Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3730303a3a2f34302d3430203d3e20323732383534.roa
File:                     323830333a633239303a3730303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier:          u5Ly8GJxp7LJK7iswoewLbOVukCiA/xZhHB1/EMw4uc=
Subject key identifier:   C7:5D:AF:F7:7E:15:EA:2B:87:68:99:60:EC:79:67:84:CE:E0:6C:B4
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       2964E2B1660F18E8192DE0F325AEC36FE7FB0937
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3730303a3a2f34302d3430203d3e20323732383534.roa
Signing time:             Sat 08 Aug 2026 23:35:03 +0000
ROA not before:           Sat 08 Aug 2026 23:30:03 +0000
ROA not after:            Sat 07 Aug 2027 23:35:03 +0000
asID:                     272854
IP address blocks:        2803:c290:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:64:e2:b1:66:0f:18:e8:19:2d:e0:f3:25:ae:c3:6f:e7:fb:09:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Aug  8 23:30:03 2026 GMT
            Not After : Aug  7 23:35:03 2027 GMT
        Subject: CN=C75DAFF77E15EA2B87689960EC796784CEE06CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:7c:49:1b:a9:8e:91:95:8c:c6:77:29:67:
                    9a:a3:13:db:bf:b7:e5:9c:8e:bc:b9:e3:69:41:a6:
                    5f:b3:7d:9b:54:5a:c2:59:15:74:84:06:f0:5a:1b:
                    bb:7e:3f:62:13:0d:39:8a:b3:5b:cb:62:ef:ec:6a:
                    ed:98:dd:1e:6e:cf:fb:34:b1:23:fb:4d:f3:96:0b:
                    07:04:02:dc:2c:7d:1a:82:c2:76:11:a2:f9:e7:31:
                    66:e1:6a:0a:b6:8e:b5:7a:11:68:39:0f:39:7c:9e:
                    d8:66:11:d6:b5:93:bd:67:2c:61:e7:67:1a:1c:f7:
                    81:74:a3:64:e7:d8:ac:10:78:b1:6a:8c:19:74:f3:
                    02:ec:50:cc:56:57:0a:ec:bc:3b:e1:08:5b:c7:2b:
                    4f:40:c4:69:c7:f7:d6:aa:ef:c0:22:f8:2e:51:3c:
                    56:29:13:db:f2:80:bd:16:ee:e5:3c:8e:48:3c:f7:
                    39:97:7f:6d:f2:20:a9:bf:d4:e4:34:4d:ce:d7:c7:
                    f7:c4:19:48:0a:d7:54:83:fa:ae:3b:46:16:ff:51:
                    37:48:5d:0b:d6:0c:4e:2c:44:e3:e8:24:3a:21:38:
                    c2:8a:65:02:ec:0e:f4:5f:ff:f0:89:1e:bb:eb:72:
                    23:c5:f0:cd:b5:4f:e8:ce:bb:69:8a:15:2c:a3:1a:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5D:AF:F7:7E:15:EA:2B:87:68:99:60:EC:79:67:84:CE:E0:6C:B4
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3730303a3a2f34302d3430203d3e20323732383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:eb:1d:c6:4f:44:08:00:b6:81:7f:b2:5f:9f:c4:54:de:f7:
         c5:5a:fe:4a:f5:b5:3f:5b:38:54:35:81:39:6b:5b:e0:15:a1:
         5e:f7:bd:c0:1b:ee:84:6d:87:ff:42:c5:83:af:ff:5a:4e:94:
         5c:71:ed:52:11:db:8d:80:79:fd:0d:b3:a6:96:5e:76:97:4a:
         fb:aa:db:d4:56:da:40:f2:66:13:06:28:83:7e:8e:1f:a3:9d:
         1a:bc:67:10:01:78:2e:4c:a0:b6:cf:30:56:e4:fe:bb:e0:ac:
         36:31:10:fb:e5:4f:b7:81:79:3d:2c:9a:03:4b:33:2f:a9:31:
         29:fb:77:ea:66:32:68:63:e5:b5:bd:dc:f4:09:5e:02:2c:86:
         70:2d:fa:87:15:b0:17:65:9a:46:19:a6:20:1c:dc:b4:0f:4f:
         ca:b7:10:eb:ce:73:ca:87:4e:ac:6e:d1:3a:29:9d:74:63:5e:
         05:17:24:8e:5b:30:23:fd:5b:13:54:e5:e1:1a:e2:9b:2b:e3:
         98:40:a7:9b:4b:bc:a1:2a:24:5e:65:dc:5c:5c:2a:a6:16:e4:
         0d:5f:9d:f6:33:f6:5b:3f:40:85:72:d6:42:55:d1:e8:57:fb:
         74:55:1a:c2:0d:f3:02:92:af:fe:f5:03:9e:b2:5b:18:f9:3e:
         33:7b:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:32 2026 by rpki-client