Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33342d3334203d3e20323639383131.roa
File:                     323830333a336236303a633030303a3a2f33342d3334203d3e20323639383131.roa (raw, json)
Hash identifier:          zonfjE9nrKwJel8wYxOdu8PCTZ8njwLOx5BIPWhgo3c=
Subject key identifier:   50:65:E3:57:5E:15:F8:8E:10:26:ED:5C:5A:7E:D9:87:C0:D8:FC:CD
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       4BAAF870E1B9994950AD347963CA18B558481692
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33342d3334203d3e20323639383131.roa
Signing time:             Tue 02 Jun 2026 03:25:19 +0000
ROA not before:           Tue 02 Jun 2026 03:20:19 +0000
ROA not after:            Tue 01 Jun 2027 03:25:19 +0000
asID:                     269811
IP address blocks:        2803:3b60:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:aa:f8:70:e1:b9:99:49:50:ad:34:79:63:ca:18:b5:58:48:16:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Jun  2 03:20:19 2026 GMT
            Not After : Jun  1 03:25:19 2027 GMT
        Subject: CN=5065E3575E15F88E1026ED5C5A7ED987C0D8FCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:6b:b6:fb:5f:af:44:e6:0c:51:24:10:59:
                    25:7e:70:8a:cc:08:26:da:45:e5:fd:91:7c:80:61:
                    d0:4d:6e:81:21:f4:de:c0:bd:43:85:1a:4e:62:07:
                    eb:03:59:08:91:85:6c:04:c7:18:1d:fb:11:0a:d0:
                    ca:31:eb:49:7d:d5:6a:32:3e:54:c8:01:7a:9a:a5:
                    a5:43:2a:6f:ba:e3:d7:87:2a:fd:d6:6f:fe:f8:61:
                    2b:f2:77:06:c2:cf:e5:49:53:9f:9d:19:7f:52:2f:
                    10:94:04:2e:00:49:01:3a:c8:cd:8e:eb:9a:dd:95:
                    72:c9:40:61:be:bc:23:7c:30:e7:e9:8f:c4:0b:88:
                    84:f8:b1:5d:f2:e0:6e:af:a2:9a:51:2a:b8:23:f3:
                    29:0e:3f:fe:34:31:8d:50:0f:c6:a2:3a:2d:d9:55:
                    ac:e6:39:b2:13:e7:b5:9c:c3:83:4e:88:d6:a6:0a:
                    bc:10:a0:e1:bf:4d:26:11:ec:be:bd:94:88:44:07:
                    e5:76:52:63:71:f5:52:e5:b9:85:42:79:64:80:2d:
                    e6:6d:67:7b:3c:3b:9c:dc:66:a1:ef:1f:43:df:58:
                    39:54:54:f6:00:97:67:2f:3a:0d:0f:61:22:95:75:
                    54:1d:4a:55:32:aa:61:3f:46:16:87:fd:aa:0b:ca:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:65:E3:57:5E:15:F8:8E:10:26:ED:5C:5A:7E:D9:87:C0:D8:FC:CD
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a633030303a3a2f33342d3334203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:58:24:74:e3:07:87:f0:4d:bf:b5:7c:02:39:c8:1c:5c:
         ab:8d:7b:92:1d:29:26:b0:39:f5:1d:ab:e7:9f:26:7a:38:92:
         66:00:23:5d:af:41:e7:86:55:b5:31:08:be:78:61:76:0a:a1:
         ae:91:16:da:cf:93:7d:97:68:05:b5:16:36:1e:b6:3f:4e:e6:
         7d:52:fd:cd:48:68:48:4b:78:da:ca:71:2e:16:a8:d7:7c:5c:
         f1:4b:e8:d6:ca:ed:c9:ba:74:83:7f:0e:b3:c3:1a:77:49:13:
         6c:1f:32:ad:fe:ba:de:dc:e1:a6:58:91:21:7b:ca:30:a6:b0:
         84:ea:0b:b4:3d:b6:2f:ca:94:d8:51:0d:de:20:77:89:9e:46:
         80:39:c7:8a:e7:b9:fe:c5:f6:be:d7:69:10:b3:19:3c:20:b6:
         5d:fb:5a:51:47:1e:08:ce:43:ce:c8:da:c3:6b:e8:e1:27:56:
         8b:21:c1:03:76:85:5e:c6:71:b3:5e:3a:72:a3:e3:27:21:aa:
         5e:ed:37:42:69:a0:65:fd:96:f3:c6:82:2b:4f:9b:66:56:1f:
         35:51:61:8e:7c:41:3d:e6:f3:cf:6b:f9:72:1a:cc:f3:89:9f:
         48:ee:8b:9b:71:95:ba:db:db:2f:c2:8a:72:83:43:b2:12:cf:
         56:c3:02:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:32:23 2026 by rpki-client