Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/323830333a636164303a3a2f33322d3438203d3e20323734303638.roa
File:                     323830333a636164303a3a2f33322d3438203d3e20323734303638.roa (raw, json)
Hash identifier:          zoaJGVfiF0bvsSMixBtvTuMN+IkIvtT08vCcNy1lQPY=
Subject key identifier:   E1:67:3A:BA:F8:17:BA:C8:E0:00:BA:70:BE:EC:6B:73:D6:00:58:85
Certificate issuer:       /CN=DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D
Certificate serial:       064A1070F12806A251E5A132D2F51D1BC89A1339
Authority key identifier: DE:3F:D4:EE:1D:38:2F:55:95:A8:D2:3D:D0:09:C7:EA:0B:D2:07:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/323830333a636164303a3a2f33322d3438203d3e20323734303638.roa
Signing time:             Thu 13 Aug 2026 19:55:00 +0000
ROA not before:           Thu 13 Aug 2026 19:50:00 +0000
ROA not after:            Thu 12 Aug 2027 19:55:00 +0000
asID:                     274068
IP address blocks:        2803:cad0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 03:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4a:10:70:f1:28:06:a2:51:e5:a1:32:d2:f5:1d:1b:c8:9a:13:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D
        Validity
            Not Before: Aug 13 19:50:00 2026 GMT
            Not After : Aug 12 19:55:00 2027 GMT
        Subject: CN=E1673ABAF817BAC8E000BA70BEEC6B73D6005885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:ac:74:ed:6a:62:6f:08:dc:63:61:3b:ea:
                    68:5c:ec:e6:a7:7d:6b:91:f0:44:9d:dd:c4:44:e7:
                    3a:40:1d:53:1b:91:79:49:d2:bc:98:5b:98:57:7a:
                    0e:45:8b:46:8e:15:6c:af:08:35:4c:a4:ec:e2:9f:
                    ce:ab:42:42:69:42:db:11:b3:5e:9e:31:4b:08:cb:
                    87:72:81:d2:dc:a8:e1:e5:48:ce:f6:c1:54:c2:93:
                    23:90:cf:00:0f:48:c6:15:d0:a3:51:c2:dd:25:bf:
                    8e:0b:01:f9:55:a5:86:d9:5f:ca:2c:aa:9c:59:a0:
                    23:5f:6d:d7:99:45:69:2a:9d:eb:ee:86:a8:a2:59:
                    4e:af:d7:04:b6:ac:47:88:d6:67:ef:23:31:f0:c0:
                    48:e0:8c:d6:ec:ca:0c:dd:ac:f6:01:46:81:32:7f:
                    31:4b:ba:77:31:b2:f9:dd:7b:30:3b:26:a7:83:1d:
                    f3:54:b2:73:5e:6e:bb:a1:02:d7:21:99:0a:e7:ae:
                    e1:95:f4:66:2a:6b:e2:49:b3:e6:83:75:ea:ec:10:
                    d8:cb:c7:bd:ab:46:03:5c:3d:a2:80:6d:b1:e3:a2:
                    3b:7c:d4:16:e6:fc:e8:7c:10:a8:a9:bf:cf:d9:e1:
                    d7:3c:31:ab:0c:ca:32:b1:dd:71:dc:2b:4f:b0:64:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:3A:BA:F8:17:BA:C8:E0:00:BA:70:BE:EC:6B:73:D6:00:58:85
            X509v3 Authority Key Identifier:
                keyid:DE:3F:D4:EE:1D:38:2F:55:95:A8:D2:3D:D0:09:C7:EA:0B:D2:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/323830333a636164303a3a2f33322d3438203d3e20323734303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:44:3d:70:73:5c:79:0c:6e:79:12:fd:d3:45:7f:7d:ed:
         07:6f:26:ee:e6:60:a6:91:ca:6a:a7:7e:92:ef:b4:37:e5:22:
         1f:59:9e:5a:61:c8:69:19:4c:86:13:df:11:ff:b9:1f:d0:28:
         34:fb:b2:4c:d5:89:cf:04:2f:c0:f4:e3:d9:c0:45:e4:ac:3c:
         8e:99:60:89:14:6f:bd:81:19:c6:19:72:02:b9:92:a8:eb:00:
         96:ad:27:b3:ae:24:86:27:5c:e0:ad:69:3e:cd:5d:15:d9:82:
         e7:1a:88:40:17:f2:70:06:f2:a2:13:6b:06:9b:ce:35:0d:f2:
         57:41:b6:20:b8:7b:2b:58:7a:53:da:fa:dc:e6:03:3a:80:5f:
         06:8a:87:5c:fe:f2:f0:b6:d2:dc:ab:aa:69:3f:e5:fb:93:0a:
         01:61:7e:f6:b0:26:62:8c:f1:0c:b0:57:2a:17:34:cd:4b:52:
         12:f2:98:0a:6a:5f:98:4b:76:a1:f0:00:46:a2:15:3a:5e:7d:
         05:3c:2b:f7:77:11:06:76:63:d0:cc:78:24:38:36:30:21:bb:
         35:46:e3:07:17:9a:51:15:0d:b8:7a:15:49:d6:f8:a6:c2:1c:
         4f:fe:2e:1e:47:28:22:5e:c5:85:d3:af:63:fb:9e:36:79:03:
         bf:08:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:17 2026 by rpki-client