Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3438203d3e20323639393238.roa
File:                     323830333a333265303a3a2f33322d3438203d3e20323639393238.roa (raw, json)
Hash identifier:          f/MLPKL/yKgdINWeTKBQrSkNDq7TjN8SggiRqsT1fhM=
Subject key identifier:   B5:03:61:87:C6:57:D6:0C:64:B6:FF:B2:6A:C9:97:65:1C:40:7A:68
Certificate issuer:       /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
Certificate serial:       2D1624D75AAA80430321318CC5E113997822E8B0
Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3438203d3e20323639393238.roa
Signing time:             Thu 01 Oct 2026 13:37:38 +0000
ROA not before:           Thu 01 Oct 2026 13:32:38 +0000
ROA not after:            Thu 30 Sep 2027 13:37:38 +0000
asID:                     269928
IP address blocks:        2803:32e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:16:24:d7:5a:aa:80:43:03:21:31:8c:c5:e1:13:99:78:22:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
        Validity
            Not Before: Oct  1 13:32:38 2026 GMT
            Not After : Sep 30 13:37:38 2027 GMT
        Subject: CN=B5036187C657D60C64B6FFB26AC997651C407A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:3f:3f:74:eb:23:f2:96:9a:b7:7e:88:5d:
                    3a:5e:e2:7f:15:c9:cc:0b:50:8e:33:7a:99:40:b6:
                    62:14:7e:f8:9f:46:d2:d6:e4:a5:c0:83:f3:a4:ba:
                    de:61:ba:f9:3a:fe:00:b6:a7:2d:7a:4e:e4:d6:01:
                    ff:46:46:c8:e1:d0:7f:55:29:6c:28:81:73:3d:82:
                    f5:01:fb:2e:b0:3d:1a:56:f5:7d:d4:f4:bf:ea:0c:
                    6a:8b:f4:06:03:f9:38:e8:ec:a4:74:aa:ab:f4:87:
                    83:3f:ae:f0:3f:ca:3c:8c:5c:c9:e7:e8:f3:02:bf:
                    ab:e1:db:ad:21:c8:cc:88:55:a2:44:fd:79:8f:dd:
                    04:c2:c9:ef:79:a2:de:f8:fc:94:67:13:47:dc:8c:
                    06:27:29:f1:8c:19:f8:e3:16:18:60:7e:36:62:cf:
                    d9:0f:90:64:41:d3:5e:78:8b:0c:fd:85:1c:f1:91:
                    d1:69:87:30:55:4d:8f:00:82:8b:ef:b3:0e:8f:d1:
                    a0:5a:b9:af:0f:7d:cf:e8:c4:bd:55:fe:41:af:0e:
                    35:2a:72:51:06:3e:4e:cb:27:f9:5a:c9:0c:ef:34:
                    85:19:e7:14:1a:92:a5:0d:21:18:8b:88:58:5a:a1:
                    52:c2:b7:ce:9e:7d:c3:ba:d0:a8:a4:55:08:eb:f4:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:03:61:87:C6:57:D6:0C:64:B6:FF:B2:6A:C9:97:65:1C:40:7A:68
            X509v3 Authority Key Identifier:
                keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3438203d3e20323639393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:2f:27:9b:83:3d:31:1b:3b:c0:f6:2a:09:31:20:e7:e6:
         d2:48:2f:27:69:6f:d7:3b:b2:ed:03:98:9f:ee:b5:17:60:0b:
         06:c2:69:02:80:91:55:8f:9e:8e:9d:d4:db:11:ef:67:f1:13:
         60:45:71:71:e8:4d:cb:eb:02:8d:39:94:39:92:fe:4c:63:38:
         70:3b:30:ca:b3:0f:8a:02:c1:97:2d:04:44:08:e9:31:af:26:
         3d:fd:5b:01:08:86:5b:39:ac:ae:1c:6b:3a:db:5b:75:66:57:
         7e:33:65:6a:88:fc:a9:03:24:ea:0c:fd:07:5c:49:02:15:69:
         37:08:e9:3c:58:4e:de:07:62:d2:3d:9f:38:c8:0e:b1:0f:c9:
         3f:20:08:33:cc:b9:0c:0c:7b:6f:2d:c5:2b:75:d8:e8:35:c7:
         47:34:11:59:c0:c8:78:88:f4:a0:6c:06:6a:a6:7a:2f:98:cc:
         3d:74:3e:95:ed:3e:e8:5e:d0:ad:ae:b9:55:25:0f:c6:a4:b5:
         85:d6:28:9b:86:a4:27:0a:02:21:f3:44:b3:ec:64:e7:35:57:
         aa:cd:e6:01:73:5a:ce:de:99:d5:91:00:4c:14:2e:8b:30:87:
         f5:fe:b2:a0:f4:e5:28:9d:41:33:3a:8a:6e:bf:33:01:d1:e1:
         92:0d:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:30:00 2026 by rpki-client