Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/323830333a34303a3a2f33322d3332203d3e20323639383033.roa
File:                     323830333a34303a3a2f33322d3332203d3e20323639383033.roa (raw, json)
Hash identifier:          MlGqhtFzOk4R3/OjiJ6Nyw8WI0af2L7S+zR3acWOVE8=
Subject key identifier:   B4:CC:13:94:4A:C1:F3:A1:C6:AF:AD:10:7A:76:C9:45:15:37:E8:D7
Certificate issuer:       /CN=642B1C614F26920467439813FA812417800268E7
Certificate serial:       266853C3319DB469DDB48C7A7056C305B4D70698
Authority key identifier: 64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/323830333a34303a3a2f33322d3332203d3e20323639383033.roa
Signing time:             Mon 12 Oct 2026 22:50:00 +0000
ROA not before:           Mon 12 Oct 2026 22:45:00 +0000
ROA not after:            Mon 11 Oct 2027 22:50:00 +0000
asID:                     269803
IP address blocks:        2803:40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 08:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:68:53:c3:31:9d:b4:69:dd:b4:8c:7a:70:56:c3:05:b4:d7:06:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642B1C614F26920467439813FA812417800268E7
        Validity
            Not Before: Oct 12 22:45:00 2026 GMT
            Not After : Oct 11 22:50:00 2027 GMT
        Subject: CN=B4CC13944AC1F3A1C6AFAD107A76C9451537E8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:28:6f:b0:b6:97:36:87:bc:1e:4f:b1:b1:
                    4c:fc:f9:b1:1a:82:7e:67:c4:a6:3e:91:e6:c9:99:
                    55:45:84:09:65:3e:c4:f2:41:ff:a8:e3:fd:c5:be:
                    a5:a7:de:56:b7:4f:ef:3c:02:38:e5:e5:62:7a:67:
                    43:f9:54:3d:cc:a7:2a:19:81:29:16:32:1c:8e:3f:
                    98:7e:7e:29:06:f2:4b:51:54:42:9b:0f:a1:a0:17:
                    b5:b4:f3:bc:d2:9c:3d:04:aa:01:f9:1d:94:33:76:
                    2c:9d:d1:68:d4:17:f5:45:f3:97:a6:e4:92:1a:df:
                    bc:15:88:46:06:c0:8b:40:59:4b:90:2d:53:77:66:
                    2a:23:c0:af:78:be:4b:86:56:1a:d4:aa:b8:4f:51:
                    18:87:11:3d:54:a3:db:4f:68:b6:64:12:e4:f4:15:
                    c4:1d:76:d0:a7:cc:8a:38:84:66:44:15:37:ed:21:
                    c3:c0:d4:a3:0c:cc:5f:86:19:2a:18:12:7b:cf:4a:
                    1a:2f:99:d1:c6:f2:2b:71:ba:fd:c2:29:f3:98:1a:
                    63:29:1c:8b:f9:a0:bd:66:d4:87:d0:38:21:5e:6c:
                    1b:94:12:1c:58:ec:8b:06:73:7c:6c:1b:bb:d5:75:
                    a2:90:fa:18:a5:6f:24:58:c9:f8:f6:a9:40:f6:47:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CC:13:94:4A:C1:F3:A1:C6:AF:AD:10:7A:76:C9:45:15:37:E8:D7
            X509v3 Authority Key Identifier:
                keyid:64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/323830333a34303a3a2f33322d3332203d3e20323639383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:7c:c1:75:ad:a9:ea:7e:72:05:fc:dd:ac:a6:29:5e:4e:84:
         f2:45:e5:82:99:a7:52:a3:31:24:ae:f5:26:ec:a7:e8:98:aa:
         2d:13:04:b5:d5:b7:35:b3:ec:4b:bc:b0:b6:02:05:3e:4e:39:
         c0:ba:19:33:e6:c0:ef:6e:48:13:be:c4:29:54:2d:d7:f3:02:
         9c:2f:ec:a5:62:98:3d:ab:4c:da:99:77:3d:65:65:2a:fd:ba:
         bc:11:1b:e8:82:c0:fe:3c:9e:3e:81:08:e3:d2:94:d0:e6:6a:
         50:eb:cf:00:11:44:1a:42:25:1c:16:36:76:e2:19:29:94:fb:
         75:9c:50:b1:e3:46:9d:8e:6b:e2:d9:79:b6:0f:ad:97:c8:ad:
         ad:5e:90:fc:45:9a:41:84:cc:c1:d1:64:9d:f5:93:21:4a:49:
         03:ff:73:2e:e6:37:c5:84:66:9f:db:e1:14:41:2f:73:c8:e2:
         f2:d7:f6:56:cd:e2:6d:b7:50:84:d5:2c:36:77:d3:b2:e8:b9:
         92:bf:ef:b8:20:81:bc:e1:ad:0b:2b:2c:9b:74:f8:b6:aa:8e:
         21:60:29:0c:b9:6f:6a:04:a5:1d:d1:39:81:53:6a:86:22:2f:
         45:cc:1f:1a:71:b5:45:22:72:2a:f4:ee:a5:6d:8c:8e:6a:70:
         67:78:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:39:36 2026 by rpki-client