Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/323830333a643731303a3a2f33322d3336203d3e20323732313036.roa
File:                     323830333a643731303a3a2f33322d3336203d3e20323732313036.roa (raw, json)
Hash identifier:          U0lUuEL0g/B3lG0zVzOkUhKibxLIx9J8wt3MTQc8Cew=
Subject key identifier:   25:5A:52:EB:CE:B8:75:19:A0:5F:31:00:4E:98:6A:F5:81:4A:58:D0
Certificate issuer:       /CN=0870918DC6A57FC7622CD11B09C392EFDBB3E4B1
Certificate serial:       21227FBF29CAC747B777E45273849E0ABA684690
Authority key identifier: 08:70:91:8D:C6:A5:7F:C7:62:2C:D1:1B:09:C3:92:EF:DB:B3:E4:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/323830333a643731303a3a2f33322d3336203d3e20323732313036.roa
Signing time:             Thu 30 Jul 2026 02:19:16 +0000
ROA not before:           Thu 30 Jul 2026 02:14:16 +0000
ROA not after:            Thu 29 Jul 2027 02:19:16 +0000
asID:                     272106
IP address blocks:        2803:d710::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Sep 2026 18:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:22:7f:bf:29:ca:c7:47:b7:77:e4:52:73:84:9e:0a:ba:68:46:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0870918DC6A57FC7622CD11B09C392EFDBB3E4B1
        Validity
            Not Before: Jul 30 02:14:16 2026 GMT
            Not After : Jul 29 02:19:16 2027 GMT
        Subject: CN=255A52EBCEB87519A05F31004E986AF5814A58D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:c6:2a:2e:5e:41:16:82:c0:be:9e:c6:01:
                    6a:e9:29:3e:bf:ee:86:fb:1c:42:81:c4:72:1a:fb:
                    43:45:00:90:6d:4c:b0:3e:00:6a:b2:7b:e1:fd:3d:
                    9f:5c:2e:d1:8b:d9:2f:fe:0f:03:98:bd:3c:f6:c7:
                    76:c2:37:19:d7:a7:bc:9d:7c:a8:8b:06:e7:7d:e2:
                    7c:1f:3e:22:b9:e6:e7:03:1a:2b:0b:9e:b3:b2:4a:
                    75:8c:17:0f:8d:57:2f:5b:9d:2a:91:38:4e:5f:6b:
                    9f:6b:d4:72:94:eb:16:72:46:7f:bb:a6:c1:81:de:
                    ef:88:65:ac:e2:a0:f5:78:1b:31:bb:cd:c3:1c:24:
                    82:85:d2:c7:e5:ce:bb:fe:8e:df:7b:b9:07:a7:8b:
                    e9:d9:69:7f:5f:c8:66:6a:0b:4b:91:ef:6f:b4:59:
                    24:65:4d:6c:95:fb:36:d1:65:a2:7c:e9:3d:69:60:
                    4a:8b:52:a4:6e:8a:e2:09:24:9e:08:51:38:41:20:
                    1c:03:ce:72:71:82:99:56:bc:5c:3b:45:e8:8b:04:
                    f8:fd:09:27:fa:e2:0f:19:25:f1:75:fd:fd:c0:0c:
                    29:ce:29:99:08:03:63:57:83:69:e3:db:6a:45:57:
                    75:e1:9a:2d:8c:54:50:06:a7:6b:79:b1:0c:f9:91:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5A:52:EB:CE:B8:75:19:A0:5F:31:00:4E:98:6A:F5:81:4A:58:D0
            X509v3 Authority Key Identifier:
                keyid:08:70:91:8D:C6:A5:7F:C7:62:2C:D1:1B:09:C3:92:EF:DB:B3:E4:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/323830333a643731303a3a2f33322d3336203d3e20323732313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d710::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:5b:68:b0:93:e6:ec:a3:c7:8d:82:86:c0:57:fc:96:65:
         77:dd:8d:59:ab:e1:c8:c8:fb:fc:8d:c9:fd:31:77:31:0e:c9:
         e2:98:93:5a:2d:ad:38:2b:7d:92:91:11:7f:13:c5:37:72:4f:
         b7:21:e2:ba:be:22:24:01:7d:dc:84:33:c2:52:ad:10:e6:22:
         29:18:e0:e3:d3:d0:48:5a:2e:89:30:e5:76:2e:0b:3b:09:c1:
         64:f1:ff:a3:63:f9:28:f2:17:72:ac:08:e0:b3:2c:7c:ab:a0:
         86:d1:49:9f:58:f0:46:47:64:68:60:72:78:63:78:63:8c:c6:
         bb:17:49:ba:c7:44:f2:4d:81:e2:f9:ad:ba:c6:77:2f:c9:5d:
         55:88:ca:1b:3e:e0:49:f7:b9:5f:3d:78:ab:6a:52:be:c4:25:
         6e:cc:a3:29:5c:f2:4a:fa:31:e7:62:eb:d5:e6:12:22:75:89:
         1d:d2:94:39:56:27:4a:3b:c5:4d:11:fb:6d:1d:b5:50:ce:1e:
         73:39:f0:39:e2:1e:e6:fe:cb:73:9a:38:d2:f1:00:63:b4:e2:
         10:09:a7:63:2f:73:c6:4e:46:94:18:2a:ed:34:1e:e0:85:32:
         e2:fd:6e:74:b3:49:fa:cc:54:2a:e4:5b:b0:fc:98:68:50:12:
         e6:79:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:21:08 2026 by rpki-client