Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323330303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323330303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          KtGfadaR8M43jtGica7EEYGTUU648NIBAyfN6LqrEZA=
Subject key identifier:   04:1B:C0:E1:EF:A6:A9:60:73:7E:D0:38:00:D4:D9:70:A4:BF:56:FD
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       2C92CA9DE16C80F972C49482EAD40AE4E905730D
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323330303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Wed 15 Apr 2026 02:50:00 +0000
ROA not before:           Wed 15 Apr 2026 02:45:00 +0000
ROA not after:            Wed 14 Apr 2027 02:50:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2300::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 16:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:92:ca:9d:e1:6c:80:f9:72:c4:94:82:ea:d4:0a:e4:e9:05:73:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr 15 02:45:00 2026 GMT
            Not After : Apr 14 02:50:00 2027 GMT
        Subject: CN=041BC0E1EFA6A960737ED03800D4D970A4BF56FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:91:51:4f:dd:a3:2a:b9:85:ec:6d:a4:9e:21:
                    7a:36:c3:53:67:8b:50:ee:df:9f:21:97:71:46:8e:
                    12:bd:15:06:96:cd:18:40:0c:59:f4:a5:4b:3a:63:
                    d3:92:bc:1d:98:06:e1:16:5a:b7:43:28:71:4f:9a:
                    c8:45:64:2c:31:e1:e1:eb:d0:66:8e:b3:05:90:ec:
                    59:12:5c:40:d3:cc:43:6d:0e:7c:ab:e1:75:af:08:
                    3b:82:ba:d7:e3:28:6c:a0:52:01:4a:15:e0:be:39:
                    56:36:ce:2e:26:93:b2:bd:fd:d3:e8:46:41:8d:84:
                    71:06:85:d8:ce:a2:7d:8b:9d:d2:b4:cc:a6:81:f7:
                    f0:7c:b7:7c:a5:d4:4d:70:33:d3:f2:ec:76:ca:8b:
                    3f:70:f7:13:ef:40:31:17:ef:f5:dd:40:e7:8f:79:
                    5f:18:a1:60:48:32:b8:89:82:d9:69:85:78:95:6a:
                    19:7a:69:3b:d4:30:f5:6c:3e:e9:95:c4:2e:85:22:
                    40:8d:c2:1a:91:26:33:3e:51:6b:f6:81:f6:33:04:
                    93:27:4b:34:95:52:2f:07:bf:c6:e3:67:ab:9e:43:
                    13:d1:fa:61:26:e6:59:e4:fd:f1:eb:b5:de:a2:e5:
                    70:5c:71:44:21:22:42:46:63:e6:a7:8f:68:03:58:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1B:C0:E1:EF:A6:A9:60:73:7E:D0:38:00:D4:D9:70:A4:BF:56:FD
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323330303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2300::/43

    Signature Algorithm: sha256WithRSAEncryption
         b0:1d:c6:45:9f:92:61:7a:d0:b3:ff:41:f5:e7:48:91:83:18:
         28:ae:0d:82:b5:8c:3f:95:dc:2a:86:a1:a6:dd:91:57:f9:e4:
         af:7f:4a:72:4e:c6:d0:f8:f3:05:e7:74:ec:72:f9:a5:0f:a4:
         5d:13:33:c5:60:d5:5e:01:dd:9c:00:cc:0c:ea:3e:73:f4:fb:
         80:63:ef:02:05:c4:06:a3:6c:32:14:d5:d6:a3:bb:0c:2c:fd:
         ad:2b:d5:92:4c:5c:11:87:b7:64:d6:ed:03:d1:0b:4a:8c:c0:
         57:f7:8d:c4:e6:9d:df:e8:dc:eb:c8:8e:1b:5f:14:c5:74:b0:
         b6:65:65:ef:b4:4d:17:67:24:d4:d5:86:24:2e:91:fd:05:cf:
         b1:b5:16:55:c7:20:03:c3:ba:16:ad:e5:f5:28:ae:23:d7:cf:
         bb:26:15:b8:48:8a:e0:89:20:a5:ba:72:f7:17:9f:bf:8c:3e:
         30:3b:0f:8a:c3:8a:43:38:c6:f2:2a:8c:fe:20:2a:ff:e3:a7:
         20:8f:28:3c:03:5e:b0:aa:07:90:f9:2e:f4:fb:b0:93:e8:bf:
         bd:a1:fe:21:a8:68:16:88:5b:b0:38:87:88:56:ec:f0:b4:11:
         1a:04:76:9d:b8:c2:8e:fc:b2:30:52:30:4b:6b:fd:58:22:d9:
         20:31:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:01:37 2026 by rpki-client