Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/323830333a343130303a3a2f33322d3332203d3e203532343236.roa
File:                     323830333a343130303a3a2f33322d3332203d3e203532343236.roa (raw, json)
Hash identifier:          pqckd5pX6+oo8TJj5ap/ui0krN/frEgFy2B+cwK65vU=
Subject key identifier:   73:EB:FD:93:DF:18:3B:64:67:AA:06:36:39:45:5F:F0:B3:C2:6D:95
Certificate issuer:       /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial:       7D1C71EF90AD3CF8602DEABCB1F48D456D6F5661
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/323830333a343130303a3a2f33322d3332203d3e203532343236.roa
Signing time:             Thu 28 May 2026 19:44:34 +0000
ROA not before:           Thu 28 May 2026 19:39:34 +0000
ROA not after:            Thu 27 May 2027 19:44:34 +0000
asID:                     52426
IP address blocks:        2803:4100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 13:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1c:71:ef:90:ad:3c:f8:60:2d:ea:bc:b1:f4:8d:45:6d:6f:56:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
        Validity
            Not Before: May 28 19:39:34 2026 GMT
            Not After : May 27 19:44:34 2027 GMT
        Subject: CN=73EBFD93DF183B6467AA063639455FF0B3C26D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:f2:0d:27:43:f1:de:5a:21:df:4d:76:29:
                    0f:b0:09:11:f4:9c:af:b0:a7:88:00:86:0f:1b:fa:
                    46:a3:94:c0:35:9e:3b:a0:13:ec:0e:df:5c:36:09:
                    80:28:64:27:40:52:38:88:ba:d1:c8:91:15:11:5f:
                    6c:5e:02:90:2a:6c:13:d5:ab:0e:d8:11:76:bd:85:
                    64:71:12:97:c7:7c:0a:5e:04:b0:42:ce:86:19:fc:
                    01:85:63:91:fb:6a:4f:43:37:9f:91:69:0a:6a:c8:
                    ac:8e:28:42:9f:33:7e:60:21:bd:53:1f:90:09:83:
                    01:97:d1:2d:70:fd:12:6c:56:0a:c6:31:a0:c3:d6:
                    98:9d:ab:24:db:05:e7:40:3a:e5:ee:47:ff:3d:25:
                    52:f4:72:94:71:44:b0:19:c5:f9:c6:36:23:5f:59:
                    ae:70:3f:00:10:82:a3:4f:32:80:a9:af:01:84:6e:
                    58:21:2b:a1:6f:2e:be:cf:2d:bd:8a:ea:c1:26:2c:
                    9a:1b:2b:e4:e8:39:58:51:85:d8:00:f1:97:6f:df:
                    3c:ca:04:49:26:8a:d0:c0:27:a5:2e:00:a8:8f:b8:
                    65:49:f0:fe:9a:12:d3:74:a8:75:08:29:e3:53:73:
                    a1:c1:15:bd:93:fb:1e:9b:7c:03:7b:c6:6c:41:dd:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EB:FD:93:DF:18:3B:64:67:AA:06:36:39:45:5F:F0:B3:C2:6D:95
            X509v3 Authority Key Identifier:
                keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/323830333a343130303a3a2f33322d3332203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4100::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:6d:be:20:8f:97:58:45:d7:6a:16:60:b8:1a:b7:d5:a6:5a:
         53:1d:9a:16:43:19:b7:2a:9a:6f:2e:0a:0f:fd:55:a2:b2:c0:
         1d:8c:33:68:4c:cc:47:5e:54:7d:f5:86:bd:11:e3:74:68:98:
         82:86:ff:21:0c:db:33:ed:4f:ff:a2:32:49:47:79:d6:8c:1f:
         95:8c:2f:c4:55:8a:95:49:c5:0c:60:21:d2:af:5f:bd:db:b4:
         33:c8:55:08:02:38:9c:63:a3:10:27:d0:29:76:ba:a5:6c:ef:
         b2:0a:54:f4:07:f1:d2:6a:da:87:39:74:17:4d:6b:82:85:c1:
         3c:22:d8:08:95:45:24:c2:ea:88:63:00:04:34:b6:3e:fa:aa:
         1a:16:26:85:d1:21:ab:f3:a1:4e:3c:fd:b3:6e:8d:44:a7:d4:
         b2:3a:7d:c1:10:8a:40:88:03:84:84:91:21:24:2d:4d:01:fc:
         ac:e7:63:37:2a:e5:e2:d3:04:c6:44:45:34:61:29:50:8c:1e:
         70:e9:5f:be:9c:59:39:e7:5a:e8:39:4f:f9:cb:b6:9d:13:c5:
         c0:a1:b9:5c:8e:71:c3:82:31:15:d8:64:4c:78:89:09:d8:64:
         b4:6d:b4:75:ea:12:53:03:0c:b9:8d:3b:39:b0:e4:a7:e1:ec:
         0c:99:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:05:43 2026 by rpki-client