Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/323830333a3364303a3a2f33322d3438203d3e20323734323030.roa
File:                     323830333a3364303a3a2f33322d3438203d3e20323734323030.roa (raw, json)
Hash identifier:          KoQ3v44b2WZPxMp9asSrTWj+yj/JRPXh8qQD1K2Sp3o=
Subject key identifier:   58:BC:9B:44:30:46:15:6F:46:78:D5:67:D8:64:56:44:19:4F:D4:77
Certificate issuer:       /CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D
Certificate serial:       09CE08B696E0A8A323423DA156DF76FA7DF23A78
Authority key identifier: 85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/323830333a3364303a3a2f33322d3438203d3e20323734323030.roa
Signing time:             Thu 20 Aug 2026 13:26:14 +0000
ROA not before:           Thu 20 Aug 2026 13:21:14 +0000
ROA not after:            Thu 19 Aug 2027 13:26:14 +0000
asID:                     274200
IP address blocks:        2803:3d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 04:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ce:08:b6:96:e0:a8:a3:23:42:3d:a1:56:df:76:fa:7d:f2:3a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D
        Validity
            Not Before: Aug 20 13:21:14 2026 GMT
            Not After : Aug 19 13:26:14 2027 GMT
        Subject: CN=58BC9B443046156F4678D567D8645644194FD477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:bd:b5:81:ee:7d:52:6c:18:ba:65:06:96:
                    c5:e1:77:c9:33:16:e2:f5:57:fb:7e:ad:e7:09:b3:
                    67:a3:24:82:de:9c:00:6a:3b:f1:15:93:33:df:ca:
                    42:a8:44:54:76:9c:19:e8:c2:65:43:a3:ee:00:46:
                    4e:78:1f:90:91:e1:08:26:f5:82:a8:80:73:d2:9b:
                    a2:e7:c6:a2:ba:ed:eb:c9:51:69:98:7b:8a:fd:81:
                    34:1a:aa:d6:9b:c3:d5:80:a0:51:25:fc:b1:e3:f2:
                    0f:ba:d4:32:3a:ed:aa:ba:75:76:8f:0e:f6:bd:57:
                    00:58:31:bb:da:81:c0:d4:7e:3c:d7:f4:c2:e3:e2:
                    b1:5c:72:cf:9a:22:b4:8a:b2:d0:c9:af:9e:9d:d0:
                    8e:24:18:39:2d:67:fd:63:e1:90:20:d5:d4:e7:c6:
                    4a:4c:f6:49:a1:f6:be:69:8e:f5:5c:2d:29:20:5e:
                    65:fa:61:dd:bc:9a:df:ed:73:f9:af:27:5f:d9:01:
                    04:bb:90:f5:54:85:36:f4:7e:22:8b:29:4e:97:f5:
                    d0:93:00:99:ed:a5:d0:27:db:89:80:e0:7e:c6:68:
                    44:8e:60:c1:81:ed:cb:d4:fa:c2:ee:94:76:1a:8d:
                    50:43:df:8d:7b:d8:6d:66:42:1d:49:f3:db:d3:dc:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:9B:44:30:46:15:6F:46:78:D5:67:D8:64:56:44:19:4F:D4:77
            X509v3 Authority Key Identifier:
                keyid:85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/323830333a3364303a3a2f33322d3438203d3e20323734323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:2c:75:ed:b7:27:86:e9:41:5c:67:e4:0e:15:3f:bb:8f:34:
         9e:21:b1:0e:14:27:ea:1e:8a:08:a2:24:26:a2:35:8c:54:50:
         1b:ae:ef:60:2c:ad:ed:be:cb:7c:18:28:f1:94:f8:5b:94:3d:
         08:7b:92:88:1e:4c:4a:88:ec:8d:b6:34:ec:b0:82:5f:71:92:
         57:de:04:50:f7:f1:a3:d1:c7:32:f6:e6:aa:32:07:90:43:c1:
         95:5a:c2:57:33:56:34:32:bb:6a:e6:c4:bf:5e:4f:27:c4:ee:
         ed:7f:0b:11:35:dd:dc:fc:4c:02:a4:b0:8a:7e:b4:4b:9e:79:
         13:ab:33:b7:c8:02:47:35:99:51:60:00:c6:b2:e3:21:29:1a:
         8f:0a:3e:1a:9d:14:fb:00:16:e2:13:31:c9:95:cd:e5:2d:9d:
         29:16:85:e0:9c:64:85:3b:19:bd:b6:98:a0:eb:1b:81:25:2b:
         9d:1b:3e:c8:9f:16:35:a1:1d:89:93:cc:90:fd:13:32:a3:2a:
         6b:7f:4a:77:de:56:9e:0d:f9:b6:ca:00:72:ce:a6:7a:72:ec:
         46:62:24:7a:61:6c:79:1b:5d:19:f5:7b:ca:f7:aa:e8:eb:a6:
         83:b5:23:cb:de:89:1a:c5:3b:80:c1:de:f7:07:7c:8a:57:2e:
         9e:7c:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:17:32 2026 by rpki-client