Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/323830333a363035303a3a2f33322d3334203d3e20323733303935.roa
File:                     323830333a363035303a3a2f33322d3334203d3e20323733303935.roa (raw, json)
Hash identifier:          6q7yvb/Aal11fc18KcX+Xq64o6N7t2HZhuFdUhiUGjM=
Subject key identifier:   03:E1:20:B2:B9:90:F2:EE:50:43:ED:2D:22:6F:A0:A5:75:31:DA:B5
Certificate issuer:       /CN=5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D
Certificate serial:       306B02AD1A227FD44825D9A2F2420832135BF9C3
Authority key identifier: 5D:C4:01:60:9A:3F:73:61:47:EA:58:DD:C7:A8:E7:B2:1A:0F:8A:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/323830333a363035303a3a2f33322d3334203d3e20323733303935.roa
Signing time:             Sat 30 May 2026 10:55:00 +0000
ROA not before:           Sat 30 May 2026 10:50:00 +0000
ROA not after:            Sat 29 May 2027 10:55:00 +0000
asID:                     273095
IP address blocks:        2803:6050::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6b:02:ad:1a:22:7f:d4:48:25:d9:a2:f2:42:08:32:13:5b:f9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D
        Validity
            Not Before: May 30 10:50:00 2026 GMT
            Not After : May 29 10:55:00 2027 GMT
        Subject: CN=03E120B2B990F2EE5043ED2D226FA0A57531DAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:89:54:f9:5c:11:ce:f9:eb:75:3d:eb:e7:
                    ab:fb:6f:98:d2:29:80:2f:c4:f2:2a:be:15:ed:c0:
                    4f:2f:e1:99:8d:16:05:b8:c2:a7:da:ae:2a:2c:9c:
                    81:95:71:30:29:5e:37:17:97:f7:72:be:6d:79:1d:
                    2f:30:c1:1d:3e:d9:71:1c:8b:54:ef:7b:bf:5e:d0:
                    3f:57:d0:67:4e:c4:8c:e2:7b:f1:68:e3:f3:53:91:
                    ef:b4:06:2b:14:51:5c:d9:8a:1a:9b:5a:73:2f:80:
                    4a:5f:79:c1:69:ab:d0:ff:f9:c5:c2:c2:85:ed:91:
                    79:7e:b9:3c:56:55:28:5c:9c:f1:7f:da:f6:49:0f:
                    3f:b4:81:70:8e:70:62:02:4a:dd:81:db:2d:41:0b:
                    c7:c4:f5:8a:0f:d8:cc:2d:8b:36:17:80:69:16:ff:
                    94:14:a0:f0:4e:7b:ed:32:8c:ae:db:c4:c4:57:0d:
                    25:49:33:2b:02:e5:d5:37:90:c8:9b:55:6c:5b:64:
                    bb:0a:d8:d6:b9:a6:40:96:57:5c:0f:6a:7f:98:a6:
                    e7:54:b3:3e:50:cb:c8:34:d3:78:cd:26:9b:a6:ad:
                    1d:31:42:48:9c:6b:81:98:4d:39:2c:0a:b1:66:ac:
                    39:da:64:e5:f4:ab:d0:3a:bd:77:f6:80:23:57:dc:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E1:20:B2:B9:90:F2:EE:50:43:ED:2D:22:6F:A0:A5:75:31:DA:B5
            X509v3 Authority Key Identifier:
                keyid:5D:C4:01:60:9A:3F:73:61:47:EA:58:DD:C7:A8:E7:B2:1A:0F:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/323830333a363035303a3a2f33322d3334203d3e20323733303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6050::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:08:41:3e:b3:df:ad:f9:01:f2:92:be:59:bf:16:67:f9:
         b7:e3:a1:7b:94:cd:f6:0f:12:2b:94:c6:d0:6e:b8:cb:2a:1e:
         79:b3:fc:39:c7:81:03:82:26:8c:61:e6:4e:b4:ad:1a:60:c6:
         6c:bd:7f:f8:86:8a:62:8c:37:20:1e:38:23:ba:c0:ac:38:34:
         0b:78:3e:a5:fc:b1:69:bf:45:35:24:09:e4:38:b4:8b:4d:60:
         07:5f:6a:55:95:2d:ad:c1:a3:a3:ed:b8:8c:25:7c:eb:e6:a0:
         42:9c:56:b8:b0:cf:3b:60:9b:83:d2:cc:f8:b5:ff:df:e9:fb:
         6d:d0:ae:a7:a1:3d:10:89:43:52:4a:36:88:d3:c3:33:21:7b:
         06:f6:03:7b:f9:dd:99:ff:bf:a1:54:ed:c4:57:d2:55:0b:a7:
         3a:6c:bc:b5:d8:a8:4d:61:fe:1a:ad:cb:4e:f2:e7:20:d5:24:
         db:ed:ef:a1:79:57:cb:ff:e6:5a:6c:52:af:2d:14:8e:64:63:
         82:b2:0c:bb:27:04:5c:f1:09:16:0e:32:bd:51:50:b2:b2:0b:
         b7:2b:71:9c:4a:de:6a:c4:29:5e:f0:2f:69:f7:44:91:27:a1:
         2e:36:9b:b3:dc:f6:7d:e9:4c:3f:8b:68:b1:38:da:f4:f1:f1:
         8a:f6:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:03:18 2026 by rpki-client