Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/323830333a363438303a3a2f33322d3438203d3e20323633313837.roa
File:                     323830333a363438303a3a2f33322d3438203d3e20323633313837.roa (raw, json)
Hash identifier:          LzeocIbNDvUPFcAhGRI4+x9hQt3EMLgoCLGdW/3hnZ4=
Subject key identifier:   20:79:1C:F1:BA:67:8A:91:72:74:A7:24:1D:65:EE:47:75:1C:49:31
Certificate issuer:       /CN=C04EFD48DA63435D08F4B7AF822A64775EF20818
Certificate serial:       1399781B7CFD845A988353EE06CAD3451E7E662F
Authority key identifier: C0:4E:FD:48:DA:63:43:5D:08:F4:B7:AF:82:2A:64:77:5E:F2:08:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/323830333a363438303a3a2f33322d3438203d3e20323633313837.roa
Signing time:             Wed 05 Aug 2026 16:19:57 +0000
ROA not before:           Wed 05 Aug 2026 16:14:57 +0000
ROA not after:            Wed 04 Aug 2027 16:19:57 +0000
asID:                     263187
IP address blocks:        2803:6480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:99:78:1b:7c:fd:84:5a:98:83:53:ee:06:ca:d3:45:1e:7e:66:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C04EFD48DA63435D08F4B7AF822A64775EF20818
        Validity
            Not Before: Aug  5 16:14:57 2026 GMT
            Not After : Aug  4 16:19:57 2027 GMT
        Subject: CN=20791CF1BA678A917274A7241D65EE47751C4931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:f5:58:68:3e:6f:c4:d2:66:be:46:ff:68:
                    97:2b:89:e6:eb:65:7c:61:a6:48:01:fe:0a:94:a9:
                    6a:e6:2d:d9:b7:ef:ce:f5:0f:bb:d0:80:5b:f9:81:
                    2c:1c:bb:ae:a7:7f:42:e4:65:0a:d7:b4:62:d0:62:
                    c1:e4:2d:62:41:77:e5:f2:b7:1f:5a:87:8e:1f:9c:
                    79:91:c8:5a:f6:0c:31:d4:25:6f:1d:3b:11:0d:db:
                    95:9b:67:9a:99:6d:2a:aa:97:5e:29:82:f0:48:0d:
                    bb:de:6b:fd:f4:c1:d5:79:34:64:16:de:3e:75:d2:
                    15:3e:c3:4e:45:0b:89:b8:7b:6e:4e:16:90:fb:d4:
                    62:50:02:2f:55:bb:26:fb:b5:53:12:76:15:b3:65:
                    44:5f:a1:a9:39:e8:7b:97:0d:cb:95:f6:4c:ef:2e:
                    ef:9d:99:34:55:03:ec:4d:62:2b:46:a6:9e:fd:ae:
                    7c:5b:21:fb:8d:95:76:ea:69:de:a9:f1:a8:64:a7:
                    ec:de:2d:64:22:48:dd:b1:43:73:f4:64:f3:78:bf:
                    f9:5f:b2:fc:36:02:9e:42:6c:3f:5f:a0:e6:49:31:
                    26:11:0c:f6:0e:9f:e7:46:34:d0:76:c4:bb:e0:d4:
                    ba:57:4e:cd:54:4e:f6:c7:fa:80:3a:12:dd:df:55:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:79:1C:F1:BA:67:8A:91:72:74:A7:24:1D:65:EE:47:75:1C:49:31
            X509v3 Authority Key Identifier:
                keyid:C0:4E:FD:48:DA:63:43:5D:08:F4:B7:AF:82:2A:64:77:5E:F2:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C04EFD48DA63435D08F4B7AF822A64775EF20818.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA069C5257D3204276AAC898278D3019149BBE086959A096AFB81C8FB98E0F2/0/323830333a363438303a3a2f33322d3438203d3e20323633313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6480::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:40:28:da:03:81:e8:95:e9:04:97:59:3d:da:d3:00:b8:41:
         b8:f8:60:fa:51:a7:52:0f:b4:e6:0a:70:19:d7:43:c9:13:23:
         09:42:e0:d2:90:84:96:42:b2:fe:f7:05:fe:fb:19:9f:93:0d:
         af:29:6b:ed:fa:50:15:34:1c:8c:37:06:8e:fc:5e:0c:8c:15:
         f9:11:72:09:b7:75:14:95:91:86:ad:5b:ea:0a:31:3e:7d:53:
         b8:52:37:14:6c:f6:33:ae:1d:93:07:ef:4a:4e:dc:e0:11:2c:
         ce:c7:f9:8b:81:7c:59:41:d5:de:a9:06:3c:a0:a7:86:88:63:
         35:c8:14:ec:c2:be:f3:06:af:a4:14:c3:45:3e:6d:88:f7:1e:
         a3:2e:da:04:0e:ed:32:65:1c:a3:24:d9:43:fa:df:0c:0d:07:
         98:fe:b4:c0:24:fa:85:89:5d:a9:46:86:2e:32:30:00:fb:d9:
         3c:4e:87:45:b3:6e:1a:ab:b9:8e:b7:25:77:3c:fc:3d:b0:6e:
         ce:97:e8:27:5e:b2:57:2a:8d:c9:fa:8f:ff:54:cf:02:83:19:
         9b:58:20:c3:8b:a4:b4:67:45:dd:fe:1c:73:48:3d:4e:50:05:
         64:e4:20:cc:52:44:c2:06:96:2a:ea:f9:e7:11:20:64:51:68:
         8e:f8:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:36:25 2026 by rpki-client