Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa
File:                     323830333a386536303a3a2f33332d3333203d3e20323637393134.roa (raw, json)
Hash identifier:          Fs/TSk+f7xyZprVPsxPMi8gKe51KvG5ToW4uARSKPoI=
Subject key identifier:   FB:E7:C0:47:4E:08:3D:4C:F0:34:A8:8A:CF:B2:3C:8A:FB:F4:0F:A7
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       7185842BE1B0B49C51CEC9E371CD4D6F9AA3C952
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa
Signing time:             Wed 01 Jul 2026 20:50:28 +0000
ROA not before:           Wed 01 Jul 2026 20:45:28 +0000
ROA not after:            Wed 30 Jun 2027 20:50:28 +0000
asID:                     267914
IP address blocks:        2803:8e60::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:85:84:2b:e1:b0:b4:9c:51:ce:c9:e3:71:cd:4d:6f:9a:a3:c9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul  1 20:45:28 2026 GMT
            Not After : Jun 30 20:50:28 2027 GMT
        Subject: CN=FBE7C0474E083D4CF034A88ACFB23C8AFBF40FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:84:31:43:bc:6f:6f:9a:e7:4e:9e:56:a2:
                    e0:14:5c:02:da:4f:5f:36:f8:c2:c9:2f:f8:c8:8a:
                    da:28:d5:02:7d:26:1c:24:8c:9e:7b:7d:26:75:54:
                    f9:49:93:b4:cc:6a:bc:cf:58:02:17:50:43:68:a8:
                    44:dc:fb:84:7d:3c:91:69:1e:fd:45:10:5a:8f:96:
                    25:d4:e8:87:f2:49:ff:f9:c6:d1:12:c2:ac:d1:b3:
                    31:1f:30:71:73:75:c6:4c:21:74:f6:a4:a6:b1:06:
                    a1:bf:0a:a4:6c:8f:dd:b2:0a:26:18:aa:6d:75:2a:
                    d7:4b:58:20:ff:a8:07:3a:06:1f:8c:74:81:8e:dc:
                    1b:b8:f4:a7:13:3e:0a:51:09:28:ea:cf:26:a6:0b:
                    f4:22:76:5e:c6:a7:0d:9f:f9:52:a5:e3:ae:86:84:
                    a2:ac:57:7e:f7:23:46:1c:1d:ef:f1:72:e9:d0:61:
                    7f:85:c1:92:c6:0c:6c:54:05:3a:cf:d3:22:1d:18:
                    fa:45:71:2b:7b:94:a9:d5:8a:0e:fb:c5:45:65:9c:
                    f6:68:35:5f:35:c9:81:c8:02:c8:ef:eb:18:b2:93:
                    05:f8:02:5b:d2:0e:6b:1f:fe:d6:04:17:9e:1b:32:
                    54:e4:93:7b:cf:4e:55:6c:20:26:1c:86:b2:14:73:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E7:C0:47:4E:08:3D:4C:F0:34:A8:8A:CF:B2:3C:8A:FB:F4:0F:A7
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:c6:ab:99:33:32:f1:2b:b0:40:c5:6b:6c:56:bb:94:5a:ad:
         39:11:04:05:5f:a9:26:5e:79:1c:00:eb:77:9d:5b:95:f6:8f:
         a4:9f:aa:f2:21:42:86:b0:71:76:d2:7d:4f:84:b1:31:05:b3:
         e3:74:1c:fa:17:33:4c:ba:b1:ac:1f:3d:a2:0a:3f:0a:96:32:
         a8:de:49:2e:e9:fc:e7:0f:2b:1c:e3:13:d8:44:88:66:3f:9b:
         77:78:fd:13:3e:2e:24:20:6d:23:07:51:f0:fc:d2:cf:70:d4:
         71:f3:c8:67:f5:41:83:34:78:74:ed:a1:09:52:00:e3:2b:f0:
         f8:17:b7:5c:6d:4c:76:17:1d:3a:5a:0d:69:c8:04:48:54:f3:
         b8:d2:28:84:8f:df:92:81:80:9a:91:c6:38:8e:a0:c7:4a:b1:
         ae:15:24:7b:fe:34:d7:3c:5e:89:25:c7:c1:16:d0:d3:b6:26:
         74:ff:06:38:b6:8c:9b:08:31:17:a9:a7:38:d8:c2:a8:39:3e:
         95:d9:29:14:8a:e3:ae:9a:2d:74:ca:06:81:a4:9c:cf:e7:df:
         fe:79:79:4c:4c:9c:c9:26:c3:52:19:ca:d3:3e:25:d0:6c:2f:
         8c:ef:bf:4a:9d:52:57:8c:93:ed:3d:d2:77:6b:2e:4c:f0:3d:
         b2:b4:36:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:17:13 2026 by rpki-client