Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/323830333a643465303a3a2f33322d3532203d3e20323639383935.roa
File:                     323830333a643465303a3a2f33322d3532203d3e20323639383935.roa (raw, json)
Hash identifier:          l9TGtll2FsZgiAS+oJS2PCdVljYxtiHRpIf1N81T3gY=
Subject key identifier:   CC:C8:02:B3:27:40:BC:47:15:B4:63:6F:93:52:8C:1C:AC:05:13:78
Certificate issuer:       /CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
Certificate serial:       3F22AA53D25C03C3C9E4C02A498729D57593F27D
Authority key identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/323830333a643465303a3a2f33322d3532203d3e20323639383935.roa
Signing time:             Thu 30 Jul 2026 21:50:00 +0000
ROA not before:           Thu 30 Jul 2026 21:45:00 +0000
ROA not after:            Thu 29 Jul 2027 21:50:00 +0000
asID:                     269895
IP address blocks:        2803:d4e0::/32 maxlen: 52
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 13:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:aa:53:d2:5c:03:c3:c9:e4:c0:2a:49:87:29:d5:75:93:f2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
        Validity
            Not Before: Jul 30 21:45:00 2026 GMT
            Not After : Jul 29 21:50:00 2027 GMT
        Subject: CN=CCC802B32740BC4715B4636F93528C1CAC051378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:5d:74:93:33:69:95:ad:12:00:52:d1:e8:
                    46:29:0a:49:00:ee:3f:aa:af:0b:1b:90:e6:c6:9e:
                    17:81:62:04:ed:5f:9a:da:d4:ac:f9:be:ab:0e:cc:
                    f2:f1:99:1e:fb:d3:66:3b:2e:72:1e:4d:2d:91:01:
                    25:b4:93:31:4b:3e:09:bf:70:65:eb:9f:a2:70:f3:
                    a4:8b:64:2a:52:32:e2:fa:85:95:1f:2e:83:27:8c:
                    1b:13:96:be:ed:91:b1:e2:48:aa:b1:77:88:ba:1d:
                    e4:63:34:d0:aa:f6:93:51:88:b6:c2:78:42:df:c0:
                    c9:e2:21:f6:5b:2b:b2:d9:29:1e:ca:ae:0f:ec:1d:
                    0d:c7:f3:f4:6b:90:2f:b8:36:24:5c:f8:8e:3e:28:
                    75:3b:79:b5:fc:ac:71:bb:62:0c:51:d4:1b:30:24:
                    9d:be:bb:4f:4a:bb:49:bf:10:6d:4a:56:00:52:b9:
                    48:17:82:56:7e:31:b6:22:4e:d5:fd:5f:50:52:f0:
                    5d:c7:12:24:98:7c:03:47:4a:ed:25:c8:f0:49:d7:
                    26:08:7b:ec:9b:d9:be:4d:5c:aa:d5:91:03:ed:76:
                    be:b8:92:0c:f3:c0:eb:19:a7:ba:87:05:23:64:e2:
                    31:f6:8e:de:fd:a7:68:6f:e3:5b:7a:12:f1:a7:94:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C8:02:B3:27:40:BC:47:15:B4:63:6F:93:52:8C:1C:AC:05:13:78
            X509v3 Authority Key Identifier:
                keyid:68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/323830333a643465303a3a2f33322d3532203d3e20323639383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:47:6b:21:60:20:7b:3c:89:69:8b:da:13:9a:6a:04:90:0c:
         28:65:38:71:a8:39:d9:cd:d3:7f:6c:cc:4d:14:a9:b7:3a:93:
         64:f6:5e:65:61:bc:4d:7c:8e:2a:6f:85:6b:47:71:c1:6d:96:
         58:6f:3f:ba:b3:5a:2d:c3:cb:48:aa:b8:c0:f5:99:1b:d2:34:
         c0:0c:43:57:4f:6d:d7:f7:76:85:73:18:c0:cd:33:4f:d3:4a:
         4b:da:f0:21:2c:a6:6b:ea:56:1d:f5:b3:00:75:45:d5:98:0d:
         5e:89:0b:3f:c8:04:26:58:ff:e3:ad:e1:36:48:cc:98:4a:5a:
         61:81:08:33:2b:50:10:cd:d4:9e:c1:84:02:20:69:c5:7d:f4:
         b6:7b:c6:56:d4:ad:e4:c0:54:f0:12:8f:d8:79:19:25:24:fc:
         81:ab:ec:4b:ef:8f:f0:c2:f8:47:2f:2d:a0:a2:54:96:71:1c:
         59:e2:d7:c4:a8:15:ec:e9:b9:a2:22:33:9c:b7:61:d9:15:5b:
         92:60:73:9c:73:f7:79:23:42:b3:25:fd:ba:64:32:7b:67:6c:
         c7:5b:89:28:70:e3:02:09:c3:b9:70:1e:5d:80:59:60:8f:4c:
         f6:04:0c:a0:80:14:ea:d1:1c:b9:81:7d:9a:52:42:bc:00:ae:
         05:be:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:10:57 2026 by rpki-client