Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1F28A682418D658341C030B6DC980E2A8245958D65A84FCADF53274636CB3CE5/0/323830333a393264303a3a2f33322d3438203d3e20323734303535.roa
File:                     323830333a393264303a3a2f33322d3438203d3e20323734303535.roa (raw, json)
Hash identifier:          jQ4OkLMgLYRlOA8QFD4lJ40FJ4njx64c+ifh/oKrai0=
Subject key identifier:   F6:18:80:7B:20:4D:3A:F4:AD:39:31:C9:DE:93:4E:FA:F6:C6:33:A6
Certificate issuer:       /CN=2BC631DF585FB06554E51C1071320A8EBACBB9E7
Certificate serial:       4783BDA90282A7A677F3AC61FCB2A0140D5CC499
Authority key identifier: 2B:C6:31:DF:58:5F:B0:65:54:E5:1C:10:71:32:0A:8E:BA:CB:B9:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BC631DF585FB06554E51C1071320A8EBACBB9E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F28A682418D658341C030B6DC980E2A8245958D65A84FCADF53274636CB3CE5/0/323830333a393264303a3a2f33322d3438203d3e20323734303535.roa
Signing time:             Wed 09 Sep 2026 16:34:47 +0000
ROA not before:           Wed 09 Sep 2026 16:29:47 +0000
ROA not after:            Wed 08 Sep 2027 16:34:47 +0000
asID:                     274055
IP address blocks:        2803:92d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F28A682418D658341C030B6DC980E2A8245958D65A84FCADF53274636CB3CE5/0/2BC631DF585FB06554E51C1071320A8EBACBB9E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F28A682418D658341C030B6DC980E2A8245958D65A84FCADF53274636CB3CE5/0/2BC631DF585FB06554E51C1071320A8EBACBB9E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BC631DF585FB06554E51C1071320A8EBACBB9E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 03:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:83:bd:a9:02:82:a7:a6:77:f3:ac:61:fc:b2:a0:14:0d:5c:c4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC631DF585FB06554E51C1071320A8EBACBB9E7
        Validity
            Not Before: Sep  9 16:29:47 2026 GMT
            Not After : Sep  8 16:34:47 2027 GMT
        Subject: CN=F618807B204D3AF4AD3931C9DE934EFAF6C633A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:64:25:5d:6e:7e:b6:e9:0e:02:f4:9e:7c:
                    0a:27:7c:0a:8f:f6:4a:60:e2:e8:84:9b:c6:ef:3f:
                    7b:23:46:7d:2a:62:73:15:3b:f4:eb:0d:a2:2b:db:
                    af:db:64:8d:5e:5b:21:62:36:7e:ae:c4:87:f2:c7:
                    ad:1d:b9:48:ec:1a:3e:57:0a:5e:cd:91:31:60:d5:
                    2b:ce:59:cb:86:e5:2d:0d:0d:dc:60:78:71:a1:1a:
                    5a:c4:c9:2f:0c:72:df:9d:a1:9a:a6:2a:c6:3f:4c:
                    a7:11:39:00:e5:30:13:a3:26:7c:0b:6c:9e:91:fc:
                    dd:e5:23:9f:7b:c2:3a:76:21:5a:9e:64:23:6d:7a:
                    fd:e9:94:17:86:34:77:a7:9c:6e:bd:e7:a6:ff:21:
                    d2:06:a7:c3:29:33:5d:88:54:01:a2:ea:b6:52:dc:
                    bd:3f:c9:44:0e:ae:d7:70:80:19:8e:fe:bf:54:b1:
                    20:40:75:5c:5d:9e:6a:39:92:a7:e1:0e:0d:eb:4e:
                    1f:34:08:90:d8:39:19:2e:3f:49:d7:d2:e9:85:ad:
                    88:d1:42:c5:db:2c:e7:ba:41:6e:19:dc:90:c8:bb:
                    25:1d:45:8e:d3:ce:41:88:8e:0f:11:b7:12:99:41:
                    c7:be:ac:a7:b4:3e:64:a1:8f:91:98:98:14:43:e4:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:80:7B:20:4D:3A:F4:AD:39:31:C9:DE:93:4E:FA:F6:C6:33:A6
            X509v3 Authority Key Identifier:
                keyid:2B:C6:31:DF:58:5F:B0:65:54:E5:1C:10:71:32:0A:8E:BA:CB:B9:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F28A682418D658341C030B6DC980E2A8245958D65A84FCADF53274636CB3CE5/0/2BC631DF585FB06554E51C1071320A8EBACBB9E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BC631DF585FB06554E51C1071320A8EBACBB9E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F28A682418D658341C030B6DC980E2A8245958D65A84FCADF53274636CB3CE5/0/323830333a393264303a3a2f33322d3438203d3e20323734303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:92d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:17:e4:1a:0f:20:8c:6d:d2:dd:c7:ec:d2:fd:e2:42:50:ef:
         5e:07:39:1d:df:1c:01:b4:3e:5e:f7:a6:7a:61:43:48:9b:fe:
         d7:09:77:b0:44:90:b2:4f:16:c7:82:6a:a7:ee:65:df:ff:51:
         2e:bd:bf:56:4b:a7:52:84:ca:c8:f8:32:cc:2e:a9:dd:50:49:
         41:5e:d8:7a:1a:12:49:57:be:a1:ce:27:9f:ea:e2:dc:78:6f:
         86:91:e1:5b:82:1f:a9:f4:3a:53:60:a5:81:7e:ff:6f:9e:d0:
         06:6e:e1:84:47:e2:00:86:ac:68:bc:69:0b:b0:98:a7:f1:f8:
         73:3b:c9:3f:fc:e8:6d:ed:38:28:f6:9d:02:26:56:25:f2:ba:
         13:69:c0:f1:5a:ef:f5:b6:d8:c4:0b:b9:b2:2f:a8:15:4d:e0:
         48:d2:b8:1c:c1:c8:8a:44:e0:f9:1f:bb:2e:1c:03:50:8d:da:
         d1:08:7e:cb:c4:6c:3a:2b:1c:dd:57:ac:c6:4f:be:62:79:79:
         5d:43:64:2d:dd:4a:57:25:dc:1a:78:66:68:2b:f7:39:55:87:
         36:bc:89:fe:46:a4:08:68:a0:36:eb:ae:93:38:d8:c2:0b:2b:
         a1:3f:e0:fc:b8:67:63:6c:1d:e5:51:05:4d:1f:64:12:f7:2a:
         12:ae:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:42:42 2026 by rpki-client