Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a383030303a3a2f33352d3335203d3e20323635373830.roa
File:                     323830333a666434303a383030303a3a2f33352d3335203d3e20323635373830.roa (raw, json)
Hash identifier:          91ZqRW+MWU4Vo60adqCV6UNSd1rl259YLPhRw8lAd8k=
Subject key identifier:   98:C9:0E:80:37:DB:48:AD:7F:1D:34:DD:B9:85:08:9A:27:7F:2D:5D
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       4023C470CF4C43736D3F530504C412E10412AA91
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a383030303a3a2f33352d3335203d3e20323635373830.roa
Signing time:             Fri 07 Aug 2026 07:20:10 +0000
ROA not before:           Fri 07 Aug 2026 07:15:10 +0000
ROA not after:            Fri 06 Aug 2027 07:20:10 +0000
asID:                     265780
IP address blocks:        2803:fd40:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:23:c4:70:cf:4c:43:73:6d:3f:53:05:04:c4:12:e1:04:12:aa:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Aug  7 07:15:10 2026 GMT
            Not After : Aug  6 07:20:10 2027 GMT
        Subject: CN=98C90E8037DB48AD7F1D34DDB985089A277F2D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:23:e9:c3:ef:73:ae:b6:04:3f:ff:06:93:
                    aa:5a:f0:dd:08:87:19:3c:31:77:3a:b8:79:6c:e4:
                    4f:c6:55:8d:a6:f0:b9:f5:2c:07:d6:a9:57:bc:4c:
                    05:66:e5:77:1d:26:c7:07:82:a3:ab:34:fb:a5:e9:
                    ba:8d:d7:57:e2:3a:e9:1a:87:66:39:d8:cd:fd:86:
                    9f:42:e5:dd:2e:92:0a:53:14:8a:ea:a6:b0:4e:42:
                    93:ce:71:17:c2:ab:82:df:39:fc:6a:f3:5d:2e:7f:
                    30:b7:c3:65:59:87:68:e1:94:50:1a:ce:f7:db:4c:
                    ab:e8:5f:62:3e:68:86:45:4e:4c:bb:e5:43:a9:77:
                    d1:66:e9:ba:2f:43:37:39:a4:97:c7:33:72:83:d7:
                    1f:9d:28:fa:ad:93:7e:15:cd:0e:7f:19:6a:2f:04:
                    a0:8a:d8:b7:af:8d:aa:c9:54:70:1f:71:22:7d:86:
                    ce:64:46:29:e2:79:12:8b:27:47:73:57:bd:6f:1f:
                    3c:2f:da:fe:99:aa:b3:9a:81:da:dd:20:2c:e4:c1:
                    72:9c:c7:43:58:18:d6:e3:bf:c6:f5:57:2e:cc:4e:
                    87:8c:52:23:3c:10:34:b8:09:de:1e:4f:18:f4:ad:
                    42:6f:c2:15:6d:01:de:48:c9:1f:50:21:72:23:63:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C9:0E:80:37:DB:48:AD:7F:1D:34:DD:B9:85:08:9A:27:7F:2D:5D
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a383030303a3a2f33352d3335203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         10:32:13:68:f4:aa:f0:6c:b0:cc:69:88:45:a1:ca:b2:a5:b0:
         dc:d7:24:c6:58:ac:21:c9:28:88:ba:f5:fe:56:fe:ce:fc:a4:
         09:e6:3c:6c:64:8f:ef:23:3b:c0:19:35:81:ef:85:5a:00:91:
         7b:5c:9b:89:81:69:b6:82:8f:56:cd:cb:66:d2:52:6e:48:c1:
         84:7b:26:f6:22:80:33:b9:41:61:e3:8c:50:7c:7f:27:77:4d:
         af:f4:f8:bc:d9:28:fd:70:c7:47:03:73:4b:59:0a:78:58:37:
         0d:50:91:6e:1e:7e:3b:5d:04:64:e7:00:8a:d4:09:a3:0a:09:
         ad:da:cc:90:e5:58:15:3b:1b:57:ce:d4:0e:c4:b5:2a:e6:27:
         14:b9:19:71:00:82:69:d8:99:db:48:e3:50:2b:33:f4:30:26:
         6e:e6:7a:a9:ec:a0:e9:a7:d9:1b:28:75:cd:80:ea:09:02:19:
         49:7a:2c:ff:78:96:32:a8:2f:fd:55:fd:73:cc:3d:cd:a7:03:
         8d:d0:a7:c1:7a:00:79:f5:6b:f2:0f:a6:6b:88:48:24:49:8b:
         5b:80:ae:25:8c:9b:0d:3f:27:5c:11:d9:bf:20:d5:49:cd:d7:
         1b:72:88:01:28:a7:a1:2f:e0:9c:f4:6b:a6:14:7d:98:54:79:
         d4:52:43:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:16:47 2026 by rpki-client