Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a3138303a3a2f33322d3332203d3e203238303336.roa
File:                     323830333a3138303a3a2f33322d3332203d3e203238303336.roa (raw, json)
Hash identifier:          RFgc6/3BVlVWxUUea1X6YjqQAAeudPfAKrsTpFy8Ezk=
Subject key identifier:   56:79:76:61:EE:FD:63:2D:D0:AA:C1:B3:C0:EE:CD:59:F5:04:2A:EA
Certificate issuer:       /CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Certificate serial:       0FEEA79F44DF038672A78ECA1AEE55A4E625BE53
Authority key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a3138303a3a2f33322d3332203d3e203238303336.roa
Signing time:             Wed 21 Oct 2026 18:42:14 +0000
ROA not before:           Wed 21 Oct 2026 18:37:14 +0000
ROA not after:            Wed 20 Oct 2027 18:42:14 +0000
asID:                     28036
IP address blocks:        2803:180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ee:a7:9f:44:df:03:86:72:a7:8e:ca:1a:ee:55:a4:e6:25:be:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
        Validity
            Not Before: Oct 21 18:37:14 2026 GMT
            Not After : Oct 20 18:42:14 2027 GMT
        Subject: CN=56797661EEFD632DD0AAC1B3C0EECD59F5042AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:d3:ca:c5:2a:e2:22:4f:56:d7:5a:ba:2f:
                    9a:fb:a6:c4:78:79:03:47:02:87:1f:5f:14:c5:37:
                    ab:00:e1:18:df:56:38:73:28:20:e6:20:5d:9b:5d:
                    2c:a8:b1:fb:97:b1:b8:c0:33:f1:1a:46:16:42:0e:
                    ce:0f:5f:5e:ce:91:d5:c8:7e:aa:6b:91:3c:1b:11:
                    21:b7:72:8b:2f:5a:dd:55:d1:5b:b4:84:ab:4b:c4:
                    cc:57:27:9c:99:df:7f:0d:16:a1:ea:a4:ab:59:14:
                    aa:d9:50:10:50:3d:03:a9:cc:15:a3:be:5f:e2:5b:
                    4a:2e:b7:5c:fd:b2:01:0a:1e:3c:e4:71:ad:f8:c6:
                    ea:24:6a:39:4b:92:5c:b2:96:36:bd:87:89:b2:36:
                    46:9e:e7:ad:3c:31:05:1e:a0:af:c3:d4:d4:64:72:
                    cc:70:d8:4f:ae:a5:08:39:22:b7:66:19:7e:2d:f4:
                    91:f2:b8:5c:19:79:75:69:48:06:41:c9:be:36:a7:
                    36:70:6c:0e:f0:3c:72:5b:ec:90:80:61:d0:10:1a:
                    be:ff:a8:c1:98:72:cd:f2:7e:48:42:6d:cc:19:dc:
                    7e:d5:a1:c9:05:4a:11:93:c1:42:17:d7:4f:66:89:
                    23:71:db:f1:6c:e1:b2:a6:0e:43:ea:c6:46:d1:d1:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:76:61:EE:FD:63:2D:D0:AA:C1:B3:C0:EE:CD:59:F5:04:2A:EA
            X509v3 Authority Key Identifier:
                keyid:9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a3138303a3a2f33322d3332203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:180::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:fc:a5:17:7a:1d:25:ec:37:23:32:a1:87:5e:23:ea:2c:e7:
         49:45:7f:d5:4e:69:13:79:b6:12:66:d1:11:af:c5:70:b2:0b:
         d0:a7:11:dc:ae:64:48:53:54:88:48:9f:d8:e9:4b:74:fb:57:
         00:76:d5:d0:89:77:50:8f:99:26:23:92:16:a2:51:44:42:4f:
         40:0d:35:29:eb:f7:8a:eb:89:aa:76:29:d5:2c:55:59:18:df:
         4d:bf:aa:ad:4d:1b:0b:a4:70:93:a8:65:91:3d:77:28:3d:9e:
         1a:1f:0f:7c:41:4c:8c:ba:e8:8d:66:77:43:b5:d1:67:6b:94:
         91:52:1e:88:2e:ce:17:33:63:97:be:bf:02:ab:65:66:62:5e:
         d0:0f:ad:01:02:17:ad:b3:05:d5:35:a1:b4:ea:bc:b5:7c:6f:
         a5:56:e1:3f:69:da:68:71:a9:7a:b9:e3:e2:5d:11:02:10:2d:
         d7:87:18:ea:1a:95:9a:ca:7d:2f:bf:5b:17:6e:b8:68:02:fe:
         80:f4:07:79:ae:da:70:71:d7:52:4d:04:4a:4b:cf:f5:c2:5a:
         c6:89:84:56:38:7e:1c:6b:63:e6:c4:69:db:15:4a:7b:88:a5:
         d7:7c:c2:3c:62:74:87:7c:20:ef:fa:09:ae:ea:2e:91:5d:bb:
         20:ff:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:12:14 2026 by rpki-client