Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3630303a3a2f34302d3430203d3e20323732383534.roa
File:                     323830333a633239303a3630303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier:          w84dY21Uk1PRQ8pY57bYj08FZdTvtvq9SZ84AHXhCT0=
Subject key identifier:   2C:A8:05:B2:E1:51:7A:A4:A4:5A:24:64:B0:34:4B:3B:AB:BA:55:8F
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       2DB349B53CD9B7343F7B8E34FF356C39066D93D0
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3630303a3a2f34302d3430203d3e20323732383534.roa
Signing time:             Thu 30 Jul 2026 16:10:00 +0000
ROA not before:           Thu 30 Jul 2026 16:05:00 +0000
ROA not after:            Thu 29 Jul 2027 16:10:00 +0000
asID:                     272854
IP address blocks:        2803:c290:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b3:49:b5:3c:d9:b7:34:3f:7b:8e:34:ff:35:6c:39:06:6d:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Jul 30 16:05:00 2026 GMT
            Not After : Jul 29 16:10:00 2027 GMT
        Subject: CN=2CA805B2E1517AA4A45A2464B0344B3BABBA558F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:c1:48:44:ab:2e:ff:52:35:47:55:3f:4f:
                    8f:bc:63:b9:cf:75:49:10:4f:d1:71:f7:b0:b3:96:
                    d4:2c:f5:7f:08:5c:08:b5:07:4c:f6:68:d0:5a:1d:
                    4f:66:c8:93:e0:fe:f8:d3:b5:92:c7:69:99:95:af:
                    cb:99:92:0a:d6:b0:f4:b1:13:7e:ce:3c:f7:e3:8f:
                    17:db:1f:71:f1:0b:5b:2c:a7:99:a0:03:96:8e:f3:
                    58:da:9d:a2:79:16:df:c5:6e:85:e6:7f:31:e4:ec:
                    9f:60:78:9a:76:19:d8:2e:d1:80:b6:b6:88:b6:3f:
                    e9:b3:ee:dd:4b:4a:7d:bf:33:78:5b:54:e3:f8:3d:
                    85:5e:5c:e5:27:69:20:f3:ec:5b:49:2a:7f:ed:9c:
                    40:6f:f1:39:65:a3:a4:a1:0d:ae:85:c3:2f:bc:df:
                    6e:5a:66:dd:22:9e:95:5c:9e:55:f7:1d:ef:fd:b1:
                    68:45:3e:ff:00:b0:db:60:d1:5b:cf:80:26:25:a7:
                    77:5e:39:63:ed:ab:1b:f6:85:13:02:7f:b2:53:61:
                    9a:b8:fe:90:a9:7e:21:a2:8f:4e:6d:4b:b5:db:2b:
                    e4:9c:d4:26:54:f6:66:6c:ef:96:c9:ff:31:6c:82:
                    8a:99:ed:e6:49:11:e6:67:84:b0:24:ee:77:49:e8:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A8:05:B2:E1:51:7A:A4:A4:5A:24:64:B0:34:4B:3B:AB:BA:55:8F
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3630303a3a2f34302d3430203d3e20323732383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:1d:b0:2f:bb:e5:7d:d2:c4:dc:ef:43:ec:77:9c:42:43:1a:
         d4:38:ea:e7:59:2e:9b:c9:b5:13:a9:81:a0:72:4d:03:e7:a0:
         70:1b:6c:66:5a:62:e8:d5:3b:66:86:c4:72:c5:a5:d7:5e:97:
         0f:7b:db:24:41:93:4a:20:83:81:22:c7:ac:ae:04:06:14:09:
         b1:45:47:52:e8:77:d1:42:57:e5:02:3a:95:c8:3d:88:0d:d5:
         51:dd:80:b7:d7:84:3a:a0:83:78:01:17:12:15:03:6a:0d:69:
         29:5a:51:32:ba:d2:de:0d:cc:3a:cf:90:13:c6:f1:f0:f7:05:
         0e:ef:6b:4b:eb:ae:7c:f9:b2:40:cf:c7:10:e5:29:d4:99:a6:
         ad:5f:39:80:f5:c9:88:0a:bf:9d:ef:e8:84:99:bf:7e:15:e2:
         ab:0a:23:51:a0:70:74:02:6e:a1:68:d4:22:82:89:6b:b2:d8:
         65:f1:93:c9:7c:b2:ac:3f:b3:6c:7f:ca:ad:6a:ba:7a:0e:0f:
         76:b5:87:f2:89:a1:71:60:de:e4:5f:a8:45:2f:06:39:97:55:
         df:2e:31:c3:3c:fa:79:9b:3d:b6:a8:fd:2c:37:cb:f5:7a:75:
         a7:cb:41:17:a5:36:a2:fa:70:9b:87:27:52:6d:c5:43:ec:5f:
         df:36:ce:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:30 2026 by rpki-client