Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/612604D7446D452B70CA8955B04A65432521981C759EF0209613AF785A6CA49F/0/323830333a356165303a383030303a3a2f33332d3536203d3e20323639393432.roa
File:                     323830333a356165303a383030303a3a2f33332d3536203d3e20323639393432.roa (raw, json)
Hash identifier:          VxJrAwxbY9m6AtFgkfdvz+VdrO1BAhoRp392a4Al/Uw=
Subject key identifier:   33:8C:4C:69:49:1D:65:56:44:64:54:7F:02:03:9D:E0:C6:17:F1:46
Certificate issuer:       /CN=27871E94A685A9447BB421553C711F6EFA1B5349
Certificate serial:       67D4F609993E8828DE477632A0D5150F185BAF3C
Authority key identifier: 27:87:1E:94:A6:85:A9:44:7B:B4:21:55:3C:71:1F:6E:FA:1B:53:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27871E94A685A9447BB421553C711F6EFA1B5349.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/612604D7446D452B70CA8955B04A65432521981C759EF0209613AF785A6CA49F/0/323830333a356165303a383030303a3a2f33332d3536203d3e20323639393432.roa
Signing time:             Thu 06 Aug 2026 04:50:00 +0000
ROA not before:           Thu 06 Aug 2026 04:45:00 +0000
ROA not after:            Thu 05 Aug 2027 04:50:00 +0000
asID:                     269942
IP address blocks:        2803:5ae0:8000::/33 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/612604D7446D452B70CA8955B04A65432521981C759EF0209613AF785A6CA49F/0/27871E94A685A9447BB421553C711F6EFA1B5349.crl
                          rsync://repository.lacnic.net/rpki/lacnic/612604D7446D452B70CA8955B04A65432521981C759EF0209613AF785A6CA49F/0/27871E94A685A9447BB421553C711F6EFA1B5349.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27871E94A685A9447BB421553C711F6EFA1B5349.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d4:f6:09:99:3e:88:28:de:47:76:32:a0:d5:15:0f:18:5b:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27871E94A685A9447BB421553C711F6EFA1B5349
        Validity
            Not Before: Aug  6 04:45:00 2026 GMT
            Not After : Aug  5 04:50:00 2027 GMT
        Subject: CN=338C4C69491D65564464547F02039DE0C617F146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:aa:ca:71:dd:0d:77:8f:e5:39:83:70:b3:
                    98:53:dc:83:64:4c:f3:46:cc:f2:d9:f0:1f:2c:68:
                    30:9d:bb:9e:be:0b:c6:9d:09:43:b3:81:1f:77:4d:
                    89:7f:d5:23:f3:a6:62:da:b2:1e:3f:df:74:92:61:
                    69:4f:39:de:93:fb:1c:b3:9b:66:2e:70:a8:a7:30:
                    47:e5:2a:e7:33:96:da:ed:ee:f4:b5:d6:00:a2:51:
                    d1:9f:7a:3e:b4:c9:c3:e1:81:4d:b7:ad:f2:a5:3c:
                    83:92:6d:4e:d7:e7:29:48:df:59:c5:67:9b:af:5c:
                    78:52:30:59:30:50:8e:94:a4:41:f8:d2:d6:3b:7d:
                    d2:4e:0c:e8:90:c4:5b:0c:06:b7:fd:aa:68:ee:46:
                    5e:cd:c2:44:f0:a3:40:52:b0:7e:ae:24:06:1a:37:
                    e7:c0:4e:be:3a:fb:1d:6d:37:47:1e:a0:75:49:f1:
                    df:38:e1:75:1e:18:c8:98:0f:7c:b0:5f:3b:ff:9b:
                    2b:c3:bb:db:00:94:2d:c7:0f:a2:da:7c:e2:9f:46:
                    cd:00:62:3e:d5:89:2b:5e:42:8f:a0:23:a3:01:cf:
                    78:e1:41:bb:f5:d5:77:13:be:c0:0b:e5:bc:af:16:
                    17:04:e2:57:d0:5f:cd:0a:af:ba:05:e3:fb:f0:01:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:4C:69:49:1D:65:56:44:64:54:7F:02:03:9D:E0:C6:17:F1:46
            X509v3 Authority Key Identifier:
                keyid:27:87:1E:94:A6:85:A9:44:7B:B4:21:55:3C:71:1F:6E:FA:1B:53:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/612604D7446D452B70CA8955B04A65432521981C759EF0209613AF785A6CA49F/0/27871E94A685A9447BB421553C711F6EFA1B5349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27871E94A685A9447BB421553C711F6EFA1B5349.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/612604D7446D452B70CA8955B04A65432521981C759EF0209613AF785A6CA49F/0/323830333a356165303a383030303a3a2f33332d3536203d3e20323639393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ae0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:89:64:ab:50:ae:80:06:8a:b9:5d:68:b8:b9:e4:ae:b9:
         63:6b:75:1a:14:78:4c:8e:03:2c:8a:b7:be:78:5c:47:20:1e:
         f9:a7:81:8b:c2:42:c1:bd:f4:ca:5a:ac:d9:0c:ff:05:bb:cb:
         d1:cc:02:12:7a:71:42:4b:28:39:51:cb:4e:78:6f:ab:f6:ec:
         a3:ed:98:40:0b:a3:73:44:77:59:41:9d:94:a8:a7:51:a6:64:
         e4:9f:11:40:22:6d:ae:ff:85:04:f9:2b:b3:95:b8:b2:18:74:
         3b:ee:ea:68:7a:d9:33:06:b4:83:55:e1:a9:d3:9b:00:31:64:
         f3:bd:9d:6c:d8:61:6e:ce:e1:cc:c1:99:b7:b9:e9:ce:56:4f:
         40:d1:f4:29:13:29:ca:95:95:68:15:58:20:00:f9:7e:19:9a:
         bf:37:7b:4a:17:d8:33:76:8e:44:31:e5:42:ef:2a:da:18:5f:
         cc:77:4e:ab:e9:45:4e:ff:87:32:36:51:7f:80:18:61:f4:6b:
         64:18:f6:95:d2:a7:09:0d:f4:20:40:ad:a2:ba:07:72:fd:d6:
         8d:e5:72:27:6e:60:25:5e:fb:86:c7:16:2f:d8:27:a1:c9:2a:
         ae:37:57:b7:c8:57:7b:79:2f:96:d3:1e:2b:e8:db:2b:7c:ed:
         4f:88:f7:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:55 2026 by rpki-client