Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/323830333a333235303a656161653a3a2f34382d3438203d3e20323635363838.roa
File:                     323830333a333235303a656161653a3a2f34382d3438203d3e20323635363838.roa (raw, json)
Hash identifier:          aP+x0J9mLr0YJ7gMmAdW2kzE5SJn4uPFzhFSr4U6Hb0=
Subject key identifier:   C9:93:9B:F2:06:22:7F:7A:C8:09:D1:F3:63:FB:3A:B1:DC:1B:5D:8B
Certificate issuer:       /CN=E1B0DB501E261B731605FF36B2F199D5493CFF86
Certificate serial:       736DBD5938F0F6B041D1A49E8E881CF540D592CC
Authority key identifier: E1:B0:DB:50:1E:26:1B:73:16:05:FF:36:B2:F1:99:D5:49:3C:FF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/323830333a333235303a656161653a3a2f34382d3438203d3e20323635363838.roa
Signing time:             Mon 15 Jun 2026 00:40:00 +0000
ROA not before:           Mon 15 Jun 2026 00:35:00 +0000
ROA not after:            Mon 14 Jun 2027 00:40:00 +0000
asID:                     265688
IP address blocks:        2803:3250:eaae::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 14:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6d:bd:59:38:f0:f6:b0:41:d1:a4:9e:8e:88:1c:f5:40:d5:92:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B0DB501E261B731605FF36B2F199D5493CFF86
        Validity
            Not Before: Jun 15 00:35:00 2026 GMT
            Not After : Jun 14 00:40:00 2027 GMT
        Subject: CN=C9939BF206227F7AC809D1F363FB3AB1DC1B5D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:7b:68:4a:08:0f:d8:9a:35:d4:51:f4:50:
                    46:a6:c8:34:52:97:42:a9:65:0a:fb:3b:39:72:fb:
                    c7:9e:57:f2:ec:9a:be:16:97:63:ec:13:3d:39:f9:
                    4c:26:6f:70:e7:4f:96:d2:b3:a0:66:50:ef:7a:12:
                    90:0c:bf:a0:23:fb:60:04:db:f3:73:ec:e1:5b:86:
                    c0:22:f7:77:3d:41:e6:2a:ba:ab:1b:23:74:33:47:
                    ff:8b:27:3f:15:17:bf:cf:b8:78:16:65:16:3c:55:
                    f3:60:71:21:0b:71:6a:c7:b9:92:ab:7c:48:ab:59:
                    c1:3d:78:4b:dc:5a:ed:88:2c:18:84:62:5f:39:69:
                    94:59:65:c6:ac:38:1d:47:56:c4:1b:cd:78:9d:ba:
                    77:b9:de:57:d3:0b:df:fb:89:f4:05:0c:88:cc:cb:
                    61:7f:8e:bc:4f:40:83:29:cd:be:de:58:d8:07:59:
                    65:8d:6e:60:74:33:d1:9f:81:ec:11:64:ef:21:1e:
                    19:25:84:a5:f8:e7:3f:f4:fa:d8:74:35:24:81:99:
                    0f:47:54:02:0b:12:11:32:2f:c3:7e:4e:a1:d4:7a:
                    91:6e:93:2d:7d:42:e4:d3:3c:b3:5f:53:e4:43:25:
                    a0:d1:1e:65:82:cf:cc:7e:b1:d5:c7:28:a4:b1:8c:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:93:9B:F2:06:22:7F:7A:C8:09:D1:F3:63:FB:3A:B1:DC:1B:5D:8B
            X509v3 Authority Key Identifier:
                keyid:E1:B0:DB:50:1E:26:1B:73:16:05:FF:36:B2:F1:99:D5:49:3C:FF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1B0DB501E261B731605FF36B2F199D5493CFF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E1752C628BDA40948B158C8F7A19312B1FB50809A6BA0EA1F0CB711D162CCBB/0/323830333a333235303a656161653a3a2f34382d3438203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3250:eaae::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:ff:fe:31:c6:70:cf:8a:39:05:c7:0a:fe:91:94:08:ea:
         34:a9:6a:a7:53:7a:9d:89:da:67:bb:4d:aa:2b:6b:70:fd:e5:
         60:94:b1:d9:f2:34:d4:ea:c5:00:36:60:2e:36:c2:f5:18:fa:
         20:7a:94:2b:98:6b:7a:d7:ca:fb:a7:2c:4a:d4:22:26:4b:b1:
         8d:73:eb:e9:3b:34:29:82:8b:38:b0:d6:36:d4:6c:70:6a:67:
         aa:d0:c9:40:f7:d3:2e:dc:9d:d2:2f:0f:4b:62:d6:54:e0:d7:
         1d:2e:a3:40:0c:ad:5e:58:6c:bd:1d:34:73:b8:ec:3b:38:58:
         c5:9b:5f:af:d1:c7:dc:83:70:dc:31:bd:ea:ea:4a:e4:2d:f6:
         51:22:9d:47:96:53:ca:eb:a3:b3:85:dd:ed:9f:7d:30:7d:c1:
         67:e3:7c:ed:12:72:55:b5:48:40:bf:6a:0c:a3:1c:26:b7:be:
         5f:da:77:7e:c4:d3:5a:5d:f2:e2:e1:c5:a8:a9:ff:5d:d4:c4:
         67:be:27:76:af:4a:34:c4:ac:41:43:34:b3:66:71:53:2c:fa:
         eb:ba:83:ac:7c:01:14:6b:59:11:5d:a9:8b:34:27:e3:8b:6b:
         0f:cb:5d:77:2c:6a:47:86:14:b4:53:e8:f4:1e:8d:ff:6a:50:
         a8:10:11:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:46:58 2026 by rpki-client