Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030393a3a2f34382d3438203d3e20323733313132.roa
File:                     323830333a623065303a373030393a3a2f34382d3438203d3e20323733313132.roa (raw, json)
Hash identifier:          znAXfNjBdcHfdUmCJ2QqrFKFGJP6mQ0RDXCidNkFAYc=
Subject key identifier:   9B:3F:AF:7B:C6:81:7C:4C:02:DC:E3:DA:A4:5E:87:E6:06:11:21:8C
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       36A52EBD443799B7B8951F1D5783873776907748
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030393a3a2f34382d3438203d3e20323733313132.roa
Signing time:             Thu 27 Aug 2026 23:20:00 +0000
ROA not before:           Thu 27 Aug 2026 23:15:00 +0000
ROA not after:            Thu 26 Aug 2027 23:20:00 +0000
asID:                     273112
IP address blocks:        2803:b0e0:7009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 02:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a5:2e:bd:44:37:99:b7:b8:95:1f:1d:57:83:87:37:76:90:77:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Aug 27 23:15:00 2026 GMT
            Not After : Aug 26 23:20:00 2027 GMT
        Subject: CN=9B3FAF7BC6817C4C02DCE3DAA45E87E60611218C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:5d:a7:76:17:da:ee:28:7f:a5:12:08:92:
                    ca:ff:33:99:10:fd:ec:fb:3f:71:55:b1:37:94:14:
                    51:f1:a4:f7:9d:17:e6:f5:e2:2f:28:c8:ba:46:aa:
                    41:75:66:3b:87:0e:90:44:d5:9b:25:4e:c4:31:eb:
                    61:27:06:88:b8:41:33:58:67:b9:e4:0c:fd:56:cd:
                    54:18:11:b3:e2:20:f7:69:50:e5:88:99:51:36:74:
                    ee:ac:28:0b:2b:85:e9:37:87:93:68:f8:d7:75:c6:
                    41:22:ae:11:76:1b:de:7f:fd:b4:92:31:16:bf:46:
                    88:d5:30:5f:ef:0f:1f:95:4e:68:df:08:f0:b1:47:
                    f7:d0:65:cb:a4:51:a3:c9:a0:21:b5:c0:d2:41:e0:
                    f8:1e:32:41:46:9d:1a:6b:8e:65:59:00:bf:cf:4b:
                    90:2c:fc:a2:c6:06:29:f9:17:f4:92:05:67:9a:9b:
                    55:02:06:5f:7a:27:d6:d4:39:31:92:36:11:16:b8:
                    95:17:b9:b1:12:76:cc:66:75:82:90:55:22:86:00:
                    3d:67:8f:0c:ee:24:c5:c8:05:8a:0f:64:6d:d9:b4:
                    2f:db:31:4f:a2:87:06:4c:4b:6a:76:3f:a0:9a:11:
                    1a:01:fd:31:86:b7:ad:91:13:0b:f6:ce:fa:7c:fd:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3F:AF:7B:C6:81:7C:4C:02:DC:E3:DA:A4:5E:87:E6:06:11:21:8C
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030393a3a2f34382d3438203d3e20323733313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:7009::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:19:a8:70:a9:d5:f1:5c:30:77:34:17:18:67:83:12:ba:40:
         60:c4:1e:3e:1d:9e:11:5f:14:78:49:a5:f0:74:ba:6c:91:d0:
         b6:96:7d:1e:0f:ac:8b:2d:09:9c:5c:74:82:f6:5b:51:cd:a7:
         af:01:37:f4:dd:ba:b3:54:61:f2:b3:e5:a8:be:09:01:3c:19:
         60:84:b3:e4:4d:9a:b1:cd:a1:b7:0b:81:9f:42:21:af:1d:ef:
         7c:bd:6b:2f:22:07:3e:b6:71:a8:2b:13:bf:c1:ea:9c:59:7d:
         75:a2:72:6e:ca:c2:03:f5:e3:40:f8:4c:84:db:fd:cb:8d:2e:
         22:3f:99:b5:7e:dc:0b:74:12:2b:52:bf:67:6b:0c:ff:e5:db:
         80:1b:ff:b6:e4:00:c0:f9:26:fe:07:14:65:25:a8:76:51:3b:
         85:ea:80:ad:e4:46:09:2b:6a:a5:30:f4:26:b8:e9:12:dd:8c:
         e3:e1:ab:19:cf:42:7c:20:72:1a:b2:35:c1:28:54:51:0c:f3:
         85:70:b8:c0:0c:a8:f3:b7:f8:60:60:fc:f6:e7:08:67:28:f4:
         d9:5f:3d:bd:29:67:24:a8:5e:a7:64:e8:dc:0a:92:f6:ca:da:
         84:01:66:3b:5d:52:1a:ef:41:a9:fc:c4:59:55:4b:14:2a:00:
         64:9f:f3:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:44 2026 by rpki-client