Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/323830333a643836303a3a2f33322d3438203d3e20323637383236.roa
File:                     323830333a643836303a3a2f33322d3438203d3e20323637383236.roa (raw, json)
Hash identifier:          RdcQQpjeW3f7gOF86D3MpRsPtKzM1U8b90GkC58UdRg=
Subject key identifier:   48:64:EE:BB:C8:B7:8A:A2:2A:08:F7:CF:6C:37:6F:28:48:31:4C:3E
Certificate issuer:       /CN=DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4
Certificate serial:       54E2C57E5125DFA2FFCF74FEF3A85DB9C7328253
Authority key identifier: DC:07:7F:E7:F6:BB:50:74:B5:61:4D:8C:04:09:D1:A5:D5:D8:BB:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/323830333a643836303a3a2f33322d3438203d3e20323637383236.roa
Signing time:             Tue 28 Jul 2026 00:51:12 +0000
ROA not before:           Tue 28 Jul 2026 00:46:12 +0000
ROA not after:            Tue 27 Jul 2027 00:51:12 +0000
asID:                     267826
IP address blocks:        2803:d860::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e2:c5:7e:51:25:df:a2:ff:cf:74:fe:f3:a8:5d:b9:c7:32:82:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4
        Validity
            Not Before: Jul 28 00:46:12 2026 GMT
            Not After : Jul 27 00:51:12 2027 GMT
        Subject: CN=4864EEBBC8B78AA22A08F7CF6C376F2848314C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:43:0c:5d:42:2e:2a:cc:fb:5b:2a:3b:f7:
                    92:83:6a:2d:73:81:1e:f5:12:7d:75:6c:d3:71:5c:
                    22:dc:46:22:22:a1:30:5d:0e:0f:5d:06:82:14:f7:
                    b9:ab:0f:fc:35:6e:0c:63:4c:a9:d5:71:4c:97:4c:
                    3c:89:b8:86:73:e3:56:f5:cd:02:4a:42:91:2b:d5:
                    5e:b1:27:24:29:e8:02:c1:c3:ef:d3:7f:56:f2:89:
                    81:8e:cf:27:0c:35:d1:ce:fa:9d:79:68:38:37:1c:
                    26:5c:78:06:44:25:b9:bb:4f:6f:23:da:bf:40:e5:
                    4a:65:22:50:e7:bd:83:61:66:8b:67:13:67:48:27:
                    b3:d2:95:1a:de:e1:81:5c:ab:1e:78:f3:fe:99:a8:
                    15:6c:a3:e9:4d:95:a9:fb:78:03:82:ff:b0:f3:53:
                    78:bf:b5:94:f9:f3:25:52:56:67:13:c7:35:42:4f:
                    96:d0:9b:8d:1a:e6:29:dc:cd:e2:d7:79:d6:24:c9:
                    33:91:35:d8:41:f6:89:0e:fd:41:81:a9:fd:da:b2:
                    46:ed:5c:b2:04:ff:5a:75:9b:df:1a:f5:20:d4:6f:
                    c8:0e:6e:e8:c8:fa:a4:13:8d:e7:88:ac:18:50:1c:
                    d9:ee:65:22:6e:8d:bd:f3:3c:8f:ec:b7:ad:8b:f8:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:EE:BB:C8:B7:8A:A2:2A:08:F7:CF:6C:37:6F:28:48:31:4C:3E
            X509v3 Authority Key Identifier:
                keyid:DC:07:7F:E7:F6:BB:50:74:B5:61:4D:8C:04:09:D1:A5:D5:D8:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/323830333a643836303a3a2f33322d3438203d3e20323637383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d860::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ac:42:a7:db:6b:ff:7e:57:73:75:82:3b:70:43:f0:08:2e:
         8b:71:f3:79:eb:50:82:d8:a4:69:22:70:42:bf:96:48:be:c4:
         38:30:e5:5c:07:1c:b4:00:4b:88:3d:01:e8:8f:5c:33:e6:b4:
         14:c7:55:2d:d1:0b:63:84:b6:f0:b3:f1:41:c5:d9:46:6a:97:
         c8:92:ed:20:64:4b:0b:27:bd:45:33:e5:e3:8d:8a:aa:e9:70:
         7b:ee:b3:ab:e4:c1:c7:c8:27:74:9a:eb:77:01:a6:6a:34:f1:
         cd:c3:71:57:fa:7b:72:5d:4a:f2:28:9e:fa:29:47:db:62:37:
         16:b8:b6:c4:c9:98:36:f4:66:bd:29:d7:16:64:41:dd:38:22:
         c8:9f:0d:75:ae:4b:fc:f5:8d:0c:5f:0a:88:da:8e:86:37:b2:
         bf:9f:7d:62:40:95:cb:88:be:b5:9b:07:a7:82:a6:9f:80:4c:
         2b:8c:93:fd:e5:d0:0d:79:00:e9:53:a3:43:a4:71:32:dd:b2:
         e8:4b:78:ef:e2:3f:9f:a2:57:19:f7:d8:28:da:10:a1:b9:6f:
         22:ec:04:49:74:54:ed:1e:8a:30:64:c9:80:b5:46:9c:25:00:
         99:6c:95:59:1d:be:d6:25:20:09:9e:f6:0a:53:47:2f:88:4d:
         b8:db:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:33:36 2026 by rpki-client