Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a343030303a3a2f34302d3430203d3e20323639383035.roa
File:                     323830333a323665303a343030303a3a2f34302d3430203d3e20323639383035.roa (raw, json)
Hash identifier:          Ru3w4xYadvxoeEtAyv4aylaeYxOD5Qzj5YwHSk/aLd0=
Subject key identifier:   1F:D0:F6:95:71:A7:6D:D4:98:25:C6:C8:A0:5D:9F:08:49:E3:6E:A2
Certificate issuer:       /CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
Certificate serial:       4AE35FDBEBD291053CC837184C7B3AA7E937918C
Authority key identifier: 1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a343030303a3a2f34302d3430203d3e20323639383035.roa
Signing time:             Mon 06 Apr 2026 16:37:41 +0000
ROA not before:           Mon 06 Apr 2026 16:32:41 +0000
ROA not after:            Mon 05 Apr 2027 16:37:41 +0000
asID:                     269805
IP address blocks:        2803:26e0:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:5f:db:eb:d2:91:05:3c:c8:37:18:4c:7b:3a:a7:e9:37:91:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
        Validity
            Not Before: Apr  6 16:32:41 2026 GMT
            Not After : Apr  5 16:37:41 2027 GMT
        Subject: CN=1FD0F69571A76DD49825C6C8A05D9F0849E36EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:99:de:6b:ec:7b:d3:04:4b:9a:30:25:ad:
                    c6:9f:73:06:1b:84:83:63:55:a1:1b:6a:c2:65:ec:
                    64:bb:9a:b0:27:50:d3:a3:fa:79:df:ee:7c:54:e6:
                    78:f9:fa:80:06:42:ca:07:05:c9:50:e3:e6:74:b1:
                    d9:fa:83:d2:5b:e3:bd:bc:60:88:77:c9:d1:e4:6b:
                    0b:7e:51:50:35:1f:1c:05:f3:51:ec:e5:25:50:c2:
                    07:87:f0:24:35:fb:72:4f:7c:ba:37:be:95:1e:08:
                    7b:d9:d0:49:5d:51:9c:43:69:1a:b1:3e:06:2e:e0:
                    da:ec:fb:51:d8:3d:13:07:68:36:68:7c:44:28:26:
                    74:69:5d:b7:28:3c:ec:75:b0:4a:94:9f:94:42:27:
                    2f:1c:d2:8b:e2:c6:2a:5c:96:6c:13:13:03:5c:68:
                    98:89:ac:35:31:cd:ba:fe:b9:e9:f8:6e:19:4b:d7:
                    b9:c8:dd:19:51:9b:50:07:1d:14:2a:c9:49:14:a4:
                    c5:85:39:ed:10:2a:ef:ad:41:3f:9c:7d:4b:68:ea:
                    58:99:2a:74:2b:5d:4b:bb:ff:09:ec:a5:7b:9a:2e:
                    d5:c6:85:cc:49:c6:8d:50:f4:09:1b:7e:f8:3a:b3:
                    c7:41:5d:89:a0:b6:b0:ba:3d:82:b9:c6:d3:72:f8:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D0:F6:95:71:A7:6D:D4:98:25:C6:C8:A0:5D:9F:08:49:E3:6E:A2
            X509v3 Authority Key Identifier:
                keyid:1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a343030303a3a2f34302d3430203d3e20323639383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:26e0:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:57:d7:43:18:2e:69:b9:6b:3c:37:bd:a8:89:a1:36:06:
         46:da:b3:5c:d8:42:af:63:8a:45:44:fb:d1:e2:58:c5:1c:9a:
         39:81:27:8d:77:27:a3:69:60:d8:52:f8:4a:fb:c0:0a:4d:21:
         c8:28:f0:92:83:46:f3:a2:be:f4:44:d9:9c:60:eb:48:ca:5d:
         76:50:b4:50:80:87:53:75:fc:21:d2:22:33:a2:54:25:7e:32:
         ca:81:34:50:01:76:83:fc:cd:ca:fa:59:27:9d:bb:62:7d:07:
         23:3c:c0:ee:bf:61:48:67:24:96:75:b2:da:8e:01:0e:30:64:
         8f:db:5b:96:7a:91:cd:c0:a3:63:e2:9c:0e:bc:1c:e7:fa:c1:
         57:6d:d0:9e:1b:7d:70:e7:fb:b3:57:e3:42:a8:f6:fe:87:9b:
         81:82:30:55:ad:cc:fc:ec:8a:d8:8c:5f:ff:9e:cd:ce:7b:a7:
         d1:a9:57:24:8e:68:d5:06:d1:91:3e:74:8d:b5:a4:76:2a:b9:
         1e:ca:60:fb:8a:32:12:48:84:c2:b5:74:7d:cc:2a:d0:65:53:
         73:ff:44:7c:96:ce:b4:25:14:96:e1:6f:47:cc:a5:7d:44:d0:
         82:a1:e8:d2:40:3f:66:85:ec:4d:ea:95:a5:50:5a:0b:20:61:
         aa:d4:cf:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:20:28 2026 by rpki-client