Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e20323635373638.roa
File:                     323830333a393463303a3a2f33322d3438203d3e20323635373638.roa (raw, json)
Hash identifier:          bhaIUACCxEeDtHfxlQtweWS1QsLdocirJHiJjxZBa2Q=
Subject key identifier:   7B:ED:61:D9:2C:A3:4E:7B:7F:58:6A:8E:18:C7:32:25:5F:E0:76:DE
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       3560085DDC45793C4A7A925B12081EF07AB9BDD1
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e20323635373638.roa
Signing time:             Fri 25 Sep 2026 13:36:43 +0000
ROA not before:           Fri 25 Sep 2026 13:31:43 +0000
ROA not after:            Fri 24 Sep 2027 13:36:43 +0000
asID:                     265768
IP address blocks:        2803:94c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:60:08:5d:dc:45:79:3c:4a:7a:92:5b:12:08:1e:f0:7a:b9:bd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Sep 25 13:31:43 2026 GMT
            Not After : Sep 24 13:36:43 2027 GMT
        Subject: CN=7BED61D92CA34E7B7F586A8E18C732255FE076DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:e8:02:43:d4:c9:8e:95:a5:0f:f4:48:0a:
                    83:97:0c:e4:00:a7:5d:65:a7:b1:8a:62:2c:dd:f6:
                    78:8d:9f:a4:c6:42:ec:ec:17:a3:4b:fa:ae:ba:9a:
                    d2:95:8c:08:a3:64:95:5e:9b:60:0f:76:7f:eb:91:
                    27:96:94:c9:12:e0:26:ba:a6:2c:b1:34:f9:91:54:
                    4b:44:7a:d5:94:80:00:e7:2d:92:28:21:46:cb:cc:
                    79:a3:bb:2e:4f:48:80:6b:b7:df:c5:55:44:dd:fc:
                    67:e9:c1:ef:38:e9:37:ad:57:aa:69:97:86:1d:f1:
                    bd:37:45:c0:b6:10:1c:0e:5c:1c:ff:3c:ba:3f:d2:
                    7f:20:bb:95:8e:90:68:e9:6a:b4:b1:d4:54:0f:81:
                    69:7c:78:53:e7:0b:83:3d:37:79:0f:7d:6c:d2:c8:
                    d1:05:93:bc:e3:05:f3:5a:ac:74:c2:36:a4:85:fc:
                    c1:54:d6:4e:32:fd:83:4c:23:81:ad:72:c7:28:64:
                    b5:b8:ae:83:09:8d:99:3b:b9:28:46:31:3a:45:09:
                    51:23:b1:a1:c0:16:81:aa:e2:7a:fb:75:28:90:45:
                    d0:de:d9:22:54:dd:48:c6:2c:63:1e:d6:18:56:e7:
                    bc:98:4c:46:9d:68:1f:29:9b:c7:b0:19:1f:9d:fe:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:ED:61:D9:2C:A3:4E:7B:7F:58:6A:8E:18:C7:32:25:5F:E0:76:DE
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e20323635373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:25:23:96:5a:90:1e:6a:d0:cc:46:5a:22:de:9c:e1:58:
         65:3b:86:5e:92:e4:b5:dc:d2:6e:af:97:af:2a:e5:4d:e0:01:
         30:58:f2:4c:3b:d2:cc:32:bc:64:90:81:91:89:86:37:e0:61:
         28:b7:18:fe:f3:9a:3b:d3:19:37:72:ca:75:ef:20:e3:65:fe:
         f3:a3:63:91:93:ad:3c:9d:6a:12:d4:22:ea:56:8e:4e:eb:5f:
         b7:68:91:bc:96:97:07:53:e1:b9:ef:fa:8e:ae:4d:69:7c:2e:
         25:b9:2b:22:bc:07:b5:f1:e4:91:fc:e8:09:04:9a:2c:1f:45:
         70:35:dd:e0:d9:eb:ea:54:82:9d:78:3c:cf:b7:ca:b7:01:84:
         a0:12:f4:b4:95:44:03:03:ea:3d:dc:01:27:ec:81:4b:67:22:
         e7:83:bc:dd:a6:39:1e:51:77:7c:64:18:e3:62:8a:9c:dd:20:
         ad:e9:2c:ae:5f:18:4d:2d:28:5e:07:7c:b8:bc:9f:7d:87:ad:
         58:4b:59:9e:8a:dd:4b:e6:7d:ee:ac:20:1d:6a:1e:a2:f3:1e:
         4c:68:f9:1d:2a:5d:a9:f0:9e:3c:56:80:0f:16:ad:ec:05:ab:
         e3:8e:99:29:36:a4:33:5a:51:89:83:1d:1e:45:61:84:99:a3:
         0b:67:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:33:33 2026 by rpki-client