Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          E36juL74Uarc3GBHkYqWaX00VOzw4FExeubQ2eK03ns=
Subject key identifier:   4A:38:75:E5:08:FD:6F:6D:12:28:C3:BB:A7:E4:93:C0:8F:42:0E:68
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       395BF3DC69393D07B42EDE634B1108E338224197
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 24 Oct 2026 01:43:09 +0000
ROA not before:           Sat 24 Oct 2026 01:38:09 +0000
ROA not after:            Sat 23 Oct 2027 01:43:09 +0000
asID:                     273123
IP address blocks:        2803:450:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5b:f3:dc:69:39:3d:07:b4:2e:de:63:4b:11:08:e3:38:22:41:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Oct 24 01:38:09 2026 GMT
            Not After : Oct 23 01:43:09 2027 GMT
        Subject: CN=4A3875E508FD6F6D1228C3BBA7E493C08F420E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:7c:09:17:23:05:28:46:2f:0a:96:a8:68:
                    d0:b2:f0:f5:c8:9b:ff:df:35:ee:1e:34:2c:06:26:
                    0e:e1:5e:61:47:18:21:39:25:bd:6b:1a:9f:1d:9c:
                    0e:10:d9:30:73:2e:52:7d:a2:a9:9e:08:10:28:a4:
                    8f:7b:45:93:87:bc:23:00:62:3b:04:0b:1c:fa:56:
                    64:bf:b7:9e:c0:4f:aa:d6:70:e5:57:c5:85:e8:31:
                    67:37:96:11:04:52:d7:5a:4e:fd:1e:2b:c6:91:45:
                    7e:07:b1:af:16:8e:e0:a3:16:fe:9f:64:dd:71:60:
                    57:ef:a4:5f:6e:06:0c:5c:0f:9d:e8:f7:3e:d1:fa:
                    d7:7f:4c:04:71:14:5d:dd:a1:3e:3d:7d:23:fd:19:
                    31:b2:d2:28:3c:b3:12:31:29:64:c7:b9:75:11:3d:
                    90:90:0e:29:01:ec:07:e9:bf:0f:68:c4:dc:5f:b4:
                    cf:a8:ca:68:b4:3e:4c:44:1d:9b:2e:95:49:a1:7a:
                    9d:03:02:64:4c:04:6f:4f:3b:4a:ee:f4:3f:f9:4a:
                    0d:b9:b9:3f:85:05:26:0b:37:2c:fb:c6:39:a5:7f:
                    fd:ef:b9:4f:93:89:06:fc:b9:09:cb:44:9e:5d:72:
                    ca:23:37:06:98:7a:a7:d9:70:f9:10:b7:5f:c6:39:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:38:75:E5:08:FD:6F:6D:12:28:C3:BB:A7:E4:93:C0:8F:42:0E:68
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:45:cf:77:39:cf:99:83:cf:cd:d3:c4:14:24:31:b7:99:19:
         1e:56:61:9c:98:82:f6:df:87:cc:5d:a1:8e:e2:29:74:f0:fd:
         85:f7:0d:6e:0d:01:09:dc:21:98:8d:40:20:d7:4a:d3:cb:7d:
         86:e0:57:2f:cf:78:f8:78:d4:c5:5c:23:d2:cf:1b:61:32:0a:
         c0:fc:25:40:39:cc:06:67:a5:39:ae:fd:bd:52:48:db:53:3b:
         66:64:95:9f:fd:1f:3c:91:d5:43:fa:58:a3:ee:ec:1d:2f:27:
         ca:5d:f1:08:92:dd:1a:c7:61:aa:ce:9c:83:7d:52:0c:9c:70:
         0f:7f:3a:6e:81:b6:31:67:2e:c9:ae:11:8d:3c:ed:1d:af:2d:
         d1:09:91:22:46:47:08:9e:68:2a:53:01:92:ac:5a:10:20:07:
         7d:ab:49:91:1a:a6:e2:85:a7:db:42:3b:aa:e6:35:e4:b1:f1:
         b2:33:ee:9e:85:b6:b9:d8:7c:b8:56:15:08:c1:34:eb:6d:9d:
         c9:de:e1:fe:e4:d1:7d:d6:07:9c:a9:26:f2:f2:34:13:73:b7:
         6a:55:8a:71:90:9b:6b:75:ad:89:67:80:1b:c8:46:1a:02:ab:
         cc:ee:c5:94:49:ea:b9:12:13:0e:b0:5e:da:bd:a2:23:27:d1:
         da:9f:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:16:48 2026 by rpki-client