Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/323830333a366638303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a366638303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          R03Zp9kUNriVRAMBcCTc4vPka4YhJiZvOnza0FHhSo0=
Subject key identifier:   13:29:30:8C:4D:14:B7:66:D8:5F:0A:A1:7F:9E:11:BF:C3:A0:B4:13
Certificate issuer:       /CN=F965529A55373DD5B3125495E0DCC6B4B4C343EE
Certificate serial:       7F5768A9D232B8D908E566004B3650C1B49D82D1
Authority key identifier: F9:65:52:9A:55:37:3D:D5:B3:12:54:95:E0:DC:C6:B4:B4:C3:43:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/323830333a366638303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Wed 12 Aug 2026 03:25:09 +0000
ROA not before:           Wed 12 Aug 2026 03:20:09 +0000
ROA not after:            Wed 11 Aug 2027 03:25:09 +0000
asID:                     52468
IP address blocks:        2803:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 05:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:57:68:a9:d2:32:b8:d9:08:e5:66:00:4b:36:50:c1:b4:9d:82:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F965529A55373DD5B3125495E0DCC6B4B4C343EE
        Validity
            Not Before: Aug 12 03:20:09 2026 GMT
            Not After : Aug 11 03:25:09 2027 GMT
        Subject: CN=1329308C4D14B766D85F0AA17F9E11BFC3A0B413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:7f:d4:43:ee:16:b9:d7:82:99:b6:5c:ca:
                    c3:82:79:82:71:f0:e5:b1:67:ab:b2:48:f2:9b:b0:
                    9e:32:bc:7c:20:00:20:66:a4:6d:56:91:c6:de:0c:
                    3e:d4:2c:82:3c:87:ab:e8:18:ba:2f:3f:88:58:7d:
                    55:e0:22:99:32:f8:09:0b:04:fc:c5:dd:46:19:1e:
                    fe:dd:31:e2:56:75:be:e7:6a:85:2f:d5:41:3a:a9:
                    38:02:29:c6:7c:be:72:34:b9:f5:39:64:56:08:27:
                    cc:3a:41:87:97:f0:b4:24:b7:df:99:48:4b:ae:06:
                    ac:85:0a:5c:15:ac:e2:c8:8d:60:4c:41:f0:58:d4:
                    b4:e8:90:83:9a:c9:75:9b:9d:b4:b3:fc:0f:87:1a:
                    4d:4e:1b:fe:a6:a0:99:16:32:5c:47:78:a3:eb:3b:
                    f0:55:e5:a2:86:45:3b:c0:cb:ba:68:ca:a2:7f:61:
                    13:0e:93:1a:f4:cc:e4:24:9e:3b:57:97:5c:70:6d:
                    4e:99:8a:c3:73:d4:6e:15:ae:08:7f:5c:36:94:ee:
                    d4:51:80:16:9a:cd:7a:99:32:e6:7f:87:1b:13:47:
                    55:70:79:3a:64:34:44:45:6b:94:f7:b3:aa:e1:d4:
                    4c:27:7a:cf:42:bc:a9:ab:4c:e3:66:da:59:7c:5a:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:30:8C:4D:14:B7:66:D8:5F:0A:A1:7F:9E:11:BF:C3:A0:B4:13
            X509v3 Authority Key Identifier:
                keyid:F9:65:52:9A:55:37:3D:D5:B3:12:54:95:E0:DC:C6:B4:B4:C3:43:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/323830333a366638303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:45:8d:2b:97:ab:b6:c2:a3:20:66:7f:fc:3e:46:0a:a2:
         17:17:dc:79:f2:01:69:de:c9:bf:40:4e:04:5d:5f:0a:4c:97:
         70:1c:20:91:81:38:3c:d7:5e:b9:e3:86:52:f6:8c:cf:27:75:
         e3:fb:a4:b7:6e:30:cb:7a:bf:13:89:25:c4:18:2c:68:e2:3c:
         b2:a9:a1:42:c1:76:8a:68:26:31:4a:f6:6d:6c:e0:fc:f6:f3:
         6d:ea:35:a8:67:0f:80:4c:55:d5:a4:87:56:b7:97:8f:4d:60:
         77:16:26:68:87:0b:e0:2a:a9:04:96:3e:57:d5:23:95:15:23:
         4f:ec:ae:03:8b:a6:96:4d:e2:bb:bd:ec:7e:7c:28:1b:f9:a1:
         58:84:13:36:65:13:68:6e:f5:bb:59:68:a1:2e:03:6d:6d:39:
         82:dd:0d:48:8f:8d:70:19:5a:f3:3d:39:20:fe:b9:c8:ed:9f:
         60:76:32:01:87:c0:99:0d:01:ff:38:0e:c2:a2:db:02:3a:a7:
         49:75:28:c5:81:67:51:3f:f9:ad:39:56:69:1c:29:b4:c0:74:
         b2:a0:bd:2c:c1:83:41:84:de:79:c8:4c:cd:b3:a3:af:d3:90:
         61:94:fc:93:19:37:d6:c7:4b:0d:dc:27:37:17:8f:32:82:ac:
         5b:b9:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:36:50 2026 by rpki-client