Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3436203d3e20323633323133.roa
File:                     323830333a653238303a3a2f33322d3436203d3e20323633323133.roa (raw, json)
Hash identifier:          8aVr/ylC0wjxeq+dkHT5QzHm7U1MpQtGFfBVwWQw0BA=
Subject key identifier:   B8:89:74:DC:79:65:6A:04:20:24:53:1F:5D:A9:2A:F3:88:7B:AD:A6
Certificate issuer:       /CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
Certificate serial:       53A3018BB332C2DBBF9656FE49729E5308E30F98
Authority key identifier: 92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3436203d3e20323633323133.roa
Signing time:             Tue 31 Mar 2026 15:25:00 +0000
ROA not before:           Tue 31 Mar 2026 15:20:00 +0000
ROA not after:            Tue 30 Mar 2027 15:25:00 +0000
asID:                     263213
IP address blocks:        2803:e280::/32 maxlen: 46
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a3:01:8b:b3:32:c2:db:bf:96:56:fe:49:72:9e:53:08:e3:0f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
        Validity
            Not Before: Mar 31 15:20:00 2026 GMT
            Not After : Mar 30 15:25:00 2027 GMT
        Subject: CN=B88974DC79656A042024531F5DA92AF3887BADA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:01:0b:b7:81:fa:77:40:e6:3d:a7:e1:94:
                    3b:b5:d0:7a:3c:07:fc:84:78:8c:10:3e:69:b6:06:
                    9e:b6:a6:69:be:68:a7:f1:35:d4:2a:72:23:2f:53:
                    b6:11:0a:55:56:07:4a:4e:29:ff:6b:ac:39:f7:ca:
                    63:50:33:b1:f2:e4:d2:2d:d1:59:66:ed:b1:f4:59:
                    9e:fd:a5:7f:f6:05:5d:e6:e8:f4:ce:64:a9:b8:38:
                    36:7f:9b:df:9c:78:87:35:b8:bb:ad:c7:84:3b:8e:
                    58:79:f3:91:84:c8:fa:cc:98:9f:fa:6d:fa:52:69:
                    5f:33:b3:5d:70:c4:0b:87:88:56:77:6e:36:16:b7:
                    9b:41:49:ad:e3:bb:ae:e4:e7:60:7a:a5:fd:76:a5:
                    95:e4:ca:94:15:01:41:4c:5d:02:06:7c:52:dd:7a:
                    b1:a3:b1:80:b9:c1:fb:31:31:50:bc:a3:96:9c:61:
                    22:3d:e5:bd:b4:18:78:dd:2a:01:81:13:54:f2:9e:
                    ba:03:24:52:5a:82:92:73:2f:35:e1:54:c0:77:df:
                    5e:5e:ea:be:39:95:1d:e9:c7:bd:1a:dd:c7:a4:b2:
                    dd:01:81:97:2f:3c:70:8e:06:a9:c1:97:f2:d3:55:
                    15:45:25:9a:ba:cb:ea:32:6e:cf:51:d7:90:de:00:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:74:DC:79:65:6A:04:20:24:53:1F:5D:A9:2A:F3:88:7B:AD:A6
            X509v3 Authority Key Identifier:
                keyid:92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3436203d3e20323633323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e280::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:a5:71:5c:31:b5:0e:8f:cf:d4:37:94:2a:16:05:d5:ff:
         d7:d2:f5:36:f9:93:47:1b:21:3c:7e:72:49:46:d3:44:9c:cf:
         13:d1:7c:98:7a:01:10:2f:51:84:71:f2:ab:87:b6:fb:3d:ae:
         71:31:81:9a:b1:60:84:de:62:f9:43:d2:0c:e3:bd:d3:9e:a0:
         68:51:39:e3:c1:85:3d:45:51:d4:63:e2:54:e4:19:62:14:dd:
         7c:e7:b3:0a:d0:ef:42:9d:b5:98:47:e6:11:e7:b2:e6:22:ca:
         28:0b:f9:21:78:d5:dc:e9:b4:8b:64:e6:5b:3e:cd:1b:3b:82:
         79:0f:d7:91:3e:28:09:5d:4d:9b:5a:4f:99:e2:e0:98:6e:87:
         6c:ad:2a:2c:58:ff:9d:eb:06:a9:76:96:62:65:11:e7:5e:73:
         2a:16:26:8a:2b:61:e0:a4:7a:34:d6:aa:0a:a2:db:0f:e6:c9:
         6c:43:51:c1:b7:cf:29:6a:e8:ec:ea:89:ac:66:b0:ff:a9:27:
         3b:a3:ef:a2:5b:81:53:7f:df:ea:6c:55:ac:35:22:ed:f1:7a:
         52:48:83:c1:85:b9:29:3d:7a:ab:9c:7b:b9:60:14:b5:a9:2d:
         3c:4c:22:f2:cb:66:49:5d:0e:b0:bd:01:a0:52:c5:b3:51:db:
         3c:52:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:52 2026 by rpki-client