Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/323830333a346539303a3a2f33322d3438203d3e20323732393131.roa
File:                     323830333a346539303a3a2f33322d3438203d3e20323732393131.roa (raw, json)
Hash identifier:          7nylhy09v+29O75S56Tp0swMBP/Em/Y1f2U7lUbcYgI=
Subject key identifier:   B4:90:3A:48:1B:90:68:E3:9E:EB:33:48:8E:25:61:EF:B3:8A:39:5A
Certificate issuer:       /CN=34876C211DED020995F3573311D003E759D03242
Certificate serial:       6681E8747DDB449828A8CC64BEE78553AD5A6C37
Authority key identifier: 34:87:6C:21:1D:ED:02:09:95:F3:57:33:11:D0:03:E7:59:D0:32:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34876C211DED020995F3573311D003E759D03242.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/323830333a346539303a3a2f33322d3438203d3e20323732393131.roa
Signing time:             Thu 16 Apr 2026 00:25:00 +0000
ROA not before:           Thu 16 Apr 2026 00:20:00 +0000
ROA not after:            Thu 15 Apr 2027 00:25:00 +0000
asID:                     272911
IP address blocks:        2803:4e90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/34876C211DED020995F3573311D003E759D03242.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/34876C211DED020995F3573311D003E759D03242.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34876C211DED020995F3573311D003E759D03242.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:81:e8:74:7d:db:44:98:28:a8:cc:64:be:e7:85:53:ad:5a:6c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34876C211DED020995F3573311D003E759D03242
        Validity
            Not Before: Apr 16 00:20:00 2026 GMT
            Not After : Apr 15 00:25:00 2027 GMT
        Subject: CN=B4903A481B9068E39EEB33488E2561EFB38A395A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:70:ee:82:1c:13:51:c6:1a:07:0a:b0:29:
                    05:8c:9d:e9:8d:fb:52:1a:27:45:65:c5:df:4a:ba:
                    e3:ae:69:f7:e5:a5:c7:9b:35:49:97:2d:31:c7:0c:
                    77:68:2e:9a:c6:25:80:e6:0b:f6:fa:49:54:d3:07:
                    9b:4b:2b:b3:21:5d:87:cd:bd:83:ad:a0:8c:b4:de:
                    87:0f:9c:bc:1c:b0:0d:5a:25:77:f9:0c:64:00:ce:
                    de:0a:02:48:18:43:9d:ba:52:6e:6f:c7:b0:0c:60:
                    d9:94:ec:f7:43:ea:71:9d:0a:c1:ae:5e:71:5c:32:
                    2e:0c:af:79:df:83:9b:28:91:f1:6a:13:c9:98:0c:
                    ab:86:41:a1:18:ba:0f:04:c2:13:d1:15:62:da:8b:
                    67:d0:9b:38:4b:d9:1d:53:89:0f:ac:ea:5e:01:33:
                    64:de:99:06:ff:91:bf:19:ae:2d:38:0e:d0:37:57:
                    ac:81:26:30:e3:41:52:54:44:0a:e4:70:3c:f3:7d:
                    c9:2d:4b:bc:34:d7:77:ff:e8:95:66:d2:af:0f:e9:
                    b6:01:58:95:ae:fc:f3:fa:30:85:82:3b:f1:10:7d:
                    6c:6c:f5:2c:a0:cf:cc:93:87:bd:aa:b8:eb:43:57:
                    ac:8d:aa:0a:c5:36:72:81:66:f4:1e:e0:af:a9:c9:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:3A:48:1B:90:68:E3:9E:EB:33:48:8E:25:61:EF:B3:8A:39:5A
            X509v3 Authority Key Identifier:
                keyid:34:87:6C:21:1D:ED:02:09:95:F3:57:33:11:D0:03:E7:59:D0:32:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/34876C211DED020995F3573311D003E759D03242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34876C211DED020995F3573311D003E759D03242.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/323830333a346539303a3a2f33322d3438203d3e20323732393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:a2:3c:11:70:52:99:e8:ad:16:c4:e3:a6:ad:a6:4a:a3:98:
         70:01:cf:12:63:9c:ee:db:c6:85:69:22:e6:d1:d2:44:79:ef:
         a4:eb:a0:e9:e2:20:38:32:2d:32:ff:3d:c5:ac:96:0b:e7:06:
         dc:07:c4:1f:5d:54:4c:bb:64:76:ea:57:6f:f3:48:f2:e0:7d:
         99:74:d1:d8:98:dc:ec:21:08:2b:a5:ec:6b:5d:f3:c0:c2:8c:
         5a:90:54:a9:0c:8b:21:14:d4:35:c4:df:ae:5d:83:30:2d:78:
         4a:fa:19:08:60:22:27:a2:45:a9:37:41:b7:90:11:bc:8a:3a:
         0f:26:ef:40:88:8f:4f:ca:ae:3f:85:24:ad:88:4c:0b:98:1d:
         3e:27:02:2d:59:6b:a5:6f:16:0a:77:09:34:e2:6d:50:17:51:
         17:44:2c:72:83:53:e7:d1:5f:17:4a:e4:a9:0e:54:c8:f8:38:
         c0:a9:69:8f:ba:1a:04:7f:5f:90:2e:21:2b:f8:9e:fd:d7:7b:
         b3:48:af:88:ed:b4:d1:89:41:d5:71:e7:f8:2b:24:c4:ab:33:
         6e:6b:46:8c:91:a3:f8:03:ee:89:ab:31:41:df:31:f8:ad:c1:
         77:88:2e:24:95:1d:b1:a7:40:e7:9c:57:ea:67:97:62:06:51:
         23:4c:e4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:51:28 2026 by rpki-client