Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/41BD2E28B73B19AB07E847314194D4456E28DEF98648776ED6CC292023D4CB45/0/323830333a333333303a3a2f33322d3438203d3e20323735303038.roa
File:                     323830333a333333303a3a2f33322d3438203d3e20323735303038.roa (raw, json)
Hash identifier:          mvOHpLTmVg2YOvLkSbFsyh+0lfQ683TTvb9GDJbLRCU=
Subject key identifier:   A7:C9:C3:1D:26:5B:FB:B4:1C:A4:F7:98:56:88:CE:67:0B:72:39:F4
Certificate issuer:       /CN=F6374FFA04885892AB7507F0AE0537633A2234D2
Certificate serial:       54A14CEFC67AF981B47A2C624B0EDEE619C5D957
Authority key identifier: F6:37:4F:FA:04:88:58:92:AB:75:07:F0:AE:05:37:63:3A:22:34:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6374FFA04885892AB7507F0AE0537633A2234D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41BD2E28B73B19AB07E847314194D4456E28DEF98648776ED6CC292023D4CB45/0/323830333a333333303a3a2f33322d3438203d3e20323735303038.roa
Signing time:             Tue 15 Sep 2026 22:15:00 +0000
ROA not before:           Tue 15 Sep 2026 22:10:00 +0000
ROA not after:            Tue 14 Sep 2027 22:15:00 +0000
asID:                     275008
IP address blocks:        2803:3330::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41BD2E28B73B19AB07E847314194D4456E28DEF98648776ED6CC292023D4CB45/0/F6374FFA04885892AB7507F0AE0537633A2234D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41BD2E28B73B19AB07E847314194D4456E28DEF98648776ED6CC292023D4CB45/0/F6374FFA04885892AB7507F0AE0537633A2234D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6374FFA04885892AB7507F0AE0537633A2234D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a1:4c:ef:c6:7a:f9:81:b4:7a:2c:62:4b:0e:de:e6:19:c5:d9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6374FFA04885892AB7507F0AE0537633A2234D2
        Validity
            Not Before: Sep 15 22:10:00 2026 GMT
            Not After : Sep 14 22:15:00 2027 GMT
        Subject: CN=A7C9C31D265BFBB41CA4F7985688CE670B7239F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:00:a8:bd:c9:ed:c5:57:d7:af:7f:cc:ae:
                    1b:c2:9a:0f:8c:87:ca:09:5e:4b:7d:3e:db:42:d8:
                    d4:0a:d6:fa:9d:e6:26:ad:76:52:4b:c3:b5:96:bc:
                    c6:aa:84:7c:c4:46:3e:98:06:bf:f1:94:dc:44:0c:
                    fd:8e:ff:f3:c6:19:58:e1:d4:cd:6a:c2:02:2d:ee:
                    47:5b:74:20:43:f0:61:cd:f4:58:a9:1b:8a:eb:fd:
                    04:bd:97:41:ad:84:7f:4e:d0:78:b9:72:56:7c:4f:
                    e4:06:95:6b:ff:45:cb:1c:96:bc:21:dd:b8:4d:00:
                    39:e8:2f:88:ec:a1:f6:43:8c:33:38:a4:a0:e0:97:
                    16:b7:f4:56:ac:3d:07:15:a0:16:01:73:46:f0:ee:
                    cd:9a:0b:58:8e:b8:c3:39:64:eb:26:e1:bd:a5:3c:
                    77:ca:1f:3f:7b:82:33:e8:79:cb:e4:72:24:b9:eb:
                    21:3e:14:29:95:8a:ff:a1:1e:8a:b3:05:5d:c5:c1:
                    51:4c:d6:14:62:50:b0:4a:bd:53:b1:6f:23:0f:cc:
                    38:57:d3:a4:7c:46:50:b6:cc:55:55:f9:f8:f1:f3:
                    0c:a9:26:28:25:7c:f4:6b:33:d6:b3:e1:a8:bc:b1:
                    e2:1a:2f:91:da:19:fe:33:cb:31:e4:e2:5f:c7:cf:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:C3:1D:26:5B:FB:B4:1C:A4:F7:98:56:88:CE:67:0B:72:39:F4
            X509v3 Authority Key Identifier:
                keyid:F6:37:4F:FA:04:88:58:92:AB:75:07:F0:AE:05:37:63:3A:22:34:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41BD2E28B73B19AB07E847314194D4456E28DEF98648776ED6CC292023D4CB45/0/F6374FFA04885892AB7507F0AE0537633A2234D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6374FFA04885892AB7507F0AE0537633A2234D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41BD2E28B73B19AB07E847314194D4456E28DEF98648776ED6CC292023D4CB45/0/323830333a333333303a3a2f33322d3438203d3e20323735303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3330::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:c9:5e:69:b3:fa:29:25:98:a2:18:6b:1f:2a:e0:bd:da:
         c9:02:12:fc:4d:9f:82:64:4c:37:f2:44:46:44:45:e9:38:f5:
         7f:83:8e:34:eb:0a:9a:f1:58:df:12:f3:53:8b:e1:7b:fc:71:
         88:2b:0f:8e:2b:5a:48:7a:50:a8:c4:d2:c0:08:14:5f:ec:a0:
         0f:1d:68:a2:37:4b:13:ef:89:8a:ae:af:35:55:78:84:12:92:
         10:da:5e:ee:8f:75:17:bc:e6:80:42:39:84:51:d8:b7:f5:6a:
         db:92:34:44:84:23:5a:77:f3:ba:ec:b6:1d:4c:e8:1f:79:fd:
         09:5c:96:70:97:bd:fb:14:69:13:f6:44:ce:e3:71:d6:09:0a:
         f2:37:7d:23:1e:ee:b4:69:c6:ad:c1:b6:04:06:79:c3:30:c9:
         93:77:1d:7a:c1:48:93:42:24:d9:ca:04:f6:f9:3f:e6:bc:a0:
         34:cc:e9:6c:0d:45:f3:cd:bf:14:9b:d6:26:8f:30:28:ab:a4:
         58:53:0d:d2:ee:34:1e:33:1d:42:d8:82:6c:b5:7b:c8:c1:4b:
         9b:ac:2a:c0:fb:a4:f9:8e:eb:a9:12:07:5d:a3:c0:0f:fd:18:
         69:a7:32:e2:2c:ae:c3:b4:7a:67:f8:e2:56:ec:d0:06:b7:b1:
         67:59:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:07:44 2026 by rpki-client