Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/323830333a353733303a3a2f33322d3332203d3e20323735303339.roa
File:                     323830333a353733303a3a2f33322d3332203d3e20323735303339.roa (raw, json)
Hash identifier:          JVDCpyI6xybioiag7cUxxfKAvo8ahaTbWFQRFZSEXTE=
Subject key identifier:   EB:9F:9F:CE:68:1A:52:B6:6B:52:42:CF:C6:B7:96:BB:87:BE:E2:69
Certificate issuer:       /CN=5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1
Certificate serial:       1BFBD1151705806AD83DEE2476A48EA6EFBFC5E4
Authority key identifier: 5D:7C:38:D3:A4:27:BE:B2:5E:49:10:D4:A7:62:1A:8A:14:12:EB:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/323830333a353733303a3a2f33322d3332203d3e20323735303339.roa
Signing time:             Wed 16 Sep 2026 13:50:00 +0000
ROA not before:           Wed 16 Sep 2026 13:45:00 +0000
ROA not after:            Wed 15 Sep 2027 13:50:00 +0000
asID:                     275039
IP address blocks:        2803:5730::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 22:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fb:d1:15:17:05:80:6a:d8:3d:ee:24:76:a4:8e:a6:ef:bf:c5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1
        Validity
            Not Before: Sep 16 13:45:00 2026 GMT
            Not After : Sep 15 13:50:00 2027 GMT
        Subject: CN=EB9F9FCE681A52B66B5242CFC6B796BB87BEE269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:ba:75:6a:18:e5:e3:98:71:c9:46:64:4f:
                    e7:ef:3d:4f:ec:c4:f8:ee:ea:17:8a:f1:8f:ed:25:
                    fe:b6:80:0d:f7:61:2e:24:4f:b6:e0:24:b2:d5:2c:
                    d7:1e:43:19:61:ae:48:90:75:06:c4:e3:77:41:f7:
                    29:24:06:9b:83:5a:af:ae:48:c5:5a:5c:6f:0c:15:
                    ac:17:f0:58:ef:d2:e0:c6:b3:d3:be:c9:f1:3e:cf:
                    fd:8f:63:ee:b1:13:24:a7:89:a9:39:cc:5b:a8:aa:
                    70:c3:e0:15:84:cf:e3:cf:a6:87:c0:44:96:ef:6b:
                    aa:47:b4:13:f1:f4:7c:38:be:1e:00:a6:2d:77:9b:
                    e9:98:76:28:27:3c:bd:22:11:4a:89:8d:28:30:db:
                    b9:ec:aa:73:32:53:21:a9:d2:6e:15:a1:76:c7:9c:
                    8a:ca:89:93:98:b4:53:6e:46:1e:b5:73:dd:f8:ce:
                    d8:8c:8a:e7:fb:80:b4:27:5f:c4:ca:65:01:d5:24:
                    d0:2e:8a:7f:9c:cb:5f:bc:43:f1:f0:8c:ee:b9:ee:
                    73:b6:96:b2:c1:a9:70:94:99:91:ff:45:aa:bc:2d:
                    c7:02:50:d0:93:d1:36:1b:16:fb:2a:d1:74:21:6f:
                    17:52:b6:86:1c:29:ff:69:4d:0c:8c:f6:59:34:5a:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:9F:CE:68:1A:52:B6:6B:52:42:CF:C6:B7:96:BB:87:BE:E2:69
            X509v3 Authority Key Identifier:
                keyid:5D:7C:38:D3:A4:27:BE:B2:5E:49:10:D4:A7:62:1A:8A:14:12:EB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/323830333a353733303a3a2f33322d3332203d3e20323735303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5730::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:5b:63:5e:2d:40:97:7f:68:5a:6a:61:a1:6d:cb:1e:c7:c6:
         67:3d:31:05:32:ee:a9:c1:0e:1f:5a:c9:56:39:62:79:5e:58:
         ee:02:96:6c:db:c1:b0:46:1b:80:05:9f:35:cf:32:30:e2:ae:
         71:8e:75:88:10:50:ff:a4:c0:12:36:e2:be:72:10:97:bf:91:
         6f:9c:39:bd:ea:10:28:96:96:94:05:97:bb:d1:35:05:e4:db:
         e6:9f:a4:12:89:59:fd:87:0c:52:19:a3:16:fa:96:ee:b0:d4:
         f4:14:b4:be:be:39:8e:ff:f8:52:3c:da:42:83:ab:62:de:d3:
         97:3f:58:b0:99:19:c2:93:25:0c:3a:22:56:22:f5:cd:3a:06:
         0a:9f:b8:a8:57:b2:5e:4f:8e:41:bb:0d:da:2f:a5:bf:63:af:
         75:a4:64:26:62:33:e3:07:94:bd:0c:f3:18:9c:7b:ef:2a:2d:
         1c:21:db:ac:15:e7:1b:cc:7c:56:6d:f6:c8:1f:04:52:d4:50:
         10:83:06:97:8e:9e:29:73:a2:5f:ba:04:15:51:9e:3b:e5:b7:
         62:69:c9:3e:e5:54:62:94:e2:fd:58:c0:1f:0f:e4:5a:79:0a:
         24:74:e9:18:f9:df:26:81:19:38:1f:cc:06:0f:db:8b:5d:14:
         4a:da:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:18 2026 by rpki-client