Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/323830333a613938303a3a2f33322d3332203d3e203631343434.roa
File:                     323830333a613938303a3a2f33322d3332203d3e203631343434.roa (raw, json)
Hash identifier:          cmAyPC+mFfp/2nGlpRuusu5HXN4SXj24E766n88lG6I=
Subject key identifier:   3D:11:7F:82:BB:41:C8:5E:63:57:1A:B7:C5:2F:BC:01:FE:C2:69:45
Certificate issuer:       /CN=D545E92740A89EC715035BA1D28A92E5CD3DF07B
Certificate serial:       1D91742D30B712A8AB5E19A480934BD242270D91
Authority key identifier: D5:45:E9:27:40:A8:9E:C7:15:03:5B:A1:D2:8A:92:E5:CD:3D:F0:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/323830333a613938303a3a2f33322d3332203d3e203631343434.roa
Signing time:             Sat 24 Oct 2026 04:30:00 +0000
ROA not before:           Sat 24 Oct 2026 04:25:00 +0000
ROA not after:            Sat 23 Oct 2027 04:30:00 +0000
asID:                     61444
IP address blocks:        2803:a980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:91:74:2d:30:b7:12:a8:ab:5e:19:a4:80:93:4b:d2:42:27:0d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D545E92740A89EC715035BA1D28A92E5CD3DF07B
        Validity
            Not Before: Oct 24 04:25:00 2026 GMT
            Not After : Oct 23 04:30:00 2027 GMT
        Subject: CN=3D117F82BB41C85E63571AB7C52FBC01FEC26945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:bc:77:1a:88:1b:31:49:7e:0a:0d:73:34:
                    65:e4:40:a4:20:35:80:5a:c1:44:3f:6a:ae:a5:77:
                    34:bf:8e:90:fb:c8:5a:bf:78:93:ae:aa:63:57:0c:
                    c9:f7:d3:b1:eb:b2:e9:b9:11:a8:df:6f:c5:f8:e6:
                    0f:e2:4c:6f:af:85:a9:15:3a:03:f5:86:31:ba:80:
                    12:01:75:11:be:71:ca:5f:c0:ed:29:f0:7b:73:42:
                    ba:58:cd:f1:e4:61:82:6f:40:cd:b4:b0:7e:17:13:
                    c2:13:19:fc:28:f0:2d:c3:de:b1:0b:e0:45:3a:99:
                    48:0a:2a:33:48:63:63:a8:d8:60:2c:c6:eb:19:60:
                    ca:66:25:f1:22:80:d0:a5:0c:e7:ba:cf:e8:7b:6f:
                    c8:df:3a:98:25:98:3a:ab:f6:a6:7e:f3:60:dc:31:
                    b7:6e:38:66:bb:f2:12:02:a9:fb:92:62:1a:14:97:
                    c2:4b:d5:f6:da:c6:ad:6b:92:9e:e0:ae:6b:ad:d5:
                    1c:91:46:e0:e8:fe:77:4f:8b:39:e4:27:14:de:7b:
                    c3:32:03:5f:5e:0b:42:97:92:6f:08:09:17:2b:3a:
                    b5:6d:60:c3:82:c2:82:51:14:69:46:db:7f:08:a1:
                    a3:fd:1c:44:ab:4a:b6:91:33:95:92:c3:dd:02:39:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:7F:82:BB:41:C8:5E:63:57:1A:B7:C5:2F:BC:01:FE:C2:69:45
            X509v3 Authority Key Identifier:
                keyid:D5:45:E9:27:40:A8:9E:C7:15:03:5B:A1:D2:8A:92:E5:CD:3D:F0:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/323830333a613938303a3a2f33322d3332203d3e203631343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a980::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:ce:7d:f1:af:d6:3d:b1:bc:7e:d6:1d:75:0f:5d:58:b4:fa:
         12:e8:f2:e8:d1:2c:81:c6:a7:a6:c6:68:75:16:19:ee:fb:1b:
         bd:ca:32:fc:76:bc:7c:c7:20:88:dc:f8:b7:a0:30:a5:d8:56:
         c8:92:70:14:72:a5:9a:cb:9c:21:99:ec:47:64:78:83:63:52:
         52:3d:61:0d:f8:d6:c3:90:76:3d:aa:59:af:60:2e:e6:ca:d2:
         6c:56:84:a0:fd:33:8b:f2:de:0e:9d:a6:13:fc:a3:b2:cb:c4:
         d7:d2:2a:c7:db:67:4a:57:39:18:a4:30:3b:21:39:30:69:e0:
         ad:d4:bd:ce:d5:15:7c:43:b5:43:5e:19:65:5a:12:dc:d5:bd:
         3a:2c:3b:fc:60:b4:e6:50:48:fc:cb:ed:f4:45:50:a6:d4:21:
         05:2c:7a:f3:a5:b7:d6:15:f8:b2:e0:98:ef:e0:e7:90:03:05:
         e2:28:ee:47:0a:d9:5b:a3:1b:22:86:fa:db:c2:4f:87:aa:7d:
         c7:5f:67:e0:d4:fc:e7:9c:a9:c2:3a:ae:13:8c:16:a7:2b:bf:
         7c:c7:b5:5d:ba:cf:f1:39:71:ed:19:9e:b5:e8:6c:a1:15:24:
         63:fc:11:4d:74:a5:b0:00:88:1e:ed:ae:71:8a:58:ba:ab:4f:
         fc:43:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:51:43 2026 by rpki-client