Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a626163313a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a626163313a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          CibQRV0IBOG4M9Gs3lJdw/8yV2LVhOVm63mGUodp5gY=
Subject key identifier:   34:64:B0:FA:96:42:05:83:13:6C:A2:54:40:29:A9:9A:70:0E:FA:E5
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       3082C254D87D79ADDCB210D4F5BDF9D088E59EFE
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a626163313a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Thu 20 Aug 2026 16:26:15 +0000
ROA not before:           Thu 20 Aug 2026 16:21:15 +0000
ROA not after:            Thu 19 Aug 2027 16:26:15 +0000
asID:                     273177
IP address blocks:        2803:ca50:bac1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:82:c2:54:d8:7d:79:ad:dc:b2:10:d4:f5:bd:f9:d0:88:e5:9e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Aug 20 16:21:15 2026 GMT
            Not After : Aug 19 16:26:15 2027 GMT
        Subject: CN=3464B0FA96420583136CA2544029A99A700EFAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:57:d7:6e:26:7f:da:eb:f3:6a:f5:7f:0b:
                    bf:4d:a6:ff:20:4e:34:27:56:77:4a:39:ab:b1:39:
                    72:e9:6c:0f:1e:9c:23:75:b4:da:24:0d:41:64:99:
                    d8:7e:db:b8:29:70:11:36:e2:ab:03:c8:08:35:08:
                    75:79:fc:b3:c1:c6:f2:2c:8e:d5:6f:1b:2a:28:c2:
                    aa:0c:51:dd:67:e8:92:00:b1:4a:b7:38:ae:90:b5:
                    45:df:28:45:49:f3:9f:76:c2:9a:3d:de:8e:ae:83:
                    70:bc:6e:6a:73:f8:5e:d4:71:5a:ac:91:8e:cc:00:
                    af:c5:af:35:71:e0:26:10:3c:41:56:2b:e3:40:cb:
                    37:b0:d4:0c:7a:18:41:84:55:a0:bf:33:1a:52:2f:
                    ce:3b:1a:1b:2a:a8:59:3a:f8:16:01:48:d7:29:b7:
                    bb:a8:99:43:f4:be:22:1f:53:76:86:e1:56:32:ec:
                    8e:10:aa:9b:e9:a8:bb:97:9d:5d:74:15:07:49:05:
                    54:a7:bf:ac:4a:3a:ba:be:fb:2a:68:39:34:24:a5:
                    5e:b4:21:fc:d2:22:c4:a9:0f:76:3f:ba:40:19:de:
                    d6:62:70:68:c4:9c:f6:dc:64:56:00:f1:4c:a2:d4:
                    d7:6c:ba:97:8d:83:f4:33:90:2a:a1:db:6e:db:2c:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:64:B0:FA:96:42:05:83:13:6C:A2:54:40:29:A9:9A:70:0E:FA:E5
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a626163313a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:bac1::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:3c:ad:93:62:15:ad:00:a8:cf:8a:85:49:ee:a7:af:2f:91:
         01:64:b1:84:ed:9d:ca:83:ea:d2:65:f6:06:e3:cd:67:46:96:
         9b:6c:f5:82:67:2b:ed:d1:ec:97:8d:9a:a4:3e:c1:9a:c6:b3:
         55:54:fa:4a:ab:ec:7e:9b:94:08:76:21:69:b8:03:bd:43:17:
         95:a5:eb:e1:95:40:e5:6e:30:6c:00:ed:c9:64:ca:1c:a2:db:
         35:1e:48:2a:9c:05:a0:f9:00:6b:e6:ae:38:1f:ae:b7:e9:f1:
         16:48:2a:a1:bf:a7:53:eb:dc:c3:38:de:06:b3:85:e8:01:34:
         fd:81:09:e8:e6:3b:de:53:5d:62:d6:32:3f:37:53:8b:44:97:
         55:ef:af:cb:33:d1:dc:9a:fa:ff:8c:92:b5:ab:67:97:ee:6c:
         88:98:39:1c:81:21:d6:96:23:dd:22:36:e8:3a:c5:e6:12:c7:
         7b:d2:22:dc:31:01:c7:d8:b8:ae:df:60:33:92:7f:7b:0f:87:
         68:e9:a3:bb:77:fa:a2:d7:e3:0d:0b:0b:f9:e4:07:65:7f:3a:
         8d:09:55:29:d2:34:30:52:1e:9b:7c:f0:cc:de:b6:28:a7:ef:
         b4:a6:e2:a2:33:09:2d:c0:ee:6f:e0:95:3f:fb:5a:93:4d:8e:
         44:e2:83:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:35:54 2026 by rpki-client