Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323332303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323332303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          PX4uwhGzJaTFzRYUJEgB+7xC+emeCM4iqNdc4uef50Y=
Subject key identifier:   8D:AF:B2:3C:BC:59:B4:28:D2:C4:DF:C1:C0:F0:5C:60:CD:C4:D7:93
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       784B076F979F8395D632739B2F1F385E7DACA672
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323332303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Wed 15 Apr 2026 02:50:00 +0000
ROA not before:           Wed 15 Apr 2026 02:45:00 +0000
ROA not after:            Wed 14 Apr 2027 02:50:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2320::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 16:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4b:07:6f:97:9f:83:95:d6:32:73:9b:2f:1f:38:5e:7d:ac:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr 15 02:45:00 2026 GMT
            Not After : Apr 14 02:50:00 2027 GMT
        Subject: CN=8DAFB23CBC59B428D2C4DFC1C0F05C60CDC4D793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:d5:0f:f0:7f:b5:ca:a1:23:2d:4c:ee:e4:
                    5e:b8:96:9f:79:45:d5:0b:6e:48:e9:86:06:91:6e:
                    e4:62:da:e9:40:ae:1d:bd:74:88:82:9c:cd:8c:a2:
                    80:c1:7e:2c:58:93:80:8f:3b:75:43:d4:6e:88:09:
                    66:74:e5:c3:a0:b2:cb:a9:32:2c:c7:f6:cb:49:5c:
                    73:df:a0:0a:be:00:20:07:40:6b:99:b1:31:0f:4c:
                    fe:82:ad:5a:bf:cf:8f:a2:26:a3:36:72:2c:00:dc:
                    9b:0f:d8:ac:e1:6b:a2:19:c0:0a:13:cc:7d:a9:cc:
                    03:16:40:74:b5:80:fa:ef:13:f2:bd:fd:c2:7a:b6:
                    5f:fc:5a:0c:0c:fe:84:2c:d0:f4:8e:48:ce:a7:d0:
                    03:9b:45:68:e1:6e:eb:97:06:b3:59:cf:67:13:03:
                    4d:72:bf:99:a0:45:f6:27:81:fa:57:7c:c0:b5:1e:
                    15:56:0d:fa:79:66:73:45:33:99:79:4c:ad:48:2f:
                    46:41:e9:30:8b:19:76:a4:06:af:0c:15:c4:ef:4a:
                    a6:9b:9d:b8:e9:5d:4f:89:f2:94:91:b5:94:32:8a:
                    cd:d6:ce:93:9e:df:ef:4d:84:d5:da:ae:a6:57:ec:
                    c6:86:25:b6:70:0f:55:b9:85:c6:ae:13:5e:32:5f:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AF:B2:3C:BC:59:B4:28:D2:C4:DF:C1:C0:F0:5C:60:CD:C4:D7:93
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323332303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2320::/43

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:ff:64:dc:c3:96:fe:b3:af:bf:e8:da:07:b9:e1:fb:8e:
         b8:e1:2e:5d:c1:a6:5a:5b:b1:fc:3a:68:36:4f:ef:c3:8e:a9:
         17:15:c6:d8:00:31:6c:b6:52:da:9b:bc:1e:b7:b0:46:9b:60:
         ab:f8:b2:88:dd:35:cc:e1:73:7d:a3:c2:f5:26:fa:54:99:8f:
         84:5f:e9:ec:03:f3:5e:21:0f:3f:34:e1:50:cd:8f:68:10:fb:
         ae:64:2b:05:44:69:80:a3:01:fb:4d:63:ec:7d:2a:0c:ed:fd:
         4d:f8:dc:ba:7e:50:f9:ac:f4:a7:f5:ca:a4:6e:a1:18:9a:25:
         26:e2:5c:fe:22:a6:12:04:6b:a7:81:66:0a:24:f2:25:c3:78:
         03:a3:97:66:3a:b8:5e:e8:52:a9:92:c7:07:4a:a5:26:9f:e8:
         7e:b8:e1:80:8e:ab:0d:ac:30:72:8b:a6:fb:e4:2f:9e:88:de:
         2e:24:47:78:e2:65:78:f1:ec:9e:ac:c8:0f:5f:52:c8:f1:fb:
         15:6b:d3:d3:20:d4:49:c7:cb:fb:21:82:98:69:ed:a8:fc:57:
         c8:17:77:b3:23:99:16:22:55:51:f7:ac:70:9b:97:9c:d3:de:
         2c:2f:ea:66:18:a2:8e:db:94:72:5e:06:b3:c7:74:0e:3c:d7:
         4b:6b:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:45:36 2026 by rpki-client