Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a3a2f33352d3634203d3e203634313230.roa
File:                     323830333a653464303a3a2f33352d3634203d3e203634313230.roa (raw, json)
Hash identifier:          LsZqPXULFlSqQX6kpmEXcTwMuEUlG6kVI0lTNCrhjIw=
Subject key identifier:   E7:13:34:D7:C1:9A:08:13:F0:33:D0:53:C3:A8:B5:71:82:79:D4:9B
Certificate issuer:       /CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
Certificate serial:       2DA2416B7171217EC1C3BACE7BED692E51CD4C65
Authority key identifier: D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a3a2f33352d3634203d3e203634313230.roa
Signing time:             Sun 16 Aug 2026 02:50:00 +0000
ROA not before:           Sun 16 Aug 2026 02:45:00 +0000
ROA not after:            Sun 15 Aug 2027 02:50:00 +0000
asID:                     64120
IP address blocks:        2803:e4d0::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Sep 2026 08:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a2:41:6b:71:71:21:7e:c1:c3:ba:ce:7b:ed:69:2e:51:cd:4c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
        Validity
            Not Before: Aug 16 02:45:00 2026 GMT
            Not After : Aug 15 02:50:00 2027 GMT
        Subject: CN=E71334D7C19A0813F033D053C3A8B5718279D49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:00:88:f9:5f:27:9a:54:c6:b0:02:e7:07:
                    88:0b:0a:45:b5:50:cd:d0:19:51:49:1e:d0:dc:3d:
                    0d:ca:89:02:bc:f8:7e:00:5d:42:47:76:ab:d0:c1:
                    3c:5d:0c:85:db:45:54:35:8f:54:60:ce:d6:35:3a:
                    c2:db:72:33:9c:9a:70:13:b0:bd:7e:1b:25:b3:19:
                    c2:9d:50:86:ca:e4:dc:02:40:91:35:d8:e3:27:76:
                    2a:f9:1d:5c:21:e5:52:33:4f:15:8d:e1:f9:31:22:
                    09:d8:86:3b:30:7a:df:8e:a7:b2:69:14:99:36:22:
                    b0:6c:48:49:36:69:ca:61:b5:1f:b3:c0:b1:27:6e:
                    b9:ce:12:aa:48:12:f8:97:69:d8:84:df:d5:0f:75:
                    c0:cd:13:e0:13:58:cd:34:e4:15:76:57:83:18:ce:
                    bd:bf:bd:d0:cb:a4:7d:af:73:47:70:52:0b:40:54:
                    f8:64:b9:f4:9c:f4:7f:a8:ad:1b:53:56:d6:50:71:
                    eb:54:2d:49:30:6e:12:22:0e:cd:c7:bd:d3:d9:a7:
                    11:40:17:6a:a6:17:a3:9c:90:42:f3:f9:ac:b2:f8:
                    da:91:dc:86:c6:15:82:7b:b8:41:ba:d0:da:a1:ed:
                    89:f4:ce:1f:ef:a0:fe:16:2c:7a:84:2c:14:c5:13:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:34:D7:C1:9A:08:13:F0:33:D0:53:C3:A8:B5:71:82:79:D4:9B
            X509v3 Authority Key Identifier:
                keyid:D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a3a2f33352d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e4d0::/35

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:ec:e2:1a:1a:c1:2f:e2:93:7a:b9:41:e6:a2:bb:31:ec:
         1d:06:67:9c:15:ba:ad:5e:f0:32:fe:62:47:7a:e2:f2:da:a6:
         37:c0:20:84:68:d2:3f:4c:d9:85:7a:c3:64:3d:47:05:74:e6:
         b8:31:01:1c:86:a3:5f:ed:7c:90:c7:22:77:82:96:d8:e4:74:
         16:57:27:1c:6e:84:65:36:c0:87:b1:d0:e0:5b:88:65:ab:03:
         23:5a:89:76:70:2f:a5:4d:95:d5:4d:74:6e:c6:5b:41:25:30:
         f6:1a:25:18:2c:b0:d9:49:04:a1:ca:63:5d:f3:59:d5:ea:b8:
         4b:c4:80:99:ca:f8:fa:5e:3e:42:0f:55:c1:83:36:32:7c:aa:
         b7:1c:ca:f5:a7:9c:13:0d:5a:db:4f:98:22:96:7b:af:ec:09:
         13:2f:bc:f2:72:e4:04:b5:32:1c:05:fa:f5:84:6b:8b:19:b1:
         50:a8:a1:f4:40:88:91:5d:e6:e8:f4:81:1d:71:9f:d8:37:6b:
         29:06:bd:d5:aa:78:d8:94:eb:47:98:3a:f1:20:cd:cd:87:37:
         19:bf:4a:c1:d9:7a:aa:95:72:b2:ae:e3:d8:a1:95:45:72:a9:
         71:36:cd:98:8f:6e:e2:66:d1:a3:61:52:02:c1:5c:35:cc:9e:
         35:3d:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:47 2026 by rpki-client