Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/323830333a633833303a3a2f33322d3332203d3e20323734323836.roa
File:                     323830333a633833303a3a2f33322d3332203d3e20323734323836.roa (raw, json)
Hash identifier:          KJQ056GPwxGmmDKBrhKj472infbtEoqG9WwwJNAS4YI=
Subject key identifier:   13:07:9E:4F:2A:F2:00:CC:22:E0:75:6C:BB:8B:69:D3:68:C9:50:3A
Certificate issuer:       /CN=1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2
Certificate serial:       4C3707C5740461C3057D05D79EDCC83D3A86416A
Authority key identifier: 1B:D5:27:E3:FA:48:31:91:A7:B6:AD:9B:3B:FA:57:E0:23:A2:1D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/323830333a633833303a3a2f33322d3332203d3e20323734323836.roa
Signing time:             Thu 20 Aug 2026 21:10:00 +0000
ROA not before:           Thu 20 Aug 2026 21:05:00 +0000
ROA not after:            Thu 19 Aug 2027 21:10:00 +0000
asID:                     274286
IP address blocks:        2803:c830::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 00:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:37:07:c5:74:04:61:c3:05:7d:05:d7:9e:dc:c8:3d:3a:86:41:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2
        Validity
            Not Before: Aug 20 21:05:00 2026 GMT
            Not After : Aug 19 21:10:00 2027 GMT
        Subject: CN=13079E4F2AF200CC22E0756CBB8B69D368C9503A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:fa:5a:7c:32:e2:2c:d2:be:4e:a4:80:db:
                    ca:78:48:58:c5:d5:f8:ba:1b:c2:e2:ee:a5:20:d5:
                    6e:b3:7d:45:92:20:d8:8b:0a:c8:90:b2:01:39:d2:
                    e8:5c:c5:16:a9:0d:cf:62:31:27:9c:05:b7:a8:b0:
                    1d:3f:04:02:e0:88:02:e4:97:a5:55:6a:bb:6f:67:
                    75:a1:9e:7c:b4:93:0b:5c:d6:a5:b4:d1:2f:d4:7a:
                    f9:64:84:ce:4c:70:f8:8b:a3:cf:c7:f6:99:8a:c9:
                    ca:6a:5e:e1:ef:cd:1a:75:54:23:44:d8:c0:1a:db:
                    25:9b:ec:7c:a2:a7:fe:ca:ed:ee:cf:72:20:4c:2c:
                    e9:54:b3:f4:59:ca:5c:0e:8f:a6:b4:3c:3a:09:2b:
                    36:30:eb:f4:99:62:35:0a:c8:6a:90:5b:3a:3a:c2:
                    21:64:72:22:bc:a5:55:c3:5a:1b:7d:e2:33:0e:d8:
                    f9:58:a7:4f:28:5a:84:f9:e9:46:aa:0a:52:12:7d:
                    aa:70:0a:50:62:ef:6d:84:f1:27:d8:99:e3:e9:5e:
                    c9:95:e1:c2:5b:69:c7:27:1e:10:7e:ee:40:4e:b3:
                    3b:50:73:cb:f3:49:57:36:fa:92:7c:92:80:1b:29:
                    05:bf:24:b1:87:ab:5f:7d:bf:04:2b:56:d2:33:da:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:07:9E:4F:2A:F2:00:CC:22:E0:75:6C:BB:8B:69:D3:68:C9:50:3A
            X509v3 Authority Key Identifier:
                keyid:1B:D5:27:E3:FA:48:31:91:A7:B6:AD:9B:3B:FA:57:E0:23:A2:1D:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/323830333a633833303a3a2f33322d3332203d3e20323734323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c830::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:63:7c:0c:d7:7e:60:a6:70:6f:db:a5:81:57:ba:0f:d4:7d:
         6d:ce:63:63:35:0b:3a:e1:22:c9:aa:54:3d:4f:4a:88:ea:d0:
         53:76:23:f1:02:f8:d2:4d:3d:16:af:61:02:fa:2b:6c:97:8c:
         17:61:14:f4:a3:03:40:68:c6:88:9a:3a:ca:f2:0d:3d:a4:37:
         04:f8:b8:e5:2b:df:f2:10:5e:51:29:87:fe:54:ac:ec:d9:c2:
         31:e3:42:37:61:7d:c2:0c:5b:a4:c2:09:e1:57:0c:d0:23:2b:
         20:2c:c0:3c:96:bc:27:54:cd:79:3a:06:69:31:7c:b3:fe:16:
         a5:3a:36:e7:d4:b2:0c:5a:bb:88:d8:65:76:85:56:a0:c8:3e:
         94:ef:67:2e:b6:93:91:18:31:de:0e:1c:31:15:a1:b9:6e:19:
         64:1a:7c:8a:eb:80:df:68:bf:59:57:51:b2:c6:36:79:bc:45:
         3b:c6:a9:6f:27:eb:2d:08:b8:a2:b5:d9:a8:e1:23:68:fe:db:
         13:f6:95:32:30:4f:9e:e5:8f:ce:e5:9f:ee:aa:67:7a:48:88:
         e8:bf:b5:be:d9:b7:0f:2c:d4:de:6b:29:98:3d:80:1a:3f:4d:
         82:42:54:8d:a3:aa:a6:c5:5b:44:5d:cf:96:75:ac:43:c9:19:
         f1:e2:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:03:42 2026 by rpki-client