Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a3a2f33322d3634203d3e20323733303837.roa
File:                     323830333a626639303a3a2f33322d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          WxBRMasyIwoGvhJY3t3ODhuaRYPpQIZzO5jy3acMx8Y=
Subject key identifier:   3F:AB:AF:15:8D:DD:F6:39:EB:37:FB:2D:9D:1C:D8:FD:78:D4:69:8C
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       1C351BFAD8B03F87803323ABD84F29CD60413AE8
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a3a2f33322d3634203d3e20323733303837.roa
Signing time:             Sat 15 Aug 2026 07:25:32 +0000
ROA not before:           Sat 15 Aug 2026 07:20:32 +0000
ROA not after:            Sat 14 Aug 2027 07:25:32 +0000
asID:                     273087
IP address blocks:        2803:bf90::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:1b:fa:d8:b0:3f:87:80:33:23:ab:d8:4f:29:cd:60:41:3a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Aug 15 07:20:32 2026 GMT
            Not After : Aug 14 07:25:32 2027 GMT
        Subject: CN=3FABAF158DDDF639EB37FB2D9D1CD8FD78D4698C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:f4:e3:af:21:4d:97:05:b8:c9:ae:d9:cb:
                    a2:89:c1:14:2f:8d:73:6b:e8:df:24:94:6b:b3:2c:
                    0a:9e:7f:ee:12:77:5c:4e:2c:17:ed:a1:b5:c3:bf:
                    88:d6:2d:f5:0d:cb:20:ff:4a:d7:23:4e:6d:8f:32:
                    b2:bd:63:38:8f:37:e2:95:95:49:cd:5f:74:ba:d9:
                    67:e8:54:1e:2c:76:f0:c7:88:1b:e7:4b:9f:18:f6:
                    bb:c6:b0:35:d3:ee:7e:72:cf:37:c6:3b:ec:af:22:
                    f7:53:cf:99:4d:4b:e8:57:e8:e8:c2:3c:70:e0:20:
                    f3:a3:31:fb:97:3d:17:8d:fb:18:58:00:e4:b9:cf:
                    9c:81:6f:f6:93:1e:dd:06:77:75:bf:62:cf:b5:24:
                    cc:f7:d0:0b:0f:5c:c3:7f:7c:b0:46:fc:d4:6f:f9:
                    fe:7e:10:7e:7d:7b:8b:15:d9:c7:30:6d:8b:51:8f:
                    92:21:83:00:cc:3b:2f:97:84:64:b5:97:29:5d:87:
                    25:97:73:da:2e:e5:40:f4:eb:e8:32:6e:07:3f:61:
                    5e:83:09:33:11:2d:11:2e:ac:9e:0a:f8:0d:97:de:
                    d8:9d:cb:e5:1f:ed:7b:88:5c:8a:fa:19:9c:ca:60:
                    3e:48:77:4d:19:82:8f:32:81:6b:52:f1:8f:b9:46:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:AF:15:8D:DD:F6:39:EB:37:FB:2D:9D:1C:D8:FD:78:D4:69:8C
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a3a2f33322d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:03:f6:4f:33:cb:8b:9f:6c:9c:9e:53:ee:1b:94:5f:b4:
         1c:ee:59:b4:f5:44:73:dc:2f:e9:83:48:c6:0f:b6:26:49:7e:
         6f:4c:a9:48:2f:5a:3b:5a:4b:e3:f9:81:12:bc:8c:5c:16:52:
         11:7c:0c:d6:94:7f:e6:05:af:1f:55:3c:4b:5b:48:31:2e:f9:
         70:62:be:f5:42:cc:91:64:f4:92:7d:a3:51:db:c0:12:c3:0b:
         62:d9:f7:89:97:a0:1f:9b:74:1a:21:a7:ca:b8:53:4c:95:e4:
         4d:3e:45:68:e4:1d:d5:ef:04:ff:ff:58:17:09:86:b5:6e:2c:
         b5:64:01:56:31:c1:56:56:2f:44:79:70:f5:6f:1c:3f:82:bf:
         1f:32:21:2e:07:97:9b:0a:ad:79:90:ff:38:65:f1:d5:ca:4b:
         f5:31:59:70:db:d7:0d:9f:2a:1b:f0:c8:62:a9:2c:d1:7f:55:
         1d:7b:7c:1b:f8:1b:33:b7:e1:92:98:b0:2d:9e:94:99:39:75:
         b1:2f:d7:c3:4c:3c:1a:c2:10:6d:32:9e:c0:91:86:91:00:53:
         a5:70:19:fb:59:df:c0:5d:a1:0a:b1:71:5a:99:11:88:9d:43:
         9c:0f:cc:0c:14:fb:7b:8c:10:c7:f1:16:b6:30:1f:6e:d5:39:
         2a:50:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:26:28 2026 by rpki-client