Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/323830333a343735303a3a2f33322d3332203d3e20323733393234.roa
File:                     323830333a343735303a3a2f33322d3332203d3e20323733393234.roa (raw, json)
Hash identifier:          3ePI3mT9c5/zOOAvHq4CtmJ4YtJ7rhOuCQ9x1h/fs4U=
Subject key identifier:   82:8B:E3:CF:70:F3:88:5B:46:AB:FD:E9:BA:18:5A:F4:A9:22:8D:61
Certificate issuer:       /CN=89976B433A37DA190882FA21516DFE276D7661D6
Certificate serial:       7138778534F60880605B242193BD864ED4D047B1
Authority key identifier: 89:97:6B:43:3A:37:DA:19:08:82:FA:21:51:6D:FE:27:6D:76:61:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89976B433A37DA190882FA21516DFE276D7661D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/323830333a343735303a3a2f33322d3332203d3e20323733393234.roa
Signing time:             Wed 02 Sep 2026 21:25:00 +0000
ROA not before:           Wed 02 Sep 2026 21:20:00 +0000
ROA not after:            Wed 01 Sep 2027 21:25:00 +0000
asID:                     273924
IP address blocks:        2803:4750::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/89976B433A37DA190882FA21516DFE276D7661D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/89976B433A37DA190882FA21516DFE276D7661D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89976B433A37DA190882FA21516DFE276D7661D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Sep 2026 15:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:38:77:85:34:f6:08:80:60:5b:24:21:93:bd:86:4e:d4:d0:47:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89976B433A37DA190882FA21516DFE276D7661D6
        Validity
            Not Before: Sep  2 21:20:00 2026 GMT
            Not After : Sep  1 21:25:00 2027 GMT
        Subject: CN=828BE3CF70F3885B46ABFDE9BA185AF4A9228D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:70:a2:27:c0:11:c9:26:c8:ed:e4:da:71:e3:
                    08:38:0d:84:c5:1f:ae:bb:73:8b:89:05:aa:fa:a6:
                    94:f8:3c:56:1b:b9:7d:aa:2f:c0:38:bf:d4:41:ff:
                    8a:91:07:fe:82:c1:a6:c5:c6:91:40:69:5a:d6:91:
                    65:4b:b8:35:aa:db:c2:00:76:47:24:49:77:5f:d5:
                    70:6e:de:c3:f8:61:df:12:60:f9:5b:a0:ed:ab:fd:
                    ce:51:b2:5c:e8:ba:98:cc:e4:fe:66:6b:8b:4f:3c:
                    2f:ee:50:ff:48:51:f4:ae:6b:93:6c:94:49:dc:ad:
                    da:ad:6c:b6:c4:fd:fb:1a:8e:f1:29:5d:f2:e3:3b:
                    b9:9c:0b:87:b3:f4:4d:83:90:38:cd:83:9d:64:dd:
                    d9:9e:21:2f:43:20:7f:9e:2b:74:3a:ba:a5:f9:63:
                    56:d0:81:07:d1:1c:11:3e:ae:a0:48:13:bc:0f:af:
                    42:1e:7a:95:8b:55:9f:9a:09:a5:b4:bb:00:52:0e:
                    9c:73:87:3d:af:d6:32:e4:36:2f:ce:ee:24:3d:ad:
                    42:df:ec:59:02:8a:59:0c:ab:f4:99:4d:01:6d:35:
                    05:ee:7f:99:2d:53:a3:1d:cc:8f:60:96:ac:fb:ea:
                    f3:fc:a7:6c:ee:6f:ba:5f:de:3e:5c:53:96:6a:c0:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8B:E3:CF:70:F3:88:5B:46:AB:FD:E9:BA:18:5A:F4:A9:22:8D:61
            X509v3 Authority Key Identifier:
                keyid:89:97:6B:43:3A:37:DA:19:08:82:FA:21:51:6D:FE:27:6D:76:61:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/89976B433A37DA190882FA21516DFE276D7661D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89976B433A37DA190882FA21516DFE276D7661D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/323830333a343735303a3a2f33322d3332203d3e20323733393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4750::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:fa:14:59:25:a0:fd:d6:5f:5d:cb:55:76:9c:8a:bc:a1:
         02:b4:c3:3f:43:86:13:44:2d:4e:86:ed:74:5e:05:30:e9:8f:
         ae:2e:62:47:79:3e:0b:32:59:47:6f:78:fa:56:63:c5:e8:27:
         ff:8d:59:4e:5a:00:e6:f1:9c:fd:3c:fd:79:24:cd:71:b8:af:
         5c:3f:79:b7:3d:fb:a0:1c:74:6a:58:56:b6:17:1d:3d:d8:12:
         5b:12:2d:a5:5f:4e:2b:5e:1c:15:70:a8:d3:fe:63:e0:c5:d7:
         3e:f8:72:78:2f:4b:c8:40:0b:00:79:c0:9c:01:fe:0a:6a:d8:
         97:85:ae:1f:ab:d9:c6:42:df:3b:d7:e3:e7:52:ed:c1:61:d2:
         f6:22:0d:69:05:2b:87:a1:09:50:4b:e4:f2:a0:9c:61:09:49:
         4d:9e:85:20:a8:7d:41:2f:69:25:00:1d:58:25:ed:9d:8a:f7:
         76:1d:79:6d:6b:7e:ee:33:67:46:97:f3:77:4f:69:7b:d1:a3:
         18:6e:23:6f:d6:28:59:80:b4:5d:9a:5e:3f:f5:47:8f:b9:7c:
         a4:5f:55:30:1a:48:1c:9d:19:14:92:b5:b6:ed:f5:b6:88:ba:
         6b:f6:b6:48:81:66:35:df:65:a7:a5:40:ae:de:c6:11:ae:4a:
         12:61:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:47:52 2026 by rpki-client