Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa
File:                     323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa (raw, json)
Hash identifier:          SHTCqW7H5ksWWpSeA7/PQItxrz05m4zPhLJ8Fkptu5I=
Subject key identifier:   CC:A5:EB:D1:EC:09:27:53:AD:BA:67:C1:A6:F3:A9:FA:22:EA:55:D1
Certificate issuer:       /CN=F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037
Certificate serial:       54E6C5C2DAF776D2B6654626603B3F89B674983C
Authority key identifier: F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa
Signing time:             Thu 13 Aug 2026 22:25:19 +0000
ROA not before:           Thu 13 Aug 2026 22:20:19 +0000
ROA not after:            Thu 12 Aug 2027 22:25:19 +0000
asID:                     273200
IP address blocks:        2803:e650:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e6:c5:c2:da:f7:76:d2:b6:65:46:26:60:3b:3f:89:b6:74:98:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037
        Validity
            Not Before: Aug 13 22:20:19 2026 GMT
            Not After : Aug 12 22:25:19 2027 GMT
        Subject: CN=CCA5EBD1EC092753ADBA67C1A6F3A9FA22EA55D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:3a:7e:49:39:f0:d7:20:bf:fa:d4:d2:9a:
                    24:0e:8c:c6:57:eb:ed:7a:20:3a:8d:83:91:87:86:
                    9b:f9:91:46:e7:9b:c9:95:fc:71:41:14:32:23:71:
                    7e:f2:9a:6b:86:38:10:09:f3:41:59:7b:23:da:55:
                    7f:80:b6:6f:30:cc:14:5a:3c:82:2b:d9:51:0d:fe:
                    6d:20:77:f4:03:09:f8:10:4d:e3:e2:05:76:61:94:
                    4a:84:98:6f:93:14:3c:28:10:3e:55:d7:ca:dc:89:
                    eb:64:23:e9:fb:b0:94:84:43:e6:8a:28:d3:a4:7b:
                    bb:5a:b6:82:70:59:e5:9c:1a:c0:a6:c2:ed:6c:01:
                    8a:47:19:7f:53:10:30:eb:81:4a:53:44:1a:1e:9f:
                    e1:a6:47:fa:1d:4b:df:68:9a:f7:9e:6d:c7:34:98:
                    7d:2f:5d:ad:12:5a:51:bd:71:2d:5e:b0:3c:ab:41:
                    3e:5c:2e:f8:3c:82:69:72:43:8c:a7:8c:d1:84:51:
                    48:ac:44:9b:be:cf:a0:cd:6a:63:fb:17:19:38:43:
                    bb:09:14:b3:dc:34:2c:c5:cd:43:af:45:be:b6:03:
                    78:51:99:3e:e3:bf:ca:55:14:d4:d2:ef:f3:eb:f6:
                    35:5d:e0:22:7b:f6:e2:6e:15:a7:6d:45:a1:8b:67:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:EB:D1:EC:09:27:53:AD:BA:67:C1:A6:F3:A9:FA:22:EA:55:D1
            X509v3 Authority Key Identifier:
                keyid:F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/323830333a653635303a35303a3a2f34342d3434203d3e20323733323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e650:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:16:5d:49:02:b3:52:e1:8f:c9:94:c4:f4:54:a8:35:13:52:
         7c:6d:07:58:81:08:6f:f0:14:6b:45:5c:78:53:55:7a:56:ce:
         44:4d:43:45:84:f1:4f:dc:e3:cd:c2:53:ec:d4:68:66:6c:d2:
         22:ad:ea:c9:cb:31:de:49:27:6d:5d:ad:4b:fc:86:10:c2:4d:
         07:c0:47:2e:cf:ae:15:ca:8c:38:02:16:80:63:59:b7:ef:b3:
         2d:98:c1:83:71:a2:4c:38:d4:76:94:dc:37:43:51:5f:97:d9:
         54:23:ac:01:b2:4f:d9:f7:a8:cd:06:9d:d7:65:55:ef:50:8b:
         24:5b:3a:9f:b8:36:82:f3:71:83:40:d5:58:c4:1a:2a:73:f9:
         4b:ad:2f:12:1b:22:57:0d:db:a2:c3:98:b8:33:99:97:d2:75:
         c4:b1:ff:d7:7e:73:c9:88:2f:97:25:2f:e3:04:3c:d0:5e:3d:
         76:83:98:9b:ea:6b:b3:85:7b:80:53:c3:6a:5b:48:c7:0e:ed:
         4f:69:59:53:57:ff:d1:25:6b:90:02:b8:cb:f9:75:04:82:6c:
         c8:20:15:ef:d8:1c:a3:c3:44:d0:73:f2:c3:e5:b7:0d:1a:28:
         8e:d4:fb:e1:f9:33:e6:51:0b:51:2d:8e:f4:d9:2c:b0:57:02:
         b4:13:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:24:40 2026 by rpki-client