Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a313a3a2f34382d3438203d3e20323734393638.roa
File:                     323830333a313533303a313a3a2f34382d3438203d3e20323734393638.roa (raw, json)
Hash identifier:          IknLMQf5t64LR5b/4F6dJeDnniRivDwcu5kkhRammlk=
Subject key identifier:   E9:31:A6:47:6B:10:C8:EC:15:A7:50:A6:81:6C:10:16:88:52:CB:CF
Certificate issuer:       /CN=1E52B71FA71D263426D74ABA45BDB0F8FD370581
Certificate serial:       165A394133B42CC913C3F5A2422B7558C5A670C2
Authority key identifier: 1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a313a3a2f34382d3438203d3e20323734393638.roa
Signing time:             Tue 11 Aug 2026 19:45:00 +0000
ROA not before:           Tue 11 Aug 2026 19:40:00 +0000
ROA not after:            Tue 10 Aug 2027 19:45:00 +0000
asID:                     274968
IP address blocks:        2803:1530:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5a:39:41:33:b4:2c:c9:13:c3:f5:a2:42:2b:75:58:c5:a6:70:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E52B71FA71D263426D74ABA45BDB0F8FD370581
        Validity
            Not Before: Aug 11 19:40:00 2026 GMT
            Not After : Aug 10 19:45:00 2027 GMT
        Subject: CN=E931A6476B10C8EC15A750A6816C10168852CBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:b6:6d:44:41:61:e4:06:02:1b:03:46:77:
                    f5:c9:40:32:a2:2e:2e:96:57:dd:ae:23:3b:2d:e6:
                    5b:8d:44:52:93:d8:5a:7d:3d:38:e2:39:05:ef:89:
                    0d:8c:5a:6a:b0:ed:2b:73:60:97:f3:77:3a:47:25:
                    b0:89:ad:06:a9:69:1f:2d:41:04:b5:73:44:8b:2c:
                    21:92:17:d9:08:4a:87:d4:4b:56:68:3a:7f:8a:39:
                    be:36:98:39:89:19:b9:95:99:ee:93:ed:2c:1c:00:
                    7b:51:c7:8f:f2:bb:2e:6f:8a:ce:78:cb:18:5e:d0:
                    20:d1:1d:ee:78:8c:4d:09:2d:66:94:3f:55:d4:ca:
                    37:3b:3e:b2:ff:76:a0:0f:3c:1c:ed:b3:fe:0b:66:
                    1b:c6:87:91:48:61:bb:e3:d4:ee:01:85:6d:d8:a3:
                    56:0c:e1:8f:fc:0a:5d:17:8c:c9:54:17:05:d4:c3:
                    ea:d3:a1:46:3c:91:d5:c3:ce:95:a9:b8:8e:64:17:
                    95:84:86:79:69:50:68:b7:d2:35:98:c7:32:71:3d:
                    c3:c8:ab:1d:21:82:98:8a:ce:30:71:b3:d3:01:9a:
                    54:08:0c:cf:69:c5:ba:43:8e:38:6c:55:82:2e:d7:
                    19:d6:e2:56:63:f3:8e:51:d1:19:3a:e4:6c:ee:c1:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:31:A6:47:6B:10:C8:EC:15:A7:50:A6:81:6C:10:16:88:52:CB:CF
            X509v3 Authority Key Identifier:
                keyid:1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/323830333a313533303a313a3a2f34382d3438203d3e20323734393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1530:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:d6:7e:a6:ea:c7:73:03:02:7b:10:1d:73:d3:0a:fd:b4:
         e6:d0:b4:ed:6f:b2:37:04:8c:9e:4e:b4:1e:06:4b:bb:ea:6b:
         e0:bd:34:ae:8e:e0:1f:47:5b:e0:2f:81:21:6f:55:c6:dc:73:
         f1:be:67:4b:65:d6:bf:bf:6e:ce:1f:62:69:9e:18:60:cd:de:
         56:f1:3e:20:c4:b2:5b:a3:32:86:b0:cf:0e:cf:85:2f:53:fd:
         0b:57:57:db:82:05:7d:a5:2a:75:10:84:b8:87:11:15:3a:2f:
         10:47:d4:ca:49:d0:64:44:70:5d:b5:e0:17:ce:3a:89:bb:12:
         cc:9b:8a:2b:42:e9:3e:99:eb:da:ec:10:3a:32:38:81:a7:bb:
         53:58:c0:19:17:92:ce:a8:c9:33:6d:e7:c9:b1:ee:82:23:1c:
         e4:36:a2:55:4e:51:8b:40:b0:35:68:80:81:e1:62:fb:b7:22:
         70:af:98:4a:c1:0e:ee:87:05:08:ad:f6:b7:ce:5a:cb:1e:a4:
         9c:9d:a4:e3:e9:9e:25:60:7d:0e:bc:be:41:de:6f:10:cb:40:
         d8:36:16:6f:53:f1:90:d2:04:d8:07:13:f5:f7:1a:3e:5d:28:
         1d:ac:fd:7d:3e:43:d2:3e:fa:45:21:5f:51:7f:a4:c6:32:81:
         91:ea:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:28 2026 by rpki-client