Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/323830333a383964303a3a2f33322d3438203d3e20323734313436.roa
File:                     323830333a383964303a3a2f33322d3438203d3e20323734313436.roa (raw, json)
Hash identifier:          5Hx+MtVY8B42pHyqwye8bZVJ+ZIU4rAY33JUgeUdr9g=
Subject key identifier:   8D:57:D6:75:1F:1B:76:59:55:FA:77:F3:66:BD:64:7C:82:8A:85:38
Certificate issuer:       /CN=8F14B752BDD95C05C00A4F586E5817068B49A668
Certificate serial:       0C87E1AC044CB57DB484D4BC2E379490CDE9D444
Authority key identifier: 8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/323830333a383964303a3a2f33322d3438203d3e20323734313436.roa
Signing time:             Mon 01 Jun 2026 05:44:48 +0000
ROA not before:           Mon 01 Jun 2026 05:39:48 +0000
ROA not after:            Mon 31 May 2027 05:44:48 +0000
asID:                     274146
IP address blocks:        2803:89d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:87:e1:ac:04:4c:b5:7d:b4:84:d4:bc:2e:37:94:90:cd:e9:d4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F14B752BDD95C05C00A4F586E5817068B49A668
        Validity
            Not Before: Jun  1 05:39:48 2026 GMT
            Not After : May 31 05:44:48 2027 GMT
        Subject: CN=8D57D6751F1B765955FA77F366BD647C828A8538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:19:94:f2:f5:a6:9b:e9:f6:7d:36:62:af:
                    74:b1:c4:ad:4d:88:a7:84:77:3e:06:ad:d9:43:7a:
                    a8:01:d4:d1:aa:66:cc:5e:9a:46:d2:74:0e:c7:74:
                    33:48:46:31:8b:4e:d0:db:c8:c8:21:70:c3:04:a9:
                    a5:81:2c:6d:22:54:ad:07:19:9e:4c:31:bf:d2:bb:
                    e6:a8:e2:a5:bb:9f:72:b7:a1:f2:98:53:3a:aa:a7:
                    0e:5f:71:e3:23:75:81:a6:f2:4c:8e:e0:31:e0:84:
                    1f:c7:4d:6f:31:46:02:b1:c6:82:71:b8:16:63:5f:
                    1d:f7:4b:28:d9:9b:3d:9a:15:26:44:8c:a1:a8:49:
                    c7:f7:68:42:ad:1a:1d:84:1f:27:7f:ac:b3:09:53:
                    dc:7a:3e:97:e2:d5:75:a0:a8:8f:48:94:b1:8f:46:
                    dc:a3:2c:31:56:7b:16:89:a8:fc:42:9d:6b:7b:5b:
                    db:07:ac:f0:70:b8:e4:06:24:c4:e7:08:fe:e7:2a:
                    4d:37:8f:6f:81:80:78:d7:89:a0:1d:33:bb:67:b6:
                    13:09:ff:12:0e:11:d0:02:7f:79:e6:d6:89:06:aa:
                    ef:14:e6:5d:85:05:f2:16:db:fd:c2:ca:12:b8:7e:
                    d3:b6:7d:28:42:6c:ab:a8:da:5e:6d:0a:b1:3f:96:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:57:D6:75:1F:1B:76:59:55:FA:77:F3:66:BD:64:7C:82:8A:85:38
            X509v3 Authority Key Identifier:
                keyid:8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/323830333a383964303a3a2f33322d3438203d3e20323734313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:89d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:be:c2:22:a3:55:b9:6d:6d:a3:b8:4e:82:2c:fa:86:8a:
         ca:2e:a2:99:c2:cc:2c:c9:fe:c7:25:34:6c:f1:a5:ae:31:52:
         b1:cd:8a:68:53:60:eb:6b:52:0a:01:c1:87:ac:83:a3:31:fb:
         96:04:17:9c:fe:4d:20:ee:42:15:36:63:2a:11:71:dd:63:dd:
         54:37:16:64:5d:5c:ff:7f:93:68:79:04:15:dc:18:0b:0f:ac:
         13:d1:12:2d:f1:94:24:81:0b:47:e3:16:9d:f4:30:69:a2:a6:
         05:90:7e:00:bd:35:25:61:33:49:1a:89:fa:5e:71:ff:ca:7d:
         de:33:eb:da:c1:aa:b8:6f:6e:ea:81:bd:59:37:6c:0f:71:1c:
         a8:44:d1:31:48:5f:f2:c1:db:00:c8:f7:d6:bb:65:80:dd:55:
         93:5b:f0:b2:13:e4:6b:6e:7e:49:c7:3c:04:76:5c:06:11:92:
         85:cf:0d:a5:cf:51:3a:13:1c:92:5f:f2:86:ef:47:8f:00:6a:
         d4:39:21:8d:e2:94:36:6a:31:e8:ce:fb:57:b1:a2:c6:89:ca:
         a0:c1:bd:8f:eb:38:83:05:27:56:6e:cf:a7:ef:17:40:4b:56:
         b3:4b:3c:a6:a7:24:d8:48:38:49:ed:3c:b8:b5:4e:e0:ff:bb:
         4b:3a:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:59:13 2026 by rpki-client