Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/323830333a383233303a3a2f33322d3438203d3e20323734383439.roa
File:                     323830333a383233303a3a2f33322d3438203d3e20323734383439.roa (raw, json)
Hash identifier:          R4r8Ae/Uo+Cx6hIwQC/tmV6dmz5YOLQoLprG3sQWpE0=
Subject key identifier:   FD:52:39:77:E2:99:EB:DE:2A:04:8B:D9:2B:DB:2F:B0:A2:AD:45:95
Certificate issuer:       /CN=0112D41BCB154C6D895A8F7F12E40C950EA901DE
Certificate serial:       75A89375D744544395B52EF1B85136F2CA89CA9E
Authority key identifier: 01:12:D4:1B:CB:15:4C:6D:89:5A:8F:7F:12:E4:0C:95:0E:A9:01:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/323830333a383233303a3a2f33322d3438203d3e20323734383439.roa
Signing time:             Mon 02 Mar 2026 03:55:00 +0000
ROA not before:           Mon 02 Mar 2026 03:50:00 +0000
ROA not after:            Mon 01 Mar 2027 03:55:00 +0000
asID:                     274849
IP address blocks:        2803:8230::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a8:93:75:d7:44:54:43:95:b5:2e:f1:b8:51:36:f2:ca:89:ca:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0112D41BCB154C6D895A8F7F12E40C950EA901DE
        Validity
            Not Before: Mar  2 03:50:00 2026 GMT
            Not After : Mar  1 03:55:00 2027 GMT
        Subject: CN=FD523977E299EBDE2A048BD92BDB2FB0A2AD4595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:89:18:c6:19:5b:3d:e5:a9:04:a6:5c:ba:
                    15:1f:3f:40:51:d4:17:e5:48:ec:cf:f9:73:76:0c:
                    ca:93:c4:e4:7c:c3:e9:01:90:bb:87:8c:32:5b:d5:
                    d3:d2:0d:5b:16:3d:3d:e7:e0:5d:57:6c:d4:6e:33:
                    ce:a5:bc:a0:6c:7c:b8:9c:cb:41:8f:7b:86:6b:c6:
                    da:91:e6:bc:6d:fd:c9:39:ea:6a:37:d7:4b:22:c6:
                    c9:e6:21:a1:98:aa:74:e7:4f:aa:76:24:71:d0:1b:
                    e6:de:a7:d1:49:3b:96:25:aa:af:43:06:26:fd:cb:
                    ab:28:91:62:bc:3f:99:70:05:d7:93:15:01:43:72:
                    f2:84:52:ab:6e:a3:4e:15:c1:70:be:d8:d9:b5:d6:
                    ac:9e:19:f5:9c:16:be:a2:57:1f:26:25:de:a8:09:
                    c7:9b:ac:e8:57:e0:88:8f:27:8e:b0:13:cd:11:36:
                    95:70:1b:67:7c:c6:c8:1b:18:a3:6f:2b:86:93:a7:
                    a3:d7:33:a8:77:70:6d:65:44:3a:c1:42:ec:39:42:
                    11:8a:15:86:21:48:aa:ba:e1:4a:8e:67:95:cd:fc:
                    a0:ac:44:5f:9a:c0:54:91:8d:8c:52:2b:bc:7d:85:
                    23:15:31:96:33:cb:5c:5c:8f:08:a0:3b:a3:63:23:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:52:39:77:E2:99:EB:DE:2A:04:8B:D9:2B:DB:2F:B0:A2:AD:45:95
            X509v3 Authority Key Identifier:
                keyid:01:12:D4:1B:CB:15:4C:6D:89:5A:8F:7F:12:E4:0C:95:0E:A9:01:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/323830333a383233303a3a2f33322d3438203d3e20323734383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8230::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:c6:b8:0a:1f:41:0a:e0:93:ae:07:02:21:71:79:94:11:ad:
         16:e2:4f:b6:f8:19:d2:cb:53:2f:57:4b:aa:d3:05:17:6d:e3:
         22:c1:cc:51:78:21:7e:c0:28:e6:f9:e3:f3:67:39:2c:22:d8:
         58:85:4e:0c:0e:4e:e9:06:20:07:eb:ed:cd:98:45:69:35:23:
         8a:1b:fa:37:71:91:90:1e:33:45:c9:56:f1:7c:75:ed:2a:5b:
         70:b0:dd:85:c4:20:f7:a3:64:23:a1:88:87:2c:fd:25:01:b8:
         16:93:5a:2c:60:c1:de:6b:65:61:0f:95:bd:64:8f:18:fc:04:
         98:c4:f7:e2:31:ce:8a:9e:1b:89:5c:7c:59:16:17:e3:8b:27:
         71:1f:88:9f:51:23:87:d3:c3:5a:54:1c:61:6b:04:47:78:17:
         c9:31:49:05:be:e5:ad:15:60:c2:eb:d6:73:cb:9f:c0:ad:fb:
         e8:70:46:5e:b7:39:a8:5c:02:44:1f:a3:e0:10:c8:6f:d3:42:
         fc:49:e6:ce:30:c4:43:f5:6b:69:4b:85:ad:f1:eb:0a:76:f9:
         96:87:a5:3f:01:fe:32:22:08:90:62:fa:0f:35:aa:45:bd:59:
         e4:48:e9:e4:03:a1:62:61:49:3b:68:c1:58:51:b1:d5:5f:ef:
         e7:62:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:53 2026 by rpki-client