Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6038F7B15B4A3CFF93F0886AF7CB7720A21F47F099DD5E597DBAA2BC38EA51F/0/323830333a363964303a3a2f33322d3438203d3e20323734313533.roa
File:                     323830333a363964303a3a2f33322d3438203d3e20323734313533.roa (raw, json)
Hash identifier:          ov2xkve1Swvx7TVmeoLmBYC0zud25nTFCWR9fLhNOXM=
Subject key identifier:   AA:F9:E8:6C:67:59:D4:08:25:31:8C:8E:F9:B3:07:66:C1:D4:EB:F3
Certificate issuer:       /CN=B1D87CA76BA455F28C5314B9775C641DBB74AA8D
Certificate serial:       19EF16CD90A1A8B5AC62CE45D3BD9850CFA49725
Authority key identifier: B1:D8:7C:A7:6B:A4:55:F2:8C:53:14:B9:77:5C:64:1D:BB:74:AA:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1D87CA76BA455F28C5314B9775C641DBB74AA8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6038F7B15B4A3CFF93F0886AF7CB7720A21F47F099DD5E597DBAA2BC38EA51F/0/323830333a363964303a3a2f33322d3438203d3e20323734313533.roa
Signing time:             Fri 05 Jun 2026 04:46:38 +0000
ROA not before:           Fri 05 Jun 2026 04:41:38 +0000
ROA not after:            Fri 04 Jun 2027 04:46:38 +0000
asID:                     274153
IP address blocks:        2803:69d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6038F7B15B4A3CFF93F0886AF7CB7720A21F47F099DD5E597DBAA2BC38EA51F/0/B1D87CA76BA455F28C5314B9775C641DBB74AA8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6038F7B15B4A3CFF93F0886AF7CB7720A21F47F099DD5E597DBAA2BC38EA51F/0/B1D87CA76BA455F28C5314B9775C641DBB74AA8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1D87CA76BA455F28C5314B9775C641DBB74AA8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:16:cd:90:a1:a8:b5:ac:62:ce:45:d3:bd:98:50:cf:a4:97:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D87CA76BA455F28C5314B9775C641DBB74AA8D
        Validity
            Not Before: Jun  5 04:41:38 2026 GMT
            Not After : Jun  4 04:46:38 2027 GMT
        Subject: CN=AAF9E86C6759D40825318C8EF9B30766C1D4EBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:50:a5:d0:88:35:b8:ce:c6:27:8e:27:e6:
                    3b:e2:a2:8f:bc:22:9a:96:ff:0d:4b:fa:a0:ff:86:
                    6e:ea:9a:03:58:ff:05:c9:9d:f6:ea:0c:32:b4:e6:
                    81:40:63:fc:b2:38:ce:f3:98:97:2f:52:fd:e8:3b:
                    7b:f6:cc:3c:8d:2c:ed:33:bb:fd:71:21:1e:0a:ce:
                    81:99:9e:a8:46:4c:a9:d9:95:75:24:83:83:9e:db:
                    6c:14:71:6f:30:84:2d:d7:38:27:aa:7a:c5:4e:8d:
                    39:d0:a5:a0:4d:c0:a0:bc:67:61:25:cf:f3:cc:11:
                    37:7a:89:f3:66:db:e1:6c:92:e5:c1:5f:18:9b:3d:
                    26:0f:34:a6:32:8c:d1:d5:da:0e:7e:c0:e4:bb:85:
                    d4:78:bf:35:80:66:f9:97:ee:a5:75:fe:05:b5:f5:
                    eb:85:f7:d5:7e:86:41:35:97:e9:a3:fe:e6:bc:0b:
                    59:ad:f3:6a:ce:71:3b:4e:0c:bd:3d:d9:8b:dc:0a:
                    f9:5c:e5:73:27:50:84:b4:08:7f:44:f6:76:3b:22:
                    7e:d2:ba:40:1a:5e:df:1c:41:47:c8:ea:dc:5b:4b:
                    2f:d1:b9:9b:a0:35:18:3f:d6:a8:87:17:2a:29:b6:
                    33:a6:6c:f1:32:69:0d:53:05:f7:08:fd:5e:42:01:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F9:E8:6C:67:59:D4:08:25:31:8C:8E:F9:B3:07:66:C1:D4:EB:F3
            X509v3 Authority Key Identifier:
                keyid:B1:D8:7C:A7:6B:A4:55:F2:8C:53:14:B9:77:5C:64:1D:BB:74:AA:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6038F7B15B4A3CFF93F0886AF7CB7720A21F47F099DD5E597DBAA2BC38EA51F/0/B1D87CA76BA455F28C5314B9775C641DBB74AA8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1D87CA76BA455F28C5314B9775C641DBB74AA8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6038F7B15B4A3CFF93F0886AF7CB7720A21F47F099DD5E597DBAA2BC38EA51F/0/323830333a363964303a3a2f33322d3438203d3e20323734313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:69d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:42:f3:d6:89:dc:fb:ef:78:22:9a:1a:f5:39:02:82:78:4a:
         4a:30:b1:2e:6b:a2:d7:82:86:cd:f3:d2:7d:49:b4:d5:74:16:
         ab:30:40:e4:90:63:17:60:cb:5f:6e:71:e8:54:d2:ea:b1:b3:
         e9:75:d8:51:1c:b8:13:bf:cf:92:57:60:32:22:60:31:7a:3c:
         dd:f0:b6:2c:0c:ff:e7:a8:bd:23:8f:f9:ff:f7:b1:45:8c:a3:
         24:8b:25:71:a4:b9:9e:40:4b:a8:49:ad:20:0f:3b:10:67:81:
         b9:a7:d4:65:06:65:26:6e:96:31:d7:ab:b9:d7:c1:01:3a:b3:
         65:f5:e7:44:4a:67:d3:04:b3:49:48:49:84:0e:35:a1:2f:2a:
         b6:23:6c:61:94:b5:c1:70:ca:d8:55:9f:0f:5c:b3:5b:45:01:
         c2:12:af:17:d9:51:23:f3:fd:1f:c8:5f:b4:5f:03:da:23:ca:
         db:e1:d1:ce:9b:c9:8e:01:79:b9:15:1e:c1:42:7f:5f:c0:85:
         ac:33:3d:b9:41:48:5b:59:a3:7d:2a:15:c4:27:3a:f0:d5:6a:
         08:3c:fa:f8:a5:de:48:08:c4:2e:1d:04:6c:8f:53:16:e0:0e:
         67:ab:83:c3:30:72:64:a9:f9:04:73:d6:8a:4b:b3:a4:38:ab:
         14:de:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:03:09 2026 by rpki-client