Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/323830333a626530303a3a2f33322d3436203d3e203532343235.roa
File:                     323830333a626530303a3a2f33322d3436203d3e203532343235.roa (raw, json)
Hash identifier:          HpSJ8sEJdmgNmgpq5gQPdFqaIJBCAbe9cASamouhKek=
Subject key identifier:   49:B8:87:E5:13:AA:5C:80:42:54:90:7B:6C:46:71:41:17:B4:7F:06
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       242E79651DAA4E502D31C7ED2526797B49F19F82
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/323830333a626530303a3a2f33322d3436203d3e203532343235.roa
Signing time:             Mon 06 Apr 2026 12:05:01 +0000
ROA not before:           Mon 06 Apr 2026 12:00:01 +0000
ROA not after:            Mon 05 Apr 2027 12:05:01 +0000
asID:                     52425
IP address blocks:        2803:be00::/32 maxlen: 46
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2e:79:65:1d:aa:4e:50:2d:31:c7:ed:25:26:79:7b:49:f1:9f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Apr  6 12:00:01 2026 GMT
            Not After : Apr  5 12:05:01 2027 GMT
        Subject: CN=49B887E513AA5C804254907B6C46714117B47F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:67:96:3b:3c:16:8d:01:3d:99:1d:6e:94:
                    08:92:16:1c:83:07:54:99:8a:74:ce:af:a0:64:3d:
                    88:a8:80:9d:27:62:f1:b6:7a:c3:ce:52:16:fe:8d:
                    ed:6f:e4:30:e9:72:3a:4a:22:a5:04:11:58:7e:63:
                    05:30:6b:b1:b8:7a:c7:cc:93:00:72:ac:bc:4b:50:
                    b1:c5:d5:b4:e6:aa:f9:0d:0e:95:cf:1e:c6:ad:a5:
                    50:63:3e:bc:92:1a:cd:5a:6a:3c:28:ac:82:b4:5a:
                    d6:bd:b8:6a:93:77:7e:5a:ee:ec:e5:22:42:16:a7:
                    64:26:79:27:d1:e0:ab:ee:b4:28:fb:7b:f0:0e:1f:
                    13:e9:c0:c2:d8:fa:73:fc:fc:65:40:1a:b3:b0:cf:
                    2a:4c:1b:86:b6:41:2b:e9:b2:04:ea:d6:e4:9f:71:
                    4d:1b:c7:fc:0a:88:35:aa:9d:a1:a0:c6:7b:33:3b:
                    05:b1:66:c8:ab:4d:71:7a:a3:3e:fe:23:5e:36:72:
                    70:ee:d3:0b:8b:1a:bf:bc:15:b5:bc:8e:28:ee:71:
                    d3:36:59:87:09:f2:5f:90:d1:fd:3b:02:1b:bf:35:
                    09:c9:94:e6:51:94:19:82:d1:b2:54:41:e2:f7:55:
                    49:9f:5b:2d:96:ac:6c:85:e7:e3:93:e6:e2:63:dc:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B8:87:E5:13:AA:5C:80:42:54:90:7B:6C:46:71:41:17:B4:7F:06
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/323830333a626530303a3a2f33322d3436203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:be00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:62:f5:d0:80:ab:78:d9:69:23:b8:65:4d:7c:46:1a:0c:9d:
         66:d9:35:66:02:4e:d9:75:14:08:11:15:2d:aa:22:01:79:03:
         7e:03:ee:66:82:84:22:c6:75:6e:d4:15:19:44:8a:36:87:d7:
         73:1b:90:f2:4e:ee:8f:9b:f7:95:f8:ed:6d:f4:c5:39:f8:90:
         60:11:62:a0:ef:d1:85:3a:78:a5:ce:00:ac:13:3b:2a:80:fe:
         c8:8b:5d:24:f3:0b:78:43:fd:76:60:0f:e1:54:1c:9d:2a:a2:
         25:95:53:67:30:6f:b5:a7:8a:33:21:af:e0:9d:0a:44:ff:19:
         a3:18:b7:de:a2:86:9f:9a:f4:06:62:99:3b:7f:23:44:92:2e:
         4d:bd:6b:1b:c0:6f:ac:70:a4:e0:92:7f:e8:2a:d2:18:c9:59:
         a3:a0:74:b2:61:06:91:f6:5c:a3:29:f8:b4:0e:dc:5d:0f:2f:
         df:dc:3f:6b:09:b2:a8:a6:ee:04:1c:b6:e1:6f:b0:bc:e2:0e:
         61:88:25:e9:1f:01:4c:ae:e9:80:05:a9:7b:4b:e7:fe:1f:ae:
         0e:74:24:8e:a0:87:a2:60:77:d1:9b:88:1b:76:cd:50:8e:ae:
         48:fb:2e:ba:4a:6c:51:ba:ae:bb:f2:4c:f4:1d:63:b3:c1:c5:
         fa:88:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:27:34 2026 by rpki-client