Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/323830333a386135303a3a2f33322d3332203d3e20323733313735.roa
File:                     323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (raw, json)
Hash identifier:          nq297afTlSUJbpE9KucQxGzAF//C5+OApfISJeGV/Mg=
Subject key identifier:   6E:44:D5:3E:E4:41:2A:17:70:7B:B4:86:A2:CA:12:85:1D:78:1D:89
Certificate issuer:       /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
Certificate serial:       598884DC30C451EDAB825FF49CA4692F6FB439EA
Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/323830333a386135303a3a2f33322d3332203d3e20323733313735.roa
Signing time:             Thu 26 Feb 2026 12:31:58 +0000
ROA not before:           Thu 26 Feb 2026 12:26:58 +0000
ROA not after:            Thu 25 Feb 2027 12:31:58 +0000
asID:                     273175
IP address blocks:        2803:8a50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 08:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:88:84:dc:30:c4:51:ed:ab:82:5f:f4:9c:a4:69:2f:6f:b4:39:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
        Validity
            Not Before: Feb 26 12:26:58 2026 GMT
            Not After : Feb 25 12:31:58 2027 GMT
        Subject: CN=6E44D53EE4412A17707BB486A2CA12851D781D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:f9:60:8b:3e:ed:90:ee:e2:ec:62:bd:6f:
                    a1:80:af:3f:57:eb:2e:1a:ad:85:10:0e:90:1a:74:
                    6d:00:39:e1:6b:b1:a1:43:c8:b0:27:91:39:28:60:
                    bb:ed:f3:15:31:75:48:c2:bf:f9:c2:d3:e0:15:27:
                    75:b2:c6:c1:90:a6:f0:12:8d:2b:bd:e6:12:97:b1:
                    ef:48:21:2b:58:73:5f:23:b3:9e:5d:06:91:8f:0b:
                    0b:5e:32:63:5b:58:a6:b9:65:72:e6:ab:61:59:64:
                    6d:fa:23:57:9a:af:28:47:a9:7f:c6:84:cb:91:ef:
                    0a:e3:5e:48:d7:8f:64:e3:d1:02:1f:a9:cf:31:f3:
                    6a:76:97:7b:54:b0:3e:d4:d2:14:3b:fa:29:1e:a4:
                    61:2a:bb:fc:8d:ee:c5:70:1c:5a:a0:3c:41:28:64:
                    eb:fc:1d:0e:cf:7a:bc:1f:eb:8a:bf:3a:aa:1b:5f:
                    38:66:5f:d0:e1:58:43:dc:bd:92:44:dd:47:6f:6c:
                    56:db:4b:d8:73:8d:ed:5e:2c:01:73:f6:a2:6d:97:
                    3f:15:01:e2:d9:37:e3:eb:1d:3d:4e:94:f0:a2:85:
                    1e:ca:9d:24:a4:a7:68:48:4b:27:f3:e0:fb:bc:73:
                    f5:d9:35:b3:33:57:8f:16:b9:3d:ff:29:7b:d5:5c:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:D5:3E:E4:41:2A:17:70:7B:B4:86:A2:CA:12:85:1D:78:1D:89
            X509v3 Authority Key Identifier:
                keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/323830333a386135303a3a2f33322d3332203d3e20323733313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:bb:a6:88:e1:82:95:e9:48:66:74:5d:8b:05:fd:05:fd:
         d1:43:31:5b:ba:e4:7a:26:a2:ff:37:02:33:b3:94:05:e2:b8:
         2e:70:32:76:b0:a5:97:e7:7d:60:7f:f3:25:70:14:53:25:df:
         93:ce:e4:ec:b7:b8:b0:23:c6:a8:a0:f5:e1:4c:45:cb:ea:bc:
         30:50:58:5a:d6:3e:2e:03:07:9d:30:e0:03:1b:90:92:c5:ff:
         cd:44:2c:8b:55:50:ee:50:40:99:02:ba:e9:05:e4:78:7e:e0:
         84:78:48:7d:6d:e8:52:28:e8:fb:23:5e:55:d8:3b:83:2d:1a:
         33:61:b5:e2:26:ab:7b:f9:fb:b6:04:b2:ea:88:87:c0:9e:3e:
         07:26:e6:88:c4:26:54:e5:66:7e:97:46:e0:bd:c1:d6:f2:cb:
         f8:ce:42:02:e2:e7:c0:c9:a4:6e:43:82:9e:29:6f:e1:88:70:
         22:70:bd:2a:45:a1:07:12:34:37:60:15:ea:f5:0d:5e:2a:5c:
         4b:80:7a:b5:69:27:51:2c:ad:fe:27:dd:cf:c0:e9:05:2c:8c:
         27:62:bc:58:94:57:3a:23:73:6c:da:be:01:e7:57:e8:67:10:
         d4:80:d7:a7:c4:bc:f7:78:4d:6d:73:12:0b:50:5d:d3:6d:ce:
         b7:45:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:53 2026 by rpki-client