Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3a2f33322d3438203d3e20323733313233.roa
File:                     323830333a3435303a3a2f33322d3438203d3e20323733313233.roa (raw, json)
Hash identifier:          raiUw3lvJFdoypFfgubzP1Tz0ZjVRbdufAaHRnFV/iU=
Subject key identifier:   41:90:B9:F4:9E:03:7D:8D:90:AD:30:09:5D:94:3F:87:0D:0C:FF:DE
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       3D98925A206695914A663D842AB51A86CF55F954
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3a2f33322d3438203d3e20323733313233.roa
Signing time:             Tue 25 Aug 2026 19:26:29 +0000
ROA not before:           Tue 25 Aug 2026 19:21:29 +0000
ROA not after:            Tue 24 Aug 2027 19:26:29 +0000
asID:                     273123
IP address blocks:        2803:450::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 02:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:98:92:5a:20:66:95:91:4a:66:3d:84:2a:b5:1a:86:cf:55:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Aug 25 19:21:29 2026 GMT
            Not After : Aug 24 19:26:29 2027 GMT
        Subject: CN=4190B9F49E037D8D90AD30095D943F870D0CFFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:f1:a8:f9:af:a8:c1:1b:f9:5e:e5:6f:f6:
                    f5:26:1a:6b:0a:bf:b5:d4:ab:33:94:af:2d:6f:c7:
                    7d:50:59:b8:c8:b8:53:37:05:92:3a:48:4e:ef:ae:
                    ea:54:7c:8b:23:7a:9a:54:27:63:02:dc:31:97:2b:
                    1e:4c:71:3c:96:24:d3:03:2f:4e:0a:99:ec:fb:a3:
                    b1:0a:95:db:67:35:f1:b7:e4:20:56:cf:a7:54:43:
                    b9:e1:d1:3e:ad:22:89:11:fe:9d:53:7b:28:93:9f:
                    66:40:d1:5d:92:83:d5:72:ce:c5:69:92:bc:21:85:
                    bc:5d:16:40:08:22:3c:d6:fa:2a:71:95:c8:6a:e2:
                    99:70:61:b4:87:ce:5e:cd:fc:23:eb:e9:98:92:8c:
                    d9:ff:12:57:ce:96:d3:54:0a:a3:c2:03:60:d1:a0:
                    d7:b4:58:a1:ff:05:f3:2c:6d:4a:41:64:56:5a:85:
                    c8:70:8c:74:b0:f6:3a:16:d7:dc:65:31:19:81:35:
                    72:50:9b:09:f7:40:9d:19:cf:24:37:4d:68:37:de:
                    64:70:b8:a9:a4:07:9e:75:45:ee:8e:a5:ce:75:5d:
                    9c:41:1f:eb:f7:18:6b:0c:1d:5f:1b:41:71:0a:f2:
                    dc:bc:0d:f8:fb:60:e3:2c:79:e8:d8:61:1a:b0:c0:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:B9:F4:9E:03:7D:8D:90:AD:30:09:5D:94:3F:87:0D:0C:FF:DE
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3a2f33322d3438203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:2e:4e:46:c9:f0:83:2e:f3:25:de:74:10:1d:e4:40:56:51:
         e0:bc:aa:4d:f1:ee:6d:3f:c7:f5:18:e8:3d:62:ca:8a:86:7b:
         8f:95:a7:07:22:aa:e0:41:5d:19:e6:bf:21:22:75:d6:a8:8f:
         3c:ad:bc:7a:c9:25:fa:f9:e8:0b:6c:6d:8c:37:42:0d:4e:7d:
         b1:08:32:30:e7:59:37:c0:9f:54:93:02:39:e6:e2:c9:d9:7e:
         c4:e2:59:ae:14:96:d6:11:1d:c2:52:d0:52:44:e0:2e:08:98:
         54:d2:33:f8:c9:d2:3e:9b:25:4c:19:3a:4d:76:a4:d2:06:84:
         c6:85:67:75:67:5b:df:63:55:d5:5c:5f:58:c4:eb:06:71:cb:
         d2:5a:a4:e0:60:c0:86:f2:9f:fe:23:5b:62:26:71:46:b3:55:
         62:82:4a:1a:75:a4:5b:ec:90:ba:c7:55:94:28:cd:d8:2d:bb:
         c1:71:4c:34:ca:70:37:b1:00:df:e8:bd:d8:f2:7c:02:60:fd:
         7e:dc:e4:cc:98:07:91:d3:f2:b2:71:50:ca:cd:7f:94:fa:05:
         0c:bb:09:e9:63:f9:8c:3c:cb:a2:d3:a1:8f:63:a6:5e:e3:8e:
         df:00:4f:3c:dc:22:93:bb:f7:35:62:cc:d8:b5:6b:61:2a:5a:
         c4:51:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:21:07 2026 by rpki-client