Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa
File:                     323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa (raw, json)
Hash identifier:          dJmfpMsCVGhuxTwq4Y3CHsqY3H5467FaaKWNmOhx35w=
Subject key identifier:   D9:B3:35:54:DB:B7:53:6E:9C:36:5A:7C:FE:93:45:72:0E:A7:84:17
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       2F5E0DCBEE8B911A9F112C44E602584067D3D18D
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa
Signing time:             Fri 07 Aug 2026 07:20:09 +0000
ROA not before:           Fri 07 Aug 2026 07:15:09 +0000
ROA not after:            Fri 06 Aug 2027 07:20:09 +0000
asID:                     265780
IP address blocks:        2803:fd40:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5e:0d:cb:ee:8b:91:1a:9f:11:2c:44:e6:02:58:40:67:d3:d1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Aug  7 07:15:09 2026 GMT
            Not After : Aug  6 07:20:09 2027 GMT
        Subject: CN=D9B33554DBB7536E9C365A7CFE9345720EA78417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:af:82:4b:31:a1:63:0d:ab:2e:e6:38:be:
                    04:80:1e:ea:d2:af:5b:52:f0:66:56:f7:db:10:34:
                    c4:8c:b8:e7:5e:0d:52:74:34:81:9e:99:e1:5a:d1:
                    4a:80:cb:fd:d6:ea:9e:9e:fd:f6:b2:53:42:68:d0:
                    76:12:0d:f3:2e:5b:5b:9f:d7:00:87:2b:e9:e7:dc:
                    65:11:b5:f8:8d:94:5e:6f:b1:67:a5:5f:9b:d6:de:
                    81:02:82:cf:9c:b9:bd:a2:20:47:02:16:ae:26:6f:
                    6d:9d:b6:4a:83:2f:41:3c:75:de:dd:be:ec:45:0e:
                    c5:61:b6:e3:21:15:ce:02:70:59:57:20:c3:ff:90:
                    6f:ec:b9:46:33:58:af:93:d6:ab:04:47:a0:dc:91:
                    1a:64:d8:65:4b:f3:3d:4b:30:21:ba:d9:d3:a2:49:
                    d2:4c:3f:18:33:79:50:50:da:b7:6f:16:1b:9a:16:
                    88:05:6b:73:52:5e:d8:e9:ce:d7:cc:2f:ee:e9:4e:
                    b3:5f:a8:f3:c7:d1:93:a7:cc:20:e6:f7:94:6b:c5:
                    ae:0e:2e:9c:9b:f2:ed:ac:ef:1f:8b:74:3b:d0:42:
                    a6:23:2f:a6:db:f2:a4:5e:7b:95:98:2b:79:f4:46:
                    fe:65:2c:44:61:ae:29:15:d1:9a:21:8c:51:dd:70:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B3:35:54:DB:B7:53:6E:9C:36:5A:7C:FE:93:45:72:0E:A7:84:17
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/323830333a666434303a613030303a3a2f33352d3335203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:8a:3d:3b:22:8a:c4:60:3c:60:83:c1:4b:76:34:a8:5e:
         19:13:51:19:d9:00:33:89:81:dd:32:52:5c:2f:aa:d0:00:17:
         f4:28:c1:c1:e1:c6:30:60:59:33:6d:42:48:ce:2a:e2:6e:af:
         b3:a6:ef:29:24:d7:ed:74:85:7a:75:4a:7d:0f:80:ff:ef:d5:
         c0:ac:19:3e:f4:8d:fe:d5:fd:99:39:fe:09:ed:7f:10:6b:4f:
         ec:58:e3:0b:44:23:50:19:ee:53:ac:be:b7:a5:76:17:6c:d2:
         64:55:eb:8d:28:11:52:c3:f3:ca:0f:e0:95:4a:76:c0:12:c5:
         fa:23:cb:ef:e1:8d:c6:be:4c:79:e4:d5:fe:e9:02:ac:8e:2b:
         c2:44:7f:5a:03:12:a2:c5:e9:2b:a9:de:0b:cc:96:bc:e3:c6:
         50:83:22:3a:66:ae:c0:a7:84:57:9a:78:7a:0b:ce:da:e8:e1:
         bd:71:08:11:70:86:45:39:c3:cd:4c:57:7c:95:f9:40:69:af:
         71:52:c8:c5:4e:6f:c8:b3:c6:ae:89:02:b2:1f:e9:d8:38:1e:
         9a:e2:d9:e0:28:77:0f:a8:53:a4:78:85:79:4e:a1:06:f4:82:
         1d:92:ec:e6:6a:ee:1f:50:3e:fc:d2:0d:54:65:ec:16:37:cb:
         43:7b:fd:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:16:50 2026 by rpki-client