Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e203532323733.roa
File:                     323830333a393463303a3a2f33322d3438203d3e203532323733.roa (raw, json)
Hash identifier:          DI4QYHB7uTHpcBF1gZUaSshIKP1ddIbkAP7SiidJ8MU=
Subject key identifier:   AE:E1:52:41:4B:A6:B6:B2:83:E5:CD:6C:37:1A:6C:A1:11:EF:0B:26
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       5D5F7D2DD1AAC08F61DB89D38D259EE5B4EFF264
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e203532323733.roa
Signing time:             Fri 25 Sep 2026 13:36:43 +0000
ROA not before:           Fri 25 Sep 2026 13:31:43 +0000
ROA not after:            Fri 24 Sep 2027 13:36:43 +0000
asID:                     52273
IP address blocks:        2803:94c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5f:7d:2d:d1:aa:c0:8f:61:db:89:d3:8d:25:9e:e5:b4:ef:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Sep 25 13:31:43 2026 GMT
            Not After : Sep 24 13:36:43 2027 GMT
        Subject: CN=AEE152414BA6B6B283E5CD6C371A6CA111EF0B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:67:43:a0:07:0d:2c:78:48:ab:97:07:79:
                    49:64:68:b2:22:db:ef:a9:6a:c6:a5:ae:ac:78:ac:
                    a3:bc:c2:0d:51:36:6d:0b:85:36:2c:9b:e0:1f:3d:
                    b4:05:9b:c3:ac:98:6d:ca:ca:98:cc:59:4f:55:47:
                    1c:c6:c7:c1:ca:7e:73:39:d7:54:97:0a:4e:f9:ed:
                    ce:c0:a7:58:58:80:a8:ca:64:11:c3:5d:cc:2a:06:
                    05:1e:21:fa:4b:95:28:b8:d0:e7:9a:34:f1:15:42:
                    41:d1:cd:f5:35:a3:f6:04:af:3d:b4:db:65:1e:73:
                    73:fe:e2:e3:f3:ed:f0:6a:2c:93:df:fd:b3:04:cd:
                    3b:07:8d:b4:b8:13:15:d6:51:e5:2c:5d:f1:77:fd:
                    cf:20:d6:b7:f4:24:c4:c3:07:6a:50:25:62:cb:bf:
                    a1:fd:56:62:03:c4:69:51:51:1a:cd:cf:57:e3:7c:
                    0f:2e:24:1d:0d:0e:27:39:b9:71:29:ec:65:89:9d:
                    c6:b2:37:45:8d:03:e6:90:87:c2:c6:66:8d:c2:4c:
                    3b:fa:6a:3d:9a:9a:33:fb:d2:68:6c:00:3c:74:31:
                    b2:de:68:05:2d:ca:ac:5d:c9:d9:d3:7e:69:fa:6c:
                    a0:6e:22:f9:3f:80:8d:86:c1:28:26:56:ef:60:12:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E1:52:41:4B:A6:B6:B2:83:E5:CD:6C:37:1A:6C:A1:11:EF:0B:26
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/323830333a393463303a3a2f33322d3438203d3e203532323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:14:88:79:ed:f8:30:d6:1f:a9:bd:6a:05:d8:b7:16:6e:
         56:83:84:48:4e:73:99:9a:fc:11:ea:e1:71:0b:a4:bc:67:28:
         f5:6f:f0:97:d0:22:16:60:31:ca:ed:ce:57:29:1e:b2:2c:9e:
         e3:da:df:18:8f:1e:d2:4a:d2:65:a0:90:c4:a6:cc:ee:77:55:
         1c:50:4b:8d:c5:30:3d:09:b1:b3:19:c7:4d:59:d4:82:f2:cb:
         11:65:0f:9e:e4:69:9e:fc:c3:db:21:ca:f0:83:9c:65:15:cc:
         04:f3:96:7d:aa:7d:91:14:18:c8:25:c5:4d:f0:c3:70:fa:4a:
         e5:5b:40:63:49:33:3e:ec:a9:eb:5c:bd:9e:c2:66:38:df:aa:
         28:59:47:61:1e:e9:54:dc:e4:9f:08:89:5a:d3:95:10:bd:30:
         94:c5:bf:05:bf:62:1d:33:e8:81:d1:a2:6c:c9:1a:e3:16:11:
         6d:61:d1:33:50:bf:e3:25:35:4c:b6:58:4a:27:ff:6e:d8:53:
         3d:4a:ad:3a:66:54:6a:74:fd:c4:9c:c7:dc:19:98:00:67:a1:
         a4:0e:cc:69:51:ac:bf:8f:a5:c2:d4:e0:77:43:e3:e9:88:8c:
         67:15:ee:cc:96:8f:9b:b3:72:82:ff:a1:bd:7c:e6:6e:16:d3:
         0f:1c:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:28:39 2026 by rpki-client