Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/323830333a393164303a3a2f33322d3332203d3e20323734313336.roa
File:                     323830333a393164303a3a2f33322d3332203d3e20323734313336.roa (raw, json)
Hash identifier:          azhX/nc6ZhPuMjMCGyzWaWnTBhLXnAd7dtMvCdl9L8k=
Subject key identifier:   F7:E9:72:90:E4:BC:8A:01:97:44:03:E3:B9:87:A2:F6:D5:1C:6F:12
Certificate issuer:       /CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
Certificate serial:       59F075EF52FFD2979BC30B1F81BBC3B782DD928D
Authority key identifier: 1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/323830333a393164303a3a2f33322d3332203d3e20323734313336.roa
Signing time:             Thu 06 Aug 2026 15:20:02 +0000
ROA not before:           Thu 06 Aug 2026 15:15:02 +0000
ROA not after:            Thu 05 Aug 2027 15:20:02 +0000
asID:                     274136
IP address blocks:        2803:91d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f0:75:ef:52:ff:d2:97:9b:c3:0b:1f:81:bb:c3:b7:82:dd:92:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
        Validity
            Not Before: Aug  6 15:15:02 2026 GMT
            Not After : Aug  5 15:20:02 2027 GMT
        Subject: CN=F7E97290E4BC8A01974403E3B987A2F6D51C6F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:05:a8:d5:f0:1c:08:e4:44:54:3a:da:5e:
                    40:89:bc:3c:d9:a8:7f:67:57:fc:89:cc:a4:9a:30:
                    47:06:0f:6f:58:19:e4:17:00:ae:2d:63:4d:91:c4:
                    47:10:68:3d:76:f0:3e:90:60:b0:1a:4d:be:05:91:
                    ca:93:19:68:26:9c:b9:f2:b2:08:89:61:1a:3a:b1:
                    e4:69:85:6a:85:eb:6c:da:a8:ee:c4:74:5e:be:bd:
                    06:42:40:e8:2c:fc:1f:bc:c0:d8:52:1b:6e:76:7d:
                    ba:a4:64:2a:6e:aa:d6:2a:81:14:52:ce:e9:b2:aa:
                    14:ec:0e:07:3f:81:68:25:e8:e6:fc:08:46:d3:92:
                    bb:a2:18:5e:66:b8:a0:d6:ae:86:9b:e3:e7:97:ab:
                    16:6f:b4:d7:54:56:0a:0d:a3:8d:17:09:b8:33:f6:
                    32:d8:b8:10:92:72:51:49:9d:d3:24:73:5c:1a:7c:
                    9f:27:d4:45:ec:3b:5b:d1:b9:83:ba:39:eb:36:32:
                    07:4f:e2:c1:4e:8f:87:29:64:5c:34:4c:4f:a1:c8:
                    ea:c0:70:b5:b2:fe:0d:1c:a4:13:20:a0:3a:d7:6f:
                    b7:67:8f:7b:00:ca:5c:4e:bc:71:e2:27:bc:3c:ff:
                    cf:8b:ac:6f:32:35:ea:5b:c4:f1:fe:79:35:73:2e:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:72:90:E4:BC:8A:01:97:44:03:E3:B9:87:A2:F6:D5:1C:6F:12
            X509v3 Authority Key Identifier:
                keyid:1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/323830333a393164303a3a2f33322d3332203d3e20323734313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:91d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:cd:e9:c3:9b:c4:b3:33:aa:1e:65:83:1b:78:4e:2f:34:
         15:86:ef:40:bd:f0:42:12:a0:f1:e1:bf:00:2e:46:e2:81:af:
         dd:29:d7:e7:34:03:40:22:fa:46:ac:a3:e7:8d:1a:b9:a6:8c:
         d6:b5:1f:1e:5e:d8:28:6e:86:f0:07:e5:01:87:a0:fc:74:f8:
         e6:77:14:32:06:45:39:87:27:71:e4:38:e6:69:9f:b5:40:43:
         50:54:49:86:d6:d7:02:b1:6a:dc:17:89:32:6c:6b:8c:83:50:
         a8:ea:56:e0:a3:71:43:4c:4d:d5:9a:09:c5:5e:d8:76:b4:d5:
         69:16:e1:c8:0c:8f:48:42:5c:1e:00:d8:4e:3e:bc:f3:a5:47:
         bf:d4:fb:a5:3b:d7:d0:2e:5e:4f:ad:7b:a3:7c:d6:90:a4:a1:
         26:40:13:a6:34:df:15:64:97:bf:59:68:65:da:44:d5:b7:46:
         21:97:e5:90:cb:5a:0c:f9:4b:3d:cf:9d:ca:a8:a6:00:9c:5e:
         f9:4a:1d:8c:60:a5:cd:f8:40:54:8e:7c:b1:cf:43:b4:fa:84:
         bd:91:1d:21:f1:9b:61:7b:94:3b:11:2a:bd:8c:82:5a:af:ce:
         d8:be:7f:16:62:25:95:64:c5:e9:43:7c:31:2e:7c:be:ec:e0:
         47:64:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:19:45 2026 by rpki-client