Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/323830333a383839303a3a2f33322d3634203d3e20323734313134.roa
File:                     323830333a383839303a3a2f33322d3634203d3e20323734313134.roa (raw, json)
Hash identifier:          ZeNYc1+2+sxgztc1wxxlqhOabv8togT0svUGxbyGW7c=
Subject key identifier:   ED:EB:0D:6F:A7:A3:CD:44:1D:47:7E:2F:95:53:3B:AA:40:6C:42:D1
Certificate issuer:       /CN=36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684
Certificate serial:       33FA07ED6C3E78E0E85AD6C4783734082E5BE7F2
Authority key identifier: 36:D2:DE:20:8B:F5:20:1F:C5:4A:65:5E:3A:7E:A7:C9:AE:DF:76:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/323830333a383839303a3a2f33322d3634203d3e20323734313134.roa
Signing time:             Sat 25 Jul 2026 18:45:00 +0000
ROA not before:           Sat 25 Jul 2026 18:40:00 +0000
ROA not after:            Sat 24 Jul 2027 18:45:00 +0000
asID:                     274114
IP address blocks:        2803:8890::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 05:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fa:07:ed:6c:3e:78:e0:e8:5a:d6:c4:78:37:34:08:2e:5b:e7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684
        Validity
            Not Before: Jul 25 18:40:00 2026 GMT
            Not After : Jul 24 18:45:00 2027 GMT
        Subject: CN=EDEB0D6FA7A3CD441D477E2F95533BAA406C42D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:2a:8d:63:08:ee:85:23:25:62:e9:87:b2:
                    76:54:a7:c1:c3:b5:40:7e:79:7c:99:02:dc:fb:00:
                    21:2f:4f:3e:5a:ad:78:0a:37:10:a6:a7:f2:b9:84:
                    0d:77:f1:55:f2:ff:42:23:a9:57:27:13:c0:9f:19:
                    ed:df:1c:98:d8:d2:ce:5a:4c:35:0f:b5:98:30:46:
                    c2:05:c2:59:4a:94:5b:90:f6:6a:53:e4:14:dc:0f:
                    d2:cd:6f:c6:2e:81:36:02:f0:de:8e:32:f1:17:2a:
                    ea:a9:7f:d3:e6:5f:1e:8e:e9:d6:83:56:35:ba:cb:
                    f3:39:79:ef:33:f0:c7:73:c1:c1:fd:02:1e:d5:64:
                    ac:a1:79:06:2e:9d:0f:59:62:c6:26:cb:22:e7:32:
                    aa:f8:e4:9a:28:67:17:13:39:11:de:35:0f:73:36:
                    c5:24:54:8b:86:43:b5:9b:1a:fb:1f:b8:de:02:3c:
                    12:ff:f1:19:ca:18:24:c6:cd:3d:66:ee:4b:4f:8e:
                    84:da:03:3f:7b:36:74:58:06:50:1f:ba:c7:f1:21:
                    47:0f:41:28:91:c2:87:ef:53:25:d7:28:b4:fd:f5:
                    b7:ef:55:18:e8:a6:5a:31:86:64:d6:98:19:52:86:
                    4c:1a:a2:e1:d2:5e:c7:77:fc:dd:44:ae:a4:47:3d:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:0D:6F:A7:A3:CD:44:1D:47:7E:2F:95:53:3B:AA:40:6C:42:D1
            X509v3 Authority Key Identifier:
                keyid:36:D2:DE:20:8B:F5:20:1F:C5:4A:65:5E:3A:7E:A7:C9:AE:DF:76:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/323830333a383839303a3a2f33322d3634203d3e20323734313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8890::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:7a:e8:61:28:5d:f4:91:86:99:e0:36:6b:f6:19:bd:d5:
         d6:04:26:7b:6d:76:94:d1:e3:b5:ee:36:ed:2a:2c:18:f2:29:
         4b:c3:73:ae:0c:04:61:84:02:49:59:b4:fe:37:19:36:45:85:
         ed:15:55:69:19:5e:c0:55:cd:02:e5:f6:5a:f0:8f:b5:a6:84:
         67:84:82:99:6d:45:f4:07:1c:e7:12:73:29:0c:55:7b:83:0e:
         fa:0a:66:17:22:f0:7a:2b:c6:2f:58:51:a8:24:25:f4:a0:48:
         31:95:e1:7d:4f:43:9b:db:72:11:02:52:72:6a:46:f6:c7:48:
         94:e8:91:cc:94:da:70:52:94:b7:c2:78:df:c7:26:65:9a:7b:
         13:bc:c2:ec:7e:ee:0f:66:53:7a:5b:82:5b:d1:30:18:d3:70:
         01:df:90:66:27:af:ea:ae:72:42:22:66:ff:e0:43:ee:4e:11:
         f5:43:70:a4:39:10:c7:4a:e5:2b:66:80:8a:c7:f8:79:a7:a6:
         8c:c0:f6:8c:aa:8e:f0:7e:74:a8:a6:44:c1:32:f7:54:ef:5c:
         e1:15:21:7f:87:98:e6:4b:ef:3b:f5:66:35:c2:90:d3:74:ef:
         7a:f4:bb:9b:80:fc:cb:4f:9b:75:eb:e9:66:0a:8e:77:be:d5:
         f2:81:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:46:24 2026 by rpki-client