Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/323830333a353234303a3a2f33322d3436203d3e20323633383039.roa
File:                     323830333a353234303a3a2f33322d3436203d3e20323633383039.roa (raw, json)
Hash identifier:          0z7/SB49LS/Ta0nd2If2nboEO+lxegV/FmoUuJYXcz4=
Subject key identifier:   13:8C:CE:5B:9B:32:C3:49:C2:9B:BA:3C:2A:4C:58:D1:BB:8D:50:14
Certificate issuer:       /CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4
Certificate serial:       7F97ED9E8348EF1CE528F56C3E75802A100C0C44
Authority key identifier: D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/323830333a353234303a3a2f33322d3436203d3e20323633383039.roa
Signing time:             Mon 06 Apr 2026 12:10:03 +0000
ROA not before:           Mon 06 Apr 2026 12:05:03 +0000
ROA not after:            Mon 05 Apr 2027 12:10:03 +0000
asID:                     263809
IP address blocks:        2803:5240::/32 maxlen: 46
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:97:ed:9e:83:48:ef:1c:e5:28:f5:6c:3e:75:80:2a:10:0c:0c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4
        Validity
            Not Before: Apr  6 12:05:03 2026 GMT
            Not After : Apr  5 12:10:03 2027 GMT
        Subject: CN=138CCE5B9B32C349C29BBA3C2A4C58D1BB8D5014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:18:d9:44:1d:20:68:f1:d3:f6:67:a6:18:
                    9b:dd:d1:6c:ee:dc:b6:dc:1b:3e:3e:f2:38:ac:c4:
                    6c:6f:fe:f8:a7:5e:56:63:1f:72:8b:aa:20:4e:e4:
                    1e:7f:b3:b5:bb:47:de:70:44:2e:9f:aa:65:f1:52:
                    ee:58:b1:93:53:04:68:e8:cd:dc:18:26:6c:82:4c:
                    e7:16:92:05:32:3a:f6:e9:24:1b:e7:f9:f4:76:02:
                    16:e2:fd:93:bc:ae:b1:bc:1e:bf:e4:9a:c9:fd:9f:
                    99:a4:a0:80:ed:ef:0c:5d:f6:2b:87:16:9a:4f:4f:
                    e2:c0:c7:8f:b8:74:03:6e:be:02:90:fb:63:d6:01:
                    77:de:0c:d1:b3:e0:f1:ca:a0:6a:5c:f1:80:db:21:
                    93:24:aa:66:50:66:13:b0:1c:f4:c3:73:a5:c9:f8:
                    66:b5:80:79:4c:cb:be:d2:32:6a:da:4e:39:ee:36:
                    7c:78:bf:1f:d2:d8:86:7f:01:d1:ed:2f:9b:b1:d0:
                    9e:d4:5f:bc:52:e3:ab:d1:8f:32:4d:c8:0d:19:ac:
                    16:90:a1:d3:67:ac:4d:1b:a6:d3:dc:55:59:4b:27:
                    dc:fa:27:10:a6:51:d3:79:d8:a4:48:fb:44:16:54:
                    b6:79:a0:91:fb:98:bf:f1:49:b0:eb:fc:b4:03:29:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8C:CE:5B:9B:32:C3:49:C2:9B:BA:3C:2A:4C:58:D1:BB:8D:50:14
            X509v3 Authority Key Identifier:
                keyid:D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/323830333a353234303a3a2f33322d3436203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5240::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:1d:33:48:94:b3:a9:f2:1e:8a:49:6a:8e:93:2d:b2:37:9f:
         46:4b:08:c5:b8:d5:b0:36:9c:31:6d:d6:3c:f5:f7:0b:97:3e:
         81:53:3e:1d:1e:3e:d3:92:85:e5:34:d8:66:52:dd:92:1c:5b:
         e9:8e:54:e1:a6:19:08:e8:2d:3e:e5:89:ee:57:36:00:3d:3a:
         78:4d:3c:1c:98:47:30:df:c2:f1:d4:33:a0:cb:9a:29:fe:3d:
         4f:ac:b8:f4:29:d5:eb:b3:37:49:a1:2e:d9:c1:a5:e2:27:05:
         b4:d7:80:53:f8:05:b3:7b:85:68:1f:35:d9:14:33:69:92:10:
         65:aa:02:15:d5:87:66:d5:42:d2:8b:f6:fe:a8:1a:98:33:e0:
         1e:ac:41:37:de:34:78:5b:27:8a:9c:e2:62:27:bc:81:04:e0:
         81:62:c0:a4:11:0c:1d:18:0a:aa:4c:85:11:b4:99:9f:f6:a6:
         67:fe:10:06:a2:ef:31:a9:72:c3:82:98:c6:4b:34:b4:af:63:
         c4:7b:f7:18:cf:dd:66:36:7b:e4:b7:c7:6b:16:19:9c:b0:c8:
         ac:a5:0a:dd:27:f7:6f:b6:c4:15:b8:c8:15:04:5f:2c:a3:e4:
         d3:c5:32:ac:17:ca:47:d4:16:e8:ee:43:df:dd:a9:65:30:ec:
         84:9d:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:57:29 2026 by rpki-client