Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a333a3a2f34382d3438203d3e20323634373430.roa
File:                     323830333a663463303a333a3a2f34382d3438203d3e20323634373430.roa (raw, json)
Hash identifier:          YI/H2/04uP6c48WgZU7Fsbr/5n0vRXdJUZTYQP2xFAw=
Subject key identifier:   A9:17:B4:68:D6:7F:A9:07:8B:31:A6:6C:57:45:6A:4C:74:64:A9:F8
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       5BCA7EA6E3C29BB4546DD6BA9430C9300484AD52
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a333a3a2f34382d3438203d3e20323634373430.roa
Signing time:             Mon 13 Apr 2026 12:10:00 +0000
ROA not before:           Mon 13 Apr 2026 12:05:00 +0000
ROA not after:            Mon 12 Apr 2027 12:10:00 +0000
asID:                     264740
IP address blocks:        2803:f4c0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ca:7e:a6:e3:c2:9b:b4:54:6d:d6:ba:94:30:c9:30:04:84:ad:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Apr 13 12:05:00 2026 GMT
            Not After : Apr 12 12:10:00 2027 GMT
        Subject: CN=A917B468D67FA9078B31A66C57456A4C7464A9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:cb:8f:e8:14:7c:77:ff:9e:fd:8b:e1:70:
                    30:d0:fc:7c:54:d4:03:15:7c:20:a1:12:f4:f6:10:
                    d9:e3:9d:53:04:a6:7c:ad:f2:1b:95:84:57:78:3d:
                    5f:48:b4:c5:3b:55:13:cb:3e:87:4c:72:14:b2:4b:
                    47:61:58:28:59:65:bd:15:88:6b:a1:90:0c:40:00:
                    c5:fe:92:7a:49:0b:0e:ca:ce:df:8e:06:08:87:1f:
                    d6:b0:14:a9:09:2d:00:f3:bb:cb:ab:4f:36:24:e9:
                    fe:a4:87:89:ac:81:86:3b:d9:f4:b9:83:0c:52:70:
                    b6:00:d0:f2:90:ec:01:03:4f:ce:38:e9:56:c3:7d:
                    46:4c:cf:1b:3a:11:47:68:4c:d3:3e:6d:76:25:9d:
                    ff:50:03:41:d4:bd:4e:56:a3:4e:14:62:44:df:6e:
                    00:2f:67:d0:17:c9:57:14:bd:5b:2d:a1:78:b6:69:
                    13:da:31:13:22:10:cb:64:c5:df:75:5d:d5:bb:1c:
                    fa:98:ab:06:b7:22:8f:1d:10:68:eb:d7:a3:7b:39:
                    cf:78:51:3b:88:48:49:c9:09:89:7a:28:63:55:2f:
                    20:01:6d:b0:e4:5c:59:d2:d6:3b:e5:b3:33:e0:8e:
                    73:2b:0e:ce:95:fd:87:2e:36:4b:38:46:4f:f9:a4:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:B4:68:D6:7F:A9:07:8B:31:A6:6C:57:45:6A:4C:74:64:A9:F8
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a333a3a2f34382d3438203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f4c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:aa:cf:f8:db:45:c9:d7:bc:a6:29:13:90:65:0d:0f:98:85:
         5d:02:f9:09:91:87:70:ad:6c:82:51:64:80:c2:02:34:47:e1:
         bf:db:f9:cb:7f:d2:b4:7a:fe:37:60:d2:46:eb:97:56:67:1e:
         1a:89:76:1d:0f:41:c8:af:cb:fe:33:a6:f6:d1:db:e0:a9:a8:
         a1:ff:3e:38:4f:28:9b:dc:83:22:5a:24:5b:91:a0:48:a8:72:
         95:f9:4a:32:69:05:2e:0a:61:d7:04:bd:3a:51:7b:4c:35:1c:
         22:ba:8c:70:96:72:c8:cc:6c:67:24:5e:d4:f8:1a:78:93:ec:
         c9:d1:32:ee:a3:ac:0c:6d:35:c2:b2:92:10:f5:35:6b:92:0c:
         ab:67:7e:53:98:2d:44:88:1c:0e:8f:56:93:ef:1d:6e:c7:e8:
         18:67:ed:9c:13:50:e9:ce:30:6e:1d:4d:6d:9f:c0:35:7a:51:
         92:47:ac:f6:42:45:b1:cd:b9:db:5a:7a:32:6f:e5:56:bb:3a:
         54:0c:e2:59:0f:d7:f9:42:5e:33:ec:80:87:7d:97:f8:0a:ec:
         97:75:d1:4e:e4:c9:1a:bc:bc:16:db:3c:c8:6f:41:dd:1d:62:
         24:3d:58:d9:2d:a7:6a:bf:85:1e:6a:4a:61:2c:86:d6:02:6e:
         df:d3:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:48 2026 by rpki-client