Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3438203d3e20323734303538.roa
File:                     323830333a333264303a3a2f33322d3438203d3e20323734303538.roa (raw, json)
Hash identifier:          IG4U6JLwX6vcZBNGTPWpH4itRUVeINwW6f41o/swA9A=
Subject key identifier:   AD:D5:C5:E2:BA:DA:BC:AA:A4:49:FA:F5:5A:27:E5:D1:EF:D0:0C:62
Certificate issuer:       /CN=EE685A9E1BEE0C88857B5579FC0C478C36FEE90A
Certificate serial:       75027BC23DF16AE20D46055D7556DA231133BD0F
Authority key identifier: EE:68:5A:9E:1B:EE:0C:88:85:7B:55:79:FC:0C:47:8C:36:FE:E9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3438203d3e20323734303538.roa
Signing time:             Sat 11 Apr 2026 16:38:29 +0000
ROA not before:           Sat 11 Apr 2026 16:33:29 +0000
ROA not after:            Sat 10 Apr 2027 16:38:29 +0000
asID:                     274058
IP address blocks:        2803:32d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:02:7b:c2:3d:f1:6a:e2:0d:46:05:5d:75:56:da:23:11:33:bd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE685A9E1BEE0C88857B5579FC0C478C36FEE90A
        Validity
            Not Before: Apr 11 16:33:29 2026 GMT
            Not After : Apr 10 16:38:29 2027 GMT
        Subject: CN=ADD5C5E2BADABCAAA449FAF55A27E5D1EFD00C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:96:32:03:b6:10:ed:7d:dc:7c:7d:71:8a:
                    f3:58:4a:7b:6c:8c:9a:18:d2:7b:de:2b:09:76:ba:
                    c1:f9:6a:18:45:c3:52:ca:99:57:8b:36:94:f2:c1:
                    d2:52:da:b5:67:fa:4e:74:1c:e3:61:90:71:10:5e:
                    04:7a:02:ba:39:f4:4b:eb:69:4c:77:6a:25:24:8f:
                    12:ae:78:25:cf:02:c5:3c:0f:8e:e7:ff:0a:6c:18:
                    f0:28:19:6d:e6:6a:c7:6d:10:51:c3:8b:e8:7f:f7:
                    40:1c:a2:d5:76:55:da:aa:41:c3:c8:1a:ba:c6:04:
                    4b:03:97:c4:35:85:a2:05:33:5d:3f:2c:39:18:dc:
                    47:ac:58:a2:7e:a9:75:f6:af:96:47:85:cf:05:1f:
                    91:ef:02:d7:d5:75:00:1d:87:59:78:6b:72:2d:9c:
                    77:fa:e2:bd:bf:71:97:99:a1:51:bf:75:72:06:11:
                    38:13:b5:b6:b9:e7:24:73:7e:ea:de:97:5b:ad:3b:
                    f9:5e:7d:26:0c:ca:a4:d0:8a:65:c5:37:16:cc:03:
                    8a:07:66:94:d9:0f:a3:38:4e:dd:91:e3:d3:3c:c3:
                    52:1a:8c:30:fa:ba:75:ff:96:30:25:ea:8b:4e:7c:
                    0b:58:37:79:e9:31:5f:02:91:36:72:44:ed:ba:a0:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D5:C5:E2:BA:DA:BC:AA:A4:49:FA:F5:5A:27:E5:D1:EF:D0:0C:62
            X509v3 Authority Key Identifier:
                keyid:EE:68:5A:9E:1B:EE:0C:88:85:7B:55:79:FC:0C:47:8C:36:FE:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE685A9E1BEE0C88857B5579FC0C478C36FEE90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBE9E35F2E51BCE0587C086FE3A083134FED4584FE34F09EAE22B528F560F59/0/323830333a333264303a3a2f33322d3438203d3e20323734303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:58:b8:ed:a5:51:91:4c:64:12:e6:a2:d7:da:13:4c:f8:20:
         5f:5a:42:5a:65:2e:02:59:ee:35:c4:c7:6b:15:46:e7:f5:f2:
         9d:e2:0b:7f:9c:54:2d:78:82:17:32:2d:3e:58:0f:1a:98:88:
         48:c9:b1:77:69:84:ea:43:28:fc:ff:cc:b6:ff:67:bd:e4:24:
         f3:be:1c:0a:7f:45:3e:a8:df:94:10:d5:4d:33:ee:39:2a:a4:
         16:6b:f5:34:22:0d:57:47:0c:5a:7f:60:16:db:2b:59:f7:a0:
         45:9d:8e:a5:4a:c8:44:8c:01:dd:66:48:86:8e:da:ef:6c:80:
         d0:d6:3e:ed:56:9f:43:d5:0c:2a:8b:3d:ae:49:e4:56:ee:8a:
         43:56:fb:86:c9:a5:1d:4d:5a:0c:a7:76:bc:80:95:50:fc:fc:
         3f:29:31:a6:fd:a0:a8:3f:bf:06:a7:00:d4:17:00:09:59:70:
         52:37:0b:a9:5f:9c:97:fa:e5:2b:dc:4b:b6:2c:32:ab:b0:f0:
         d6:a4:0c:90:69:e9:b7:03:e9:27:c4:91:94:ce:d4:ec:24:0c:
         41:ae:fb:97:ec:7f:30:57:7d:a0:46:e1:06:12:8a:32:88:80:
         78:3c:e4:0e:79:34:76:35:6f:0c:81:39:48:c9:2a:d8:1c:9c:
         01:d7:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:34:08 2026 by rpki-client