Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/323830333a363838303a3a2f33322d3438203d3e203532343932.roa
File:                     323830333a363838303a3a2f33322d3438203d3e203532343932.roa (raw, json)
Hash identifier:          sXRtY5aLzH2Pt/oIVWZdY1cx6T82pIQpA4IWIUYR8Qc=
Subject key identifier:   4A:00:9B:1D:BD:57:34:27:A8:D2:C0:20:B8:68:B5:F5:C6:AE:C0:62
Certificate issuer:       /CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
Certificate serial:       3AC0733DFA9511BDAE96B5F5810008277887BBB7
Authority key identifier: 0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/323830333a363838303a3a2f33322d3438203d3e203532343932.roa
Signing time:             Fri 28 Aug 2026 02:32:42 +0000
ROA not before:           Fri 28 Aug 2026 02:27:42 +0000
ROA not after:            Fri 27 Aug 2027 02:32:42 +0000
asID:                     52492
IP address blocks:        2803:6880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c0:73:3d:fa:95:11:bd:ae:96:b5:f5:81:00:08:27:78:87:bb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77
        Validity
            Not Before: Aug 28 02:27:42 2026 GMT
            Not After : Aug 27 02:32:42 2027 GMT
        Subject: CN=4A009B1DBD573427A8D2C020B868B5F5C6AEC062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:e3:93:f7:ac:68:7f:08:56:36:89:07:4a:
                    bf:fd:81:d1:a8:b0:17:ba:5e:df:ab:df:96:40:31:
                    2c:2d:48:a3:7b:f0:4c:b0:0a:97:3d:d4:a1:f9:18:
                    f5:61:a5:27:ab:d2:a9:16:ac:ab:81:b4:5a:a1:87:
                    53:21:02:80:36:13:54:e1:66:22:df:ea:81:0d:b2:
                    5c:84:4c:fe:bb:31:cb:89:8e:4d:62:24:fa:ad:13:
                    03:98:dc:51:0a:e5:c9:6d:dd:44:4b:8d:7e:99:ba:
                    cd:c6:49:57:83:b4:22:84:a4:81:2c:19:c6:f9:32:
                    cf:05:5b:a6:3b:ae:31:c9:0e:ce:69:e4:bb:c4:ac:
                    38:c3:96:b2:e9:6f:cf:e2:4c:27:04:0c:1b:a6:46:
                    ad:c3:ae:0f:cc:28:7d:34:a4:f0:50:ef:1a:02:5f:
                    05:57:7c:ad:3e:b3:07:65:a9:99:a7:2f:30:09:87:
                    1e:49:85:75:9a:b8:28:a5:cf:8b:7b:d1:9e:c0:fa:
                    77:b7:ad:0f:38:c6:80:77:56:4c:0f:d4:fc:f8:f0:
                    c5:21:a8:f1:39:60:d3:5b:da:41:b5:00:a2:0c:1a:
                    5c:dd:ee:ce:cd:c1:99:66:dc:68:0a:47:e6:45:49:
                    54:e8:3c:06:72:0e:a7:8b:04:6b:de:c4:8e:f3:1f:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:00:9B:1D:BD:57:34:27:A8:D2:C0:20:B8:68:B5:F5:C6:AE:C0:62
            X509v3 Authority Key Identifier:
                keyid:0E:79:1A:A3:FE:9C:5A:32:98:1B:20:B7:5D:6B:2B:E2:A6:A8:3A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E791AA3FE9C5A32981B20B75D6B2BE2A6A83A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F98EB15D31B96BDE12ECA9001F058481D9023BD57B0205F22977FDD10554B78/0/323830333a363838303a3a2f33322d3438203d3e203532343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6880::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:e9:3d:7b:99:72:12:ec:ed:c8:27:86:0c:a1:f5:17:9d:
         17:c6:c1:71:58:d5:f7:ee:63:34:bc:7c:0f:97:0d:d6:8e:4d:
         54:55:22:10:97:18:0b:f2:5b:48:44:b1:7c:90:d7:72:f2:11:
         e8:52:3e:4e:d3:2c:83:24:00:2a:01:c7:be:8e:02:81:38:91:
         22:51:21:8b:eb:5b:19:4a:9d:3b:22:01:16:88:3c:22:97:93:
         e6:48:98:2a:70:df:e8:af:15:ea:da:05:42:fc:8f:43:52:6f:
         23:96:8e:2f:35:91:ac:e0:82:30:e1:33:6a:47:fe:10:f7:0f:
         ce:d6:0d:71:ee:17:82:81:57:8f:74:2c:5f:23:81:3a:6a:7b:
         33:db:60:e5:32:a4:2f:81:c0:89:a1:1a:4d:2f:c0:f9:b2:43:
         72:c6:f5:d5:3b:d4:b7:5d:24:4e:5d:40:cd:30:af:35:87:3c:
         28:3f:c6:c4:8f:b9:83:47:2e:78:1c:e8:21:59:cd:eb:bf:e3:
         54:55:6d:5b:72:85:c9:8b:49:62:6d:7c:82:85:ac:a3:d2:be:
         2f:58:ee:99:d3:dd:99:6a:96:39:b6:56:d8:2d:e7:33:ae:e1:
         23:dd:f7:5d:6e:ee:36:c9:e7:59:e2:5e:7c:e5:5b:c8:a7:80:
         ab:2e:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:36:16 2026 by rpki-client