Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3438203d3e20323733303538.roa
File:                     323830333a633739303a3a2f34322d3438203d3e20323733303538.roa (raw, json)
Hash identifier:          qvf88EnCMclWcK0kW9i/Z1YNeFM3qpbQssU5z2tf/+A=
Subject key identifier:   1F:AB:BD:89:D9:08:95:5D:90:25:A2:D6:04:67:68:41:81:16:F1:57
Certificate issuer:       /CN=391C80297A8923C97C067A3FD078178E6934E57D
Certificate serial:       6CDA9F8CBE7CC8E05362C5193145BC7BA617C933
Authority key identifier: 39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3438203d3e20323733303538.roa
Signing time:             Wed 26 Aug 2026 15:30:00 +0000
ROA not before:           Wed 26 Aug 2026 15:25:00 +0000
ROA not after:            Wed 25 Aug 2027 15:30:00 +0000
asID:                     273058
IP address blocks:        2803:c790::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 31 Aug 2026 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:9f:8c:be:7c:c8:e0:53:62:c5:19:31:45:bc:7b:a6:17:c9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391C80297A8923C97C067A3FD078178E6934E57D
        Validity
            Not Before: Aug 26 15:25:00 2026 GMT
            Not After : Aug 25 15:30:00 2027 GMT
        Subject: CN=1FABBD89D908955D9025A2D6046768418116F157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:6d:19:e1:71:31:3a:f6:98:8d:fd:66:d2:
                    21:8b:0d:97:0f:d1:69:69:11:42:ee:45:22:a0:f0:
                    61:35:c8:63:4c:3d:2e:7d:75:c8:b9:b7:a0:65:c0:
                    43:78:8d:f4:4d:48:bb:db:6c:36:74:42:99:e1:1c:
                    8c:90:c6:27:43:d9:c8:ee:98:a1:c3:ff:a7:5e:8c:
                    c3:81:ce:55:6a:d5:19:c6:46:6b:44:dd:25:df:3f:
                    f7:26:54:f6:d9:c7:66:4a:c5:d6:ad:cc:22:26:4e:
                    3d:1c:fb:0d:69:42:bd:b9:e6:5c:93:70:8e:83:a4:
                    af:a7:80:79:71:59:94:96:02:d6:90:f9:8b:c8:17:
                    70:57:bd:b5:a4:d4:9f:2b:97:23:9c:17:7a:45:0c:
                    e2:38:e4:0e:f7:03:01:d1:7c:79:ad:b1:d6:6d:e3:
                    6f:30:c6:4f:75:48:97:1d:80:59:a3:8f:fc:f2:92:
                    6a:f7:c3:6f:b2:ba:fa:2e:ff:14:25:44:2b:34:6e:
                    2e:e7:1e:2d:e0:13:ba:7f:f3:12:62:3e:79:2e:ec:
                    b0:43:b3:a5:3a:07:c6:62:e8:bf:7d:77:98:50:ee:
                    ff:08:4a:b2:fd:17:6e:cc:47:f5:e1:8a:47:fc:f7:
                    78:4e:33:82:7f:bf:42:ce:d5:40:c9:d1:d8:18:eb:
                    89:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:BD:89:D9:08:95:5D:90:25:A2:D6:04:67:68:41:81:16:F1:57
            X509v3 Authority Key Identifier:
                keyid:39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3438203d3e20323733303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c790::/42

    Signature Algorithm: sha256WithRSAEncryption
         c1:c3:a6:84:31:7c:5b:d5:55:92:a4:6d:3d:1d:e0:a5:78:ce:
         dc:14:2d:6f:b2:04:a7:89:73:48:4d:a7:76:26:8b:74:f3:44:
         55:2f:c1:96:f6:1c:0f:db:3f:2f:1c:7e:a0:e5:83:26:22:cb:
         09:75:c6:60:2d:00:3e:07:7f:01:b6:60:a3:96:02:99:29:ef:
         45:a8:02:8c:84:e6:25:65:a3:19:73:b7:1b:de:36:9f:11:ab:
         6c:dd:01:23:a7:97:b1:9f:a7:11:df:0f:cc:49:18:7f:7a:8b:
         1a:ec:95:44:3f:1a:2b:38:f9:63:56:ba:86:97:e8:25:10:0f:
         30:70:cc:e9:b4:a3:86:5d:db:18:77:da:58:34:b6:5b:6b:78:
         c1:93:d7:fb:e9:a0:a1:24:b6:39:db:d7:2b:cc:bc:f5:8f:38:
         67:5e:cb:e2:ad:52:b3:db:28:cc:45:0c:9f:ce:b3:98:8e:69:
         a8:3c:83:47:64:8c:9b:ef:0f:a6:ab:ae:0d:e1:e8:da:a9:58:
         09:db:d2:aa:6a:05:8c:e8:11:ee:17:e5:8a:75:0e:95:0b:1b:
         be:78:9b:13:7b:c6:0d:52:a5:a6:59:54:77:79:a0:ba:25:dc:
         55:57:13:ab:20:ea:38:2b:59:23:16:32:a0:33:fc:be:8e:ac:
         a3:55:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 19:09:28 2026 by rpki-client