Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/323830333a396633303a3a2f33322d3438203d3e20323735303631.roa
File:                     323830333a396633303a3a2f33322d3438203d3e20323735303631.roa (raw, json)
Hash identifier:          OIU5rBsXmX2CCwysV9JL1Fn6zxinJnM1NZ0CPbhqzKE=
Subject key identifier:   8E:A7:8A:BD:0E:CA:8D:21:37:AD:FC:C5:F7:44:EB:0F:CD:28:3D:1E
Certificate issuer:       /CN=DD07BA350E5FC291196F469CADEAB634216C304C
Certificate serial:       08EC28BABC733EC0CA77BC106DC1E3885051BC62
Authority key identifier: DD:07:BA:35:0E:5F:C2:91:19:6F:46:9C:AD:EA:B6:34:21:6C:30:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD07BA350E5FC291196F469CADEAB634216C304C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/323830333a396633303a3a2f33322d3438203d3e20323735303631.roa
Signing time:             Wed 30 Sep 2026 01:35:00 +0000
ROA not before:           Wed 30 Sep 2026 01:30:00 +0000
ROA not after:            Wed 29 Sep 2027 01:35:00 +0000
asID:                     275061
IP address blocks:        2803:9f30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD07BA350E5FC291196F469CADEAB634216C304C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ec:28:ba:bc:73:3e:c0:ca:77:bc:10:6d:c1:e3:88:50:51:bc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD07BA350E5FC291196F469CADEAB634216C304C
        Validity
            Not Before: Sep 30 01:30:00 2026 GMT
            Not After : Sep 29 01:35:00 2027 GMT
        Subject: CN=8EA78ABD0ECA8D2137ADFCC5F744EB0FCD283D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:13:bc:54:27:25:c9:5e:93:99:63:b6:1b:
                    fd:51:14:0d:0e:f7:c5:49:59:72:c3:77:c4:34:9a:
                    84:90:de:c0:fc:75:cf:ac:7f:b1:0f:c3:9a:4c:5c:
                    38:74:1b:6f:c7:63:93:b9:21:e1:d8:9f:f3:3c:55:
                    db:1a:5e:f2:bb:d9:dc:61:1d:02:3e:f3:c3:15:2f:
                    af:a6:1d:39:db:36:e0:4e:ab:c2:dc:a9:77:6c:f4:
                    24:7f:14:88:ad:5c:53:bd:09:a3:12:ae:10:53:f0:
                    62:a8:1e:44:00:80:91:d6:37:d0:cf:eb:93:56:08:
                    a3:61:fe:a8:ca:5c:8d:2c:46:91:90:b3:a3:07:10:
                    6b:13:f0:30:81:0c:65:df:70:95:7b:f8:c2:76:4b:
                    0d:86:1c:5a:aa:f6:7d:a5:e8:b7:ce:6d:ec:02:e7:
                    b6:b6:10:aa:d4:e3:d8:2b:5e:94:a2:6a:0f:92:9d:
                    95:c8:d6:d8:8c:57:63:ca:9c:55:c8:6a:b7:50:fa:
                    61:23:9d:33:aa:e9:ee:6c:b4:52:18:87:9a:97:14:
                    2c:c0:91:43:80:4c:67:f9:f1:d9:2e:23:c4:c2:b3:
                    21:4e:bb:6a:be:71:56:41:fe:4b:45:8e:b7:7d:fc:
                    36:42:72:6c:5a:fe:b9:3a:5f:1f:52:20:9d:ab:ad:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A7:8A:BD:0E:CA:8D:21:37:AD:FC:C5:F7:44:EB:0F:CD:28:3D:1E
            X509v3 Authority Key Identifier:
                keyid:DD:07:BA:35:0E:5F:C2:91:19:6F:46:9C:AD:EA:B6:34:21:6C:30:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/DD07BA350E5FC291196F469CADEAB634216C304C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD07BA350E5FC291196F469CADEAB634216C304C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58C68CBFBFB049EFF9D2B7F1F61D9E72DCDFE1FE5F2F7E40884864CC87E8AF0C/0/323830333a396633303a3a2f33322d3438203d3e20323735303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:5a:09:89:c2:fc:76:9e:58:3f:eb:0b:85:cf:10:d8:84:
         10:b8:7a:cd:d2:81:8e:7d:fa:01:10:71:a3:1c:c8:63:07:a6:
         d4:2a:e6:e4:7e:61:1e:34:22:a1:31:cf:56:2e:0b:5e:82:a1:
         e4:eb:82:6b:13:8c:93:41:d6:59:23:d0:26:a5:e5:98:6c:c4:
         f2:85:b2:28:e9:c0:8d:79:3e:19:d8:3c:dc:0a:73:1b:36:e4:
         92:cb:e5:27:8c:e9:bd:b1:be:51:41:fe:f5:27:77:b5:a6:13:
         04:18:c1:71:02:57:5d:83:49:5f:7a:3f:cc:ec:35:fd:f3:95:
         cf:35:9b:49:36:62:ae:4c:99:82:c8:e2:c6:90:0c:6a:f3:f3:
         7d:bb:2d:a5:c5:94:70:f2:1e:26:01:7d:eb:62:3d:02:7b:06:
         85:4f:f8:29:f0:6e:fb:d0:29:6d:bb:44:4d:90:ec:1a:81:5b:
         fe:3a:cf:48:6a:fc:49:5d:1c:d2:a0:50:e8:c7:60:e8:9a:10:
         66:07:79:90:f6:d2:e3:c4:a8:94:b1:7d:3b:94:b8:18:b4:49:
         bd:ca:2f:ac:da:67:f7:8d:e3:1b:bf:ac:f1:d2:12:d9:29:b9:
         fe:6b:ab:63:2a:f2:db:cb:2e:54:1d:10:8f:8f:88:1b:5d:94:
         51:ed:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:03 2026 by rpki-client