Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa
File:                     323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa (raw, json)
Hash identifier:          whjj+FR//zjDcSfQBzp+XGe2lXB1Pob5BzESDe7DBgk=
Subject key identifier:   CB:F1:4F:DA:9B:A8:2E:11:BF:B0:36:B5:54:92:04:78:E3:2A:A8:31
Certificate issuer:       /CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
Certificate serial:       707B5A549DA79BA862AD0F165FD57C7839C78818
Authority key identifier: 6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa
Signing time:             Mon 07 Sep 2026 15:34:06 +0000
ROA not before:           Mon 07 Sep 2026 15:29:06 +0000
ROA not after:            Mon 06 Sep 2027 15:34:06 +0000
asID:                     274217
IP address blocks:        2803:bd0:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 05:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7b:5a:54:9d:a7:9b:a8:62:ad:0f:16:5f:d5:7c:78:39:c7:88:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
        Validity
            Not Before: Sep  7 15:29:06 2026 GMT
            Not After : Sep  6 15:34:06 2027 GMT
        Subject: CN=CBF14FDA9BA82E11BFB036B554920478E32AA831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:f5:be:4d:7d:71:8f:3f:98:be:5c:99:ff:
                    f5:99:b1:2e:bb:18:e9:6c:e1:5b:23:34:27:af:42:
                    b9:11:0b:1c:a0:0f:e3:d3:4c:3f:18:b5:a2:84:d1:
                    f3:8e:8a:2e:20:0a:15:1f:75:67:0f:38:9a:85:e4:
                    c7:40:d7:0c:10:93:c1:71:fa:03:9c:c8:67:ef:dd:
                    53:00:27:dd:c5:76:5d:df:2a:09:90:93:7d:6b:44:
                    97:a4:ae:01:5b:2f:35:7a:7d:f3:33:13:14:3d:e2:
                    35:b4:63:b3:2e:c1:87:b1:a6:f3:d8:2e:b8:be:6c:
                    5f:fe:ea:27:12:39:20:ad:e1:22:02:00:65:fa:22:
                    87:fa:23:b1:ae:e5:3d:2e:a2:69:23:79:11:ee:ae:
                    0b:e7:54:35:6d:c0:6e:cc:5c:5e:9a:9b:1d:7f:25:
                    d1:2e:4d:14:66:f5:81:e4:ac:cb:4c:a5:08:e2:de:
                    41:9d:39:cc:94:74:a1:e0:9f:91:8b:c8:7b:34:a3:
                    e2:b8:a8:e9:92:a6:e8:54:36:02:5b:1d:d6:8d:8b:
                    49:ad:43:b2:7c:ad:6f:a7:1f:06:d6:a0:fa:d2:bc:
                    ff:5a:eb:85:0f:85:e6:0e:8f:90:9c:ab:60:81:eb:
                    c2:60:e2:6e:82:46:ae:2a:26:be:a9:c5:11:b0:68:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:4F:DA:9B:A8:2E:11:BF:B0:36:B5:54:92:04:78:E3:2A:A8:31
            X509v3 Authority Key Identifier:
                keyid:6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030313a3a2f34382d3438203d3e20323734323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd0:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:7b:98:c3:27:8b:67:67:77:ba:5f:d8:5e:bc:cb:2b:e3:
         62:cd:f4:30:4d:83:dd:5d:81:01:6e:1d:00:76:fa:4b:64:b2:
         49:5f:83:12:ec:d7:d8:12:96:aa:33:d7:ca:b9:e2:3d:e3:02:
         fd:19:38:b1:a1:f0:f6:23:2b:7c:22:88:24:4d:ea:a3:95:3a:
         5e:1a:46:2f:30:bb:47:29:68:b5:e4:3b:c0:8e:ca:5a:37:83:
         53:80:70:97:8a:31:b7:f0:be:fe:6e:75:d5:84:b5:9c:0f:7a:
         f1:ba:fe:2c:49:be:b0:57:25:1b:ad:84:f9:a3:18:79:a9:38:
         46:67:e8:b1:8f:4c:dc:15:40:ff:bc:16:8e:bd:8a:79:61:e8:
         e1:e5:61:9e:d0:8e:c8:fb:d8:4c:4a:26:d4:fc:dc:60:36:83:
         5b:08:ba:53:1b:c5:ee:e0:45:4e:18:fe:69:43:7f:56:16:dd:
         53:81:3f:2a:ea:5b:e2:e6:90:b8:57:c3:a7:c5:ce:e2:19:08:
         22:24:96:f5:7c:1f:da:e0:b5:92:b2:7a:d7:ee:11:c2:c9:f5:
         2a:77:af:ee:c3:fe:e2:ac:52:55:99:c4:af:8f:df:0d:8d:c4:
         d8:01:f5:1d:42:18:d4:48:0b:e4:26:db:95:f7:71:2d:8f:a7:
         d5:1a:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:18:30 2026 by rpki-client