Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a353a3a2f34382d3438203d3e20323732393632.roa
File:                     323830333a663939303a353a3a2f34382d3438203d3e20323732393632.roa (raw, json)
Hash identifier:          TlqqCS0Kw83o3KhUCL8LBzuK8xd3wbcwhppqrXsuARo=
Subject key identifier:   BD:D3:0A:77:C4:ED:AB:01:48:EA:85:05:EB:6E:DE:97:F8:4D:A5:90
Certificate issuer:       /CN=83F7E47489A9B33F206BDEF2A5355211978698EE
Certificate serial:       7D1CC042A2FC51FBE187F310B89BFA032CABE480
Authority key identifier: 83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a353a3a2f34382d3438203d3e20323732393632.roa
Signing time:             Wed 30 Sep 2026 00:30:00 +0000
ROA not before:           Wed 30 Sep 2026 00:25:00 +0000
ROA not after:            Wed 29 Sep 2027 00:30:00 +0000
asID:                     272962
IP address blocks:        2803:f990:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1c:c0:42:a2:fc:51:fb:e1:87:f3:10:b8:9b:fa:03:2c:ab:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F7E47489A9B33F206BDEF2A5355211978698EE
        Validity
            Not Before: Sep 30 00:25:00 2026 GMT
            Not After : Sep 29 00:30:00 2027 GMT
        Subject: CN=BDD30A77C4EDAB0148EA8505EB6EDE97F84DA590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:d2:cd:4a:82:9c:2d:cb:ea:57:80:07:f2:
                    3f:eb:5c:e9:f9:2c:89:fd:10:19:bb:3b:32:6f:a3:
                    7e:27:a0:98:a9:94:62:ab:eb:92:2c:eb:40:30:85:
                    46:a2:77:9f:81:26:37:88:54:35:b6:f6:71:8b:6d:
                    a6:ca:9f:15:0c:ee:ea:20:5a:5b:54:19:57:ff:a3:
                    dc:4b:1d:71:9e:ff:5e:80:3d:d1:30:f0:3b:3d:f2:
                    a3:92:a2:6d:31:01:e5:c5:0c:1a:ba:d4:96:c8:72:
                    3a:aa:75:a1:93:d1:cf:51:cc:32:5c:34:48:80:32:
                    52:6b:4b:2e:b1:86:a4:60:4b:5a:63:13:53:89:d8:
                    97:ee:31:2f:29:64:ac:20:31:5b:d0:e6:4b:01:35:
                    fd:4f:77:57:86:b1:2a:9b:02:fa:b0:c3:9e:2b:b5:
                    e3:ce:a6:97:f2:85:c5:9b:16:f0:7d:28:5b:a4:75:
                    88:5e:35:ae:bb:2f:10:ab:28:08:5a:4c:c4:97:8a:
                    d9:62:45:6c:a5:36:7a:b0:11:1f:41:87:82:09:2c:
                    a1:d2:74:b9:d1:6c:25:43:02:96:24:b2:fa:0c:6f:
                    b0:6f:90:7b:a9:e3:c8:05:4c:54:dd:1f:71:b9:9d:
                    45:b4:d1:f9:24:02:1e:a9:6c:3e:3c:58:14:9b:6a:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D3:0A:77:C4:ED:AB:01:48:EA:85:05:EB:6E:DE:97:F8:4D:A5:90
            X509v3 Authority Key Identifier:
                keyid:83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a353a3a2f34382d3438203d3e20323732393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f990:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:1d:e3:12:28:e5:4a:db:c2:de:7a:33:bd:4a:dd:25:ea:
         76:60:87:77:c1:b0:ce:00:b7:f0:93:40:57:97:e5:c0:57:9b:
         f1:64:1f:62:36:06:83:52:c6:23:9b:f6:44:ae:72:83:51:57:
         2b:3a:5b:d1:c2:72:ed:76:39:17:91:9c:e9:23:07:f4:87:64:
         9b:c6:74:15:db:cc:eb:9f:83:ec:c0:5a:e7:1c:83:42:13:f0:
         4f:3a:bd:90:f1:18:a3:ca:75:c7:83:6d:25:f7:6c:2c:0d:eb:
         2f:2e:eb:2e:d8:25:38:c5:72:27:ac:e1:73:75:4a:75:6e:2c:
         79:db:99:86:be:f1:cb:e7:65:08:03:06:b0:e9:d5:4c:b9:5a:
         54:03:95:9d:9e:10:ec:c3:b7:7c:46:7e:5b:f7:6b:6a:05:18:
         45:af:27:51:f6:c6:44:68:3a:35:f2:36:dc:71:0c:a6:f0:51:
         cf:f5:28:4b:39:9f:fa:7d:a8:05:60:26:94:bb:37:53:99:49:
         0b:68:53:bc:cb:d8:8b:f9:5b:2f:47:14:03:2c:f3:08:b0:6b:
         e3:4d:ba:6a:27:d1:c8:8c:7c:71:40:d7:41:a8:0e:11:a6:33:
         e0:6c:d3:80:9e:cf:23:12:f1:32:4e:d4:f6:31:14:c9:bf:cb:
         80:0c:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:59:22 2026 by rpki-client