Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/323830333a323335303a3a2f33322d3438203d3e20323733383836.roa
File:                     323830333a323335303a3a2f33322d3438203d3e20323733383836.roa (raw, json)
Hash identifier:          qbO+X4Y6wtgrGkhzpEnE8yCew0T3W9qScaqPJF/qNYA=
Subject key identifier:   8B:0A:B4:AC:DD:05:C7:6E:61:9D:94:63:49:47:AF:BB:28:2D:0C:A2
Certificate issuer:       /CN=AC842394CA1936A904B18308B26BDD9E35AB539C
Certificate serial:       6A28290E29D98F465943D6F04139400CE4120690
Authority key identifier: AC:84:23:94:CA:19:36:A9:04:B1:83:08:B2:6B:DD:9E:35:AB:53:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC842394CA1936A904B18308B26BDD9E35AB539C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/323830333a323335303a3a2f33322d3438203d3e20323733383836.roa
Signing time:             Mon 27 Jul 2026 22:51:11 +0000
ROA not before:           Mon 27 Jul 2026 22:46:11 +0000
ROA not after:            Mon 26 Jul 2027 22:51:11 +0000
asID:                     273886
IP address blocks:        2803:2350::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/AC842394CA1936A904B18308B26BDD9E35AB539C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/AC842394CA1936A904B18308B26BDD9E35AB539C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC842394CA1936A904B18308B26BDD9E35AB539C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 03:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:28:29:0e:29:d9:8f:46:59:43:d6:f0:41:39:40:0c:e4:12:06:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC842394CA1936A904B18308B26BDD9E35AB539C
        Validity
            Not Before: Jul 27 22:46:11 2026 GMT
            Not After : Jul 26 22:51:11 2027 GMT
        Subject: CN=8B0AB4ACDD05C76E619D94634947AFBB282D0CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:9d:d6:88:bb:77:41:a3:06:a0:6e:67:36:
                    c1:dc:3c:3f:cb:fe:98:b6:91:2a:cc:0b:0e:21:4a:
                    9a:2c:f2:35:ab:34:66:6d:52:fe:39:a5:4b:b3:2d:
                    1a:1f:3b:7b:44:66:f9:cf:43:9c:bc:b1:bf:38:cc:
                    15:f4:44:14:6a:f1:cd:75:06:9c:b7:cf:34:04:b9:
                    45:91:ec:60:3d:59:ca:47:c6:86:32:af:2b:bf:20:
                    5f:33:8b:74:10:06:b8:e0:2a:98:43:b8:66:de:ce:
                    a6:7b:51:df:9d:e6:f9:92:19:4a:09:8f:6e:ef:bc:
                    86:13:73:e6:93:0d:0e:00:25:2f:81:ae:d2:90:e5:
                    8d:0c:65:5a:9a:06:48:5a:2d:72:f6:9b:e7:e8:e1:
                    1b:59:8a:4a:6e:cb:70:9c:3c:38:3e:34:ff:08:98:
                    d7:f5:0b:5e:d8:d3:61:d2:48:c3:d9:82:4c:cf:25:
                    3b:c2:2b:16:6b:49:f3:4e:e7:5c:19:cb:05:9b:43:
                    65:0a:28:d8:1c:46:00:18:3c:42:4c:a7:37:78:28:
                    6d:a3:42:fa:d3:27:dc:98:b3:d9:f6:bc:aa:ad:90:
                    1a:37:ab:92:d3:a7:87:bc:97:03:f3:09:69:0c:17:
                    83:45:da:51:f9:db:40:70:3d:b5:b9:24:c2:ce:4a:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0A:B4:AC:DD:05:C7:6E:61:9D:94:63:49:47:AF:BB:28:2D:0C:A2
            X509v3 Authority Key Identifier:
                keyid:AC:84:23:94:CA:19:36:A9:04:B1:83:08:B2:6B:DD:9E:35:AB:53:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/AC842394CA1936A904B18308B26BDD9E35AB539C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC842394CA1936A904B18308B26BDD9E35AB539C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC9BDB823BCC86907AE23B555513D8EE0B5F77C7807AC0FA75315A0B8A5B4FD/0/323830333a323335303a3a2f33322d3438203d3e20323733383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2350::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:75:69:48:3b:04:e8:ba:6b:fe:27:e4:c8:a8:23:24:62:a4:
         e0:e5:3e:e1:fe:99:f8:60:d3:02:24:c1:cf:cf:8f:6c:5c:0e:
         ee:31:93:22:50:6d:30:a9:72:88:27:21:2e:cf:98:ca:48:06:
         d3:b3:0e:6f:5a:f5:6a:ac:b2:13:46:ab:2a:2b:93:d5:e2:3e:
         39:61:40:f3:fa:35:bb:c5:d7:52:66:9b:77:c3:77:54:07:8b:
         7e:8b:11:8a:8c:4c:0c:e0:d2:1d:84:bc:54:e5:bf:2e:a6:91:
         d4:cc:92:26:f2:41:4b:b4:bf:c6:12:42:af:33:9c:1f:f4:69:
         84:7d:03:ce:b5:11:77:4a:8b:15:62:44:f8:0c:34:a9:df:dd:
         8d:92:12:36:c3:3c:94:a9:b5:b9:44:bc:b0:54:bf:6d:4e:8a:
         1d:97:f3:66:cb:21:b6:51:0b:17:a5:1c:f9:ce:24:3a:dd:2b:
         5b:5a:20:d7:5b:32:53:8a:e3:34:83:d5:08:1e:a9:0e:34:21:
         2c:2d:e0:d3:f9:21:39:bd:00:17:2e:d6:0d:d2:94:06:7a:c5:
         d6:76:4a:1a:a6:2d:f7:b4:70:1e:db:db:7f:22:f3:18:5c:92:
         40:b3:fc:4c:b3:00:ce:42:87:b8:52:4f:39:9f:cc:c2:bb:99:
         98:9a:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:32:38 2026 by rpki-client