3:bf:44:16:3e:bf:37:7d:21:68:4c:0b:04:
         a0:ea:0d:01:aa:cc:ad:fd:9a:8a:6c:87:e6:d9:f0:58:2c:ea:
         dd:14:31:7c:97:bd:58:f3:e6:d7:eb:17:d6:36:43:8c:2a:b5:
         2f:a4:8e:a4:f4:64:4e:7c:51:40:f7:a6:17:cc:ea:75:59:08:
         bb:c1:e0:95:86:df:d3:6a:6d:77:f8:73:50:f1:64:6a:8b:a7:
         d8:90:e2:23:e5:bd:b0:b4:69:40:e4:52:07:85:39:a3:55:f3:
         87:00:4a:39:c3:8a:c5:1e:47:21:f7:01:87:01:1e:d1:66:a9:
         6a:41:16:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:42 2026 by rpki-client