Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f34382d3438203d3e20323637373938.roa
File:                     323830333a336661303a3a2f34382d3438203d3e20323637373938.roa (raw, json)
Hash identifier:          26tUYYywPvGtPFRYOhxnjlmg2gmna7dVyJ/FZFTr6UQ=
Subject key identifier:   0C:E1:E8:CE:F9:77:4B:EB:0F:C9:48:25:32:3E:54:BB:9F:2C:58:C1
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       4A9127424C0CEC4E8E2E21FB6BCFA84532FB8AA7
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f34382d3438203d3e20323637373938.roa
Signing time:             Wed 12 Aug 2026 17:25:12 +0000
ROA not before:           Wed 12 Aug 2026 17:20:12 +0000
ROA not after:            Wed 11 Aug 2027 17:25:12 +0000
asID:                     267798
IP address blocks:        2803:3fa0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:91:27:42:4c:0c:ec:4e:8e:2e:21:fb:6b:cf:a8:45:32:fb:8a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Aug 12 17:20:12 2026 GMT
            Not After : Aug 11 17:25:12 2027 GMT
        Subject: CN=0CE1E8CEF9774BEB0FC94825323E54BB9F2C58C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:6f:b8:f7:e2:d4:b2:bc:2c:c8:62:e6:a9:
                    d6:74:e3:a2:02:0c:bd:9e:ec:1f:0a:bb:03:7f:07:
                    3e:5c:72:9a:27:8a:d1:35:86:c3:7d:df:e6:8a:2d:
                    43:13:e0:ee:e8:bd:fa:ec:df:58:d1:f1:a5:8e:da:
                    3a:53:91:4b:01:0b:f0:be:da:4b:37:9d:4b:b0:c3:
                    9a:e8:e6:22:8a:ea:bc:7d:1a:b7:c5:11:42:a8:8b:
                    1a:94:aa:96:58:ab:c3:eb:8e:9b:71:80:41:a4:85:
                    a7:f2:be:af:52:a0:7c:7c:e9:72:18:62:ec:e7:05:
                    1c:94:f9:71:ff:d8:3f:00:81:5c:97:8b:80:65:8a:
                    2f:5e:b1:df:e8:b5:89:1f:e4:31:06:d5:0a:d1:b2:
                    ce:9b:c0:6e:48:20:f8:39:1f:9c:64:d0:83:f8:0b:
                    8b:f1:0f:e5:5c:ef:04:b0:77:9c:15:7e:e7:24:a9:
                    e9:85:ed:d5:45:c2:90:5d:27:73:48:18:8b:48:e5:
                    20:5b:39:c3:37:22:98:b2:0d:88:01:14:5b:96:a1:
                    b6:b9:1a:c8:7d:2b:7c:d5:2e:59:0d:fd:f2:f1:21:
                    b4:8c:13:7f:f4:55:1e:0e:25:6e:9b:34:48:7b:7e:
                    42:bb:9e:b7:77:f0:98:9c:94:9c:40:d8:cb:50:fb:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:E8:CE:F9:77:4B:EB:0F:C9:48:25:32:3E:54:BB:9F:2C:58:C1
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f34382d3438203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3fa0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:85:cd:f3:0b:78:e2:eb:5c:ea:d1:76:58:8a:4c:b1:a0:
         8d:f7:d9:33:e3:36:8c:51:ce:06:bc:d8:cd:5a:88:7f:4a:71:
         20:cf:a2:cd:73:cf:3c:cc:f6:22:55:1c:5d:fc:81:47:af:e0:
         b4:ad:0f:a6:85:0f:7d:bc:0d:3a:d0:8e:34:dd:99:b8:9f:dd:
         7a:cf:a3:43:be:cb:a1:cf:0e:ec:e5:6b:2e:0e:e2:bd:17:19:
         ef:1d:ee:f0:5a:03:89:44:1d:4c:52:bb:5b:75:d1:8b:b9:b8:
         81:c0:3e:b9:00:b2:21:8d:56:94:03:14:00:15:11:d1:23:f3:
         4c:15:f4:c9:bb:54:17:50:4e:fa:0e:b6:4b:64:21:ca:ba:3d:
         ec:8a:f9:ab:cf:5f:f5:6d:5e:18:50:11:03:0a:85:5f:90:94:
         a4:6c:da:34:1d:44:2b:ab:a7:b7:11:73:fc:f5:97:2a:d7:70:
         cb:a8:14:1e:b1:ab:fe:22:29:63:8d:59:d4:ed:e3:42:ac:a6:
         da:64:f2:7c:66:c8:3c:3f:90:c4:b0:b9:43:4b:49:fa:60:87:
         b0:91:11:55:98:e2:76:af:85:6e:2f:aa:94:55:df:ae:55:87:
         91:c7:17:61:54:50:f0:7b:d2:fc:0e:dd:32:73:95:ae:fa:3b:
         68:4c:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:32:53 2026 by rpki-client