Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203231353939.roa
File:                     323830333a3630303a3a2f33322d3536203d3e203231353939.roa (raw, json)
Hash identifier:          T4w/bHW6l56P+p4pBwjYdT2hWqJ2XR+3FiUSelBDH44=
Subject key identifier:   AE:52:3C:5B:D5:D2:03:47:FC:5A:E2:8F:79:27:35:B2:14:EC:70:E3
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       380FE2855B46AE0018DEB096C229DB09E9C7AFD4
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203231353939.roa
Signing time:             Fri 25 Sep 2026 14:36:51 +0000
ROA not before:           Fri 25 Sep 2026 14:31:51 +0000
ROA not after:            Fri 24 Sep 2027 14:36:51 +0000
asID:                     21599
IP address blocks:        2803:600::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0f:e2:85:5b:46:ae:00:18:de:b0:96:c2:29:db:09:e9:c7:af:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:51 2026 GMT
            Not After : Sep 24 14:36:51 2027 GMT
        Subject: CN=AE523C5BD5D20347FC5AE28F792735B214EC70E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:7b:e8:c7:0a:f4:1a:87:de:9d:14:4e:2b:
                    1c:09:b2:60:53:11:5a:72:65:fc:6c:f9:6f:5f:ed:
                    85:95:61:cc:13:b6:78:b4:33:0a:7c:24:07:10:7a:
                    94:b8:9d:7e:06:44:d8:98:67:d6:3a:0f:ed:b0:a0:
                    65:49:00:dd:6c:f2:7a:21:79:b3:56:b7:34:06:2f:
                    61:d6:ef:cd:0f:ef:b7:a1:ee:d3:54:bb:01:11:14:
                    dc:a4:c5:76:51:f2:71:87:ce:ec:08:40:49:a0:4f:
                    2c:fd:b3:6d:0c:25:a8:a1:71:cf:55:04:75:a3:5c:
                    2e:13:d4:14:14:ff:5d:07:59:b8:94:ac:e9:90:65:
                    3c:1b:b4:d4:c6:cf:a5:24:75:9b:98:54:7d:e9:72:
                    0c:db:f2:64:d8:91:bf:f4:85:1b:75:aa:65:1f:25:
                    3f:21:e1:8c:5b:3f:c4:b0:e4:00:81:e6:42:75:c1:
                    c6:16:af:1c:bd:4b:ac:f0:e6:7f:a0:be:a9:64:15:
                    92:c7:cc:84:93:11:dd:7a:1c:46:e8:23:fb:1b:e1:
                    79:f5:b5:74:78:4e:f6:03:ce:01:f7:f1:e6:aa:fb:
                    47:66:bb:98:c7:e6:e5:e1:a7:12:5b:c7:5a:c5:88:
                    c6:55:4f:3e:59:bd:70:0e:dd:40:a3:28:f5:62:ad:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:52:3C:5B:D5:D2:03:47:FC:5A:E2:8F:79:27:35:B2:14:EC:70:E3
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203231353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:84:5d:3c:ac:34:c8:67:58:b7:62:61:30:22:71:19:16:d4:
         8b:ef:72:28:38:b7:72:4b:c1:f0:8e:1a:63:23:27:2a:01:1e:
         03:a3:3b:49:3c:ae:7e:1b:19:ed:33:9e:e0:9c:57:6b:98:19:
         65:cd:88:72:aa:a4:4f:37:99:55:91:51:90:93:f1:cb:43:7e:
         53:02:5d:fd:96:dc:38:83:c7:10:28:7e:a2:73:87:b6:2b:02:
         9d:7e:c7:67:2b:44:57:ef:79:0a:7d:02:d4:b3:c8:b5:c8:ce:
         3d:8a:c2:da:2d:a8:fb:43:95:94:58:e9:62:78:66:a0:4b:a8:
         2f:43:1b:7c:d6:ad:2f:af:41:86:4f:56:ac:ef:45:2f:9c:1f:
         7f:1f:49:d2:55:7e:b3:73:b1:5a:f1:58:d8:ef:bf:de:1f:08:
         4b:3c:9d:cb:52:3d:00:e3:c0:e2:2a:00:7e:ef:27:d3:0a:56:
         72:eb:f3:ae:fa:02:bc:c0:d5:6a:2f:52:a1:c7:3a:65:b4:76:
         89:b4:f5:b5:70:26:ef:01:8f:0a:56:69:dc:3c:c7:03:9d:6b:
         e9:64:41:d8:d7:c3:36:19:ac:3c:95:4e:7a:dc:b7:b7:fd:38:
         f2:62:da:2b:72:96:35:40:09:99:3c:16:8c:ae:b4:5e:d9:02:
         2e:fe:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:25:58 2026 by rpki-client