Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3332203d3e20323633323435.roa
File:                     323830333a643138303a3a2f33322d3332203d3e20323633323435.roa (raw, json)
Hash identifier:          G+aJOMGG1VQD6kUuBWHSFvkeTG7RJLnP023hJUtlh5A=
Subject key identifier:   C4:4B:51:CF:A0:8A:C9:92:D2:73:6B:AF:77:57:92:1F:A1:10:8A:71
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       77B7FE9DE9C7EAF4CF834B4C721709AA6AE63649
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3332203d3e20323633323435.roa
Signing time:             Tue 06 Jan 2026 19:43:31 +0000
ROA not before:           Tue 06 Jan 2026 19:38:31 +0000
ROA not after:            Tue 05 Jan 2027 19:43:31 +0000
asID:                     263245
IP address blocks:        2803:d180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:fe:9d:e9:c7:ea:f4:cf:83:4b:4c:72:17:09:aa:6a:e6:36:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Jan  6 19:38:31 2026 GMT
            Not After : Jan  5 19:43:31 2027 GMT
        Subject: CN=C44B51CFA08AC992D2736BAF7757921FA1108A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:7b:6c:7c:fe:36:73:01:b9:74:f8:2d:9d:
                    cd:86:ee:71:e7:87:70:91:de:0b:8d:de:94:f8:21:
                    6a:89:60:d1:56:89:75:ac:97:88:dd:cb:e5:70:67:
                    c2:dd:c1:db:f5:1e:0b:a2:cc:77:33:72:be:be:56:
                    b1:ab:15:95:1a:bc:ad:d0:98:67:91:60:35:44:15:
                    13:3d:75:32:d7:bc:ef:2e:3c:02:29:24:80:90:70:
                    86:74:c3:6c:ac:d5:fc:42:3c:93:dc:18:2b:1b:ad:
                    bd:2b:28:e6:04:bf:df:65:e6:6f:6e:67:85:b8:f7:
                    95:45:ef:69:9b:b8:43:8b:a8:9a:ea:ae:03:9d:91:
                    4a:78:54:fa:c2:9d:d3:ab:77:bd:9a:58:99:1d:d5:
                    e1:c5:32:2a:5c:91:b7:51:8c:a0:07:5a:3b:c3:c2:
                    7e:8e:5b:d3:6c:50:c3:e8:27:12:f6:c9:38:38:22:
                    37:41:c8:c3:8c:cc:16:04:31:5a:86:75:40:6d:0e:
                    ff:3c:82:9e:7f:be:28:54:58:cd:af:3e:0e:30:32:
                    6d:97:81:15:7a:21:b4:2f:f7:67:57:b6:c0:e7:a9:
                    8e:ac:01:6c:44:38:27:fa:e9:14:7e:f0:d4:b4:25:
                    3c:17:63:44:be:44:3b:82:62:f0:a6:e0:1d:a5:9c:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:51:CF:A0:8A:C9:92:D2:73:6B:AF:77:57:92:1F:A1:10:8A:71
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/323830333a643138303a3a2f33322d3332203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d180::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:72:50:b3:86:a7:d7:d2:04:35:c4:48:db:ef:e9:09:af:e7:
         92:b8:00:fa:62:e5:12:7f:f3:02:19:6a:39:c0:fc:a6:9a:be:
         b3:6e:d5:c4:01:76:6d:97:c9:5e:2e:4b:62:98:8b:d7:e0:1a:
         9a:83:77:7a:83:b7:95:7a:f7:5a:c2:35:db:f0:75:08:17:ae:
         3e:cc:78:98:b3:8e:e4:25:d9:44:18:b1:1e:27:fa:5f:08:0a:
         5d:36:96:2e:4a:b1:a8:79:f8:09:69:fe:d0:53:a0:af:b2:35:
         f6:0d:4e:2c:c5:cf:d7:9f:94:b9:b5:25:4e:53:dc:5a:80:b5:
         3e:a6:a0:27:e1:bb:ad:1e:8a:9b:38:0b:31:f1:90:98:bb:73:
         47:ef:0e:c3:9d:33:48:8a:af:61:b7:f1:6f:8e:99:56:74:f2:
         35:25:0f:5d:b7:7e:f9:85:84:b0:ef:96:07:52:a4:09:b0:86:
         cf:5d:93:c4:97:c1:e1:78:05:ca:f8:9c:ba:e5:08:a9:b4:a0:
         f5:82:48:b7:b4:22:8f:d7:99:f8:ce:eb:d3:a2:2c:63:96:b4:
         cb:c5:23:03:5f:8c:89:bc:c0:45:a2:57:cd:f1:98:36:e7:cf:
         ba:87:dd:8b:4f:4e:29:be:51:be:d0:49:79:2f:28:88:2a:37:
         0e:dd:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:32:55 2026 by rpki-client