Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2036353137.roa
File:                     323830333a343836303a3a2f33322d3332203d3e2036353137.roa (raw, json)
Hash identifier:          zi6Ceoa42IWtqjUEzVG3/iSqk6Hz3W5HpbEL1xTr7gk=
Subject key identifier:   8A:9F:3B:70:F3:5E:8D:D6:14:1C:16:63:D3:FE:A9:AE:B6:33:EA:A3
Certificate issuer:       /CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Certificate serial:       012CCC622A2C9584BDA0BEB51B6EAD2FFDC9CC2B
Authority key identifier: 29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2036353137.roa
Signing time:             Wed 30 Sep 2026 14:37:28 +0000
ROA not before:           Wed 30 Sep 2026 14:32:28 +0000
ROA not after:            Wed 29 Sep 2027 14:37:28 +0000
asID:                     6517
IP address blocks:        2803:4860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 02:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2c:cc:62:2a:2c:95:84:bd:a0:be:b5:1b:6e:ad:2f:fd:c9:cc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
        Validity
            Not Before: Sep 30 14:32:28 2026 GMT
            Not After : Sep 29 14:37:28 2027 GMT
        Subject: CN=8A9F3B70F35E8DD6141C1663D3FEA9AEB633EAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:ea:0c:67:05:fd:14:ef:dc:56:d4:95:54:
                    fc:d0:f0:8e:d5:a9:3e:2d:59:a3:41:a1:be:7c:06:
                    15:0b:0d:90:9f:46:23:fc:50:ca:0e:1f:4b:91:c0:
                    0c:e6:c9:53:55:35:7e:14:3b:ce:36:e5:08:d3:59:
                    12:91:aa:42:42:c0:9b:60:e9:fb:27:af:4e:32:52:
                    5f:ec:b5:7c:d0:2b:c6:bc:8e:4f:7d:34:d4:ff:89:
                    78:74:13:a8:ea:f2:34:d5:f3:9b:05:bc:69:d5:9f:
                    19:29:49:a7:db:60:d9:98:3c:b4:ad:dd:e2:24:2d:
                    ff:01:10:9f:de:77:2f:02:4a:00:27:b6:c7:99:7b:
                    f0:a3:6c:c3:b1:8e:a3:ae:f2:8e:c1:ad:ad:89:f4:
                    e6:a7:c9:7a:da:15:4e:31:5f:1d:89:58:c5:1b:b8:
                    70:74:c1:6a:b6:00:1a:65:91:27:25:31:9c:12:05:
                    6c:25:a1:73:66:b1:9b:a3:c4:99:eb:aa:ec:8b:77:
                    76:cd:43:fb:66:78:2a:ba:cd:7c:0e:91:8a:39:d3:
                    6e:bd:02:57:99:39:fa:2e:82:4a:d1:fa:9e:f7:33:
                    5f:d1:54:70:54:a4:6f:be:c5:03:11:71:56:27:ab:
                    31:72:76:c2:3b:b0:2c:bb:cc:55:c8:aa:8a:f8:41:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:3B:70:F3:5E:8D:D6:14:1C:16:63:D3:FE:A9:AE:B6:33:EA:A3
            X509v3 Authority Key Identifier:
                keyid:29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2036353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4860::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:29:98:aa:3c:a8:fa:87:d9:ae:c5:f0:ff:c8:54:fc:3a:ff:
         f6:27:9e:0a:a2:ff:c2:11:88:1c:07:00:48:1d:04:d9:29:75:
         ac:01:e9:31:7a:f7:64:b0:48:11:b5:22:bd:01:6d:1f:9a:d0:
         b4:16:6a:43:de:1d:b5:20:9f:9c:81:18:fe:ff:c6:90:65:6a:
         02:31:3b:d7:43:5f:c5:96:db:aa:e5:58:e4:77:c6:1b:9a:26:
         82:22:d4:91:c6:40:c3:47:2a:d0:63:48:58:1c:85:41:96:56:
         79:85:98:c6:cf:22:1e:35:42:a5:83:46:8d:ea:7b:3f:8d:87:
         2f:63:40:56:63:e8:95:d6:78:28:d8:d1:91:24:48:18:2f:3c:
         f6:95:6d:84:b6:ec:8d:9f:09:86:79:96:38:59:a0:96:c7:99:
         85:1f:9f:50:9b:d6:7b:0a:db:30:39:81:5e:5a:00:38:62:02:
         5b:56:ee:b1:2a:b1:21:f6:e4:9c:db:6e:7e:c2:d2:87:38:56:
         ea:83:4e:57:e0:a2:38:b0:47:4f:eb:9b:db:b7:32:1e:d8:c6:
         37:48:7d:45:97:86:98:e5:87:84:59:c0:c0:b9:c5:6e:2f:6f:
         70:b6:f7:29:7f:75:ed:8c:0f:1c:68:32:04:ab:6b:23:7d:62:
         93:c8:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:12:58 2026 by rpki-client