Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33332d3333203d3e20323633373530.roa
File:                     323830333a396261303a383030303a3a2f33332d3333203d3e20323633373530.roa (raw, json)
Hash identifier:          /+6l9Hv7I+larEfeCAt7kB5yi3tpctH5vMow29dSPKM=
Subject key identifier:   E9:3C:F0:AF:74:4B:FC:EB:F8:10:5D:DC:2B:A2:4E:6B:01:04:89:80
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       41873D537B7309E1AE7B8ADCCACCAE6278996E05
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33332d3333203d3e20323633373530.roa
Signing time:             Fri 04 Sep 2026 14:33:51 +0000
ROA not before:           Fri 04 Sep 2026 14:28:51 +0000
ROA not after:            Fri 03 Sep 2027 14:33:51 +0000
asID:                     263750
IP address blocks:        2803:9ba0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 04:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:87:3d:53:7b:73:09:e1:ae:7b:8a:dc:ca:cc:ae:62:78:99:6e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Sep  4 14:28:51 2026 GMT
            Not After : Sep  3 14:33:51 2027 GMT
        Subject: CN=E93CF0AF744BFCEBF8105DDC2BA24E6B01048980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:6f:f6:1e:a0:f7:98:34:c5:42:a7:37:5b:
                    1c:55:65:c2:7d:0a:10:e7:85:c0:86:1e:cf:a6:81:
                    be:8d:fb:88:69:7b:44:7a:81:4f:e1:0a:49:a6:ae:
                    49:c2:21:8b:36:b0:00:5b:24:ba:e6:f6:06:78:d0:
                    7b:53:c9:5d:bf:ea:53:67:06:8f:f0:e1:ff:b7:0c:
                    d4:fc:40:38:1c:6b:ed:42:60:ba:a3:37:99:53:c2:
                    54:3f:17:49:8e:50:3b:f7:4e:3a:48:79:8f:ce:0b:
                    42:8c:b5:9d:b0:87:a9:25:10:8a:2d:db:e1:f6:12:
                    1a:c7:9d:6b:c7:2f:ab:a4:7a:73:fe:c0:94:09:7b:
                    a5:bf:f2:21:5e:b7:2c:f6:43:e5:25:37:52:f7:06:
                    99:3b:04:19:23:9a:be:a8:b4:24:98:9d:24:ca:b6:
                    9b:b7:76:4d:89:e3:dc:92:3b:70:ed:e7:f4:56:03:
                    80:0e:3c:1b:58:b9:9a:1f:b6:b7:35:76:94:7c:6e:
                    b2:d8:7f:6a:ec:14:a5:57:8d:39:f7:35:62:26:b2:
                    30:a7:31:1a:4a:af:79:a8:90:78:5c:81:df:e6:6a:
                    70:2f:a9:a0:2b:96:15:c8:1e:ca:0d:64:23:57:49:
                    7f:a8:22:73:97:00:59:2e:b0:f7:02:ee:b5:62:4e:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3C:F0:AF:74:4B:FC:EB:F8:10:5D:DC:2B:A2:4E:6B:01:04:89:80
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33332d3333203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:19:fd:67:f7:4e:9b:bd:8a:71:85:8b:6f:79:41:6a:c0:
         07:19:ec:1b:dc:ac:a7:60:d4:d3:3f:36:92:f5:d1:99:37:f1:
         dd:45:8c:f9:b6:3f:8f:e7:31:e0:b4:36:c6:4b:a0:f8:66:c5:
         9b:cc:7b:e9:4e:61:5d:02:65:63:23:fc:7d:c5:01:0b:57:94:
         26:d6:aa:3e:aa:d3:25:66:3e:9c:61:f0:28:85:eb:54:99:37:
         02:1d:93:34:92:21:15:20:91:ea:58:cd:b0:42:60:d7:72:41:
         b2:6e:6c:e6:ea:0a:99:cb:71:43:cf:43:d2:85:e8:82:3d:05:
         b7:8d:73:79:b5:a9:7d:26:2e:10:e1:94:bc:86:d0:62:75:6a:
         54:55:c2:26:2f:43:ef:30:79:59:c4:39:58:e2:75:5f:cf:45:
         de:3c:1a:56:f0:a3:d5:01:b7:1f:4c:4b:fa:9e:42:f5:c1:aa:
         8c:90:e2:64:ef:8b:5d:94:3f:18:75:1d:b4:72:76:e7:57:61:
         a9:9a:6f:de:e1:57:98:04:21:7a:f8:20:ca:8c:ed:71:bc:8c:
         12:9c:b8:c2:23:a1:b5:8f:35:b7:68:9e:f1:90:e4:05:06:3d:
         4e:2a:4a:f9:1a:13:1a:69:2b:97:31:ab:6c:01:16:87:93:37:
         62:fc:1f:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 03:43:54 2026 by rpki-client