Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a343030303a3a2f33352d3335203d3e20323635373830.roa
File:                     323830333a666434303a343030303a3a2f33352d3335203d3e20323635373830.roa (raw, json)
Hash identifier:          TuZ/1f4zf03CrC+HO3AKRPM2cJtc2xvfGJ+j0gCS9b4=
Subject key identifier:   FC:6A:2F:42:35:7B:E6:D0:6C:D4:29:F8:51:2F:80:7E:D6:60:7B:27
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       77D7114D35D4E61F4FB0FCAAB1480953EB2D5849
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a343030303a3a2f33352d3335203d3e20323635373830.roa
Signing time:             Fri 07 Aug 2026 07:20:10 +0000
ROA not before:           Fri 07 Aug 2026 07:15:10 +0000
ROA not after:            Fri 06 Aug 2027 07:20:10 +0000
asID:                     265780
IP address blocks:        2803:fd40:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d7:11:4d:35:d4:e6:1f:4f:b0:fc:aa:b1:48:09:53:eb:2d:58:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Aug  7 07:15:10 2026 GMT
            Not After : Aug  6 07:20:10 2027 GMT
        Subject: CN=FC6A2F42357BE6D06CD429F8512F807ED6607B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:e1:b0:08:70:a8:f6:c1:2d:31:4d:83:bd:
                    46:2d:88:00:61:d2:be:3c:b2:b1:b6:b5:21:4e:9b:
                    e6:dc:ad:d8:60:f6:47:c1:ab:83:d9:e3:0c:76:a1:
                    8b:ed:93:cf:e6:36:29:aa:d2:3d:0d:5d:b2:af:57:
                    d1:56:cb:c1:4f:bc:79:86:ba:cd:1d:c4:04:a0:3e:
                    c4:b0:44:47:23:8b:f4:da:f8:9e:46:fa:a5:b2:d3:
                    ad:1d:ef:a1:2a:90:d8:09:d3:03:1a:93:47:fa:4e:
                    4d:0d:41:4e:69:93:6e:84:33:37:1f:63:02:f3:e8:
                    25:e7:fe:af:91:f5:cf:52:c9:b6:f7:65:7e:8e:a7:
                    12:dc:e2:1c:37:ea:e9:e5:d2:36:fe:44:66:a1:f1:
                    ce:09:2c:cb:03:4e:e9:66:dd:63:ca:7f:a3:06:c9:
                    61:e6:88:73:76:1d:16:a4:93:d1:d7:55:67:1d:f6:
                    dc:68:73:c5:4a:24:5c:83:6a:5f:17:c1:97:fd:64:
                    a6:2e:c5:bd:a3:cd:da:9b:6d:13:49:20:93:48:49:
                    92:2d:c4:ab:48:a0:3f:fc:0d:34:f1:81:f5:2e:70:
                    67:ea:c6:70:4d:2f:7a:e6:0b:fa:8f:f8:1f:d8:ad:
                    b1:0f:d4:7d:e8:08:08:32:0d:d9:2a:9d:b2:74:ec:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:2F:42:35:7B:E6:D0:6C:D4:29:F8:51:2F:80:7E:D6:60:7B:27
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a343030303a3a2f33352d3335203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:ef:63:36:77:81:59:bb:d3:6a:8b:e4:3e:5b:25:d3:cb:
         d8:ca:fc:f9:4c:82:71:a3:0b:95:4c:cb:4b:d7:43:ba:78:22:
         c4:84:3e:57:b1:95:62:a2:7b:c4:50:13:59:f5:ab:36:ee:3b:
         8e:8d:34:17:53:de:8d:c4:53:8b:f8:0a:ef:70:c9:10:9b:09:
         fc:c2:7a:7d:d3:7f:c5:cb:f1:92:40:63:bc:00:ae:90:9f:97:
         e3:1a:04:01:41:ad:a5:ff:0d:f7:59:ec:aa:98:65:06:1b:3f:
         5b:f5:b3:65:e6:4c:4b:ce:ce:13:e4:3c:f6:67:07:a1:61:ec:
         7c:23:f8:b3:73:97:35:ec:09:82:c0:05:e5:91:e5:32:23:e2:
         ea:bb:81:4d:fe:de:38:59:53:90:8d:e0:77:29:7d:76:f2:90:
         67:5f:82:ec:c0:e3:2c:55:17:e4:56:71:f9:4b:00:5d:a9:e0:
         98:31:53:0f:38:11:6e:0b:43:32:86:dc:ff:25:b4:f3:5b:87:
         4e:d9:0a:3c:5f:77:52:b2:33:1a:ae:6c:25:04:0e:3b:06:1b:
         df:04:5f:fe:fa:91:4d:83:6f:89:42:de:6d:f3:32:ef:90:2f:
         ac:e0:51:cc:08:57:1b:eb:48:6c:c7:d9:e0:6a:81:95:a5:ce:
         75:24:40:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:16:37 2026 by rpki-client