Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3730303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3730303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          eqg/xwLizKhW3AfqAdecgzGz1X2/c0Fs1t2WyXvMiH4=
Subject key identifier:   D0:7B:65:89:1F:A3:BC:1F:C6:51:22:5B:D5:11:0E:9C:E0:77:51:BD
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       5B5720566A0914084AC10E7BF3FACE4F683286D9
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3730303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 28 Aug 2026 04:32:49 +0000
ROA not before:           Fri 28 Aug 2026 04:27:49 +0000
ROA not after:            Fri 27 Aug 2027 04:32:49 +0000
asID:                     273196
IP address blocks:        2803:2650:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:57:20:56:6a:09:14:08:4a:c1:0e:7b:f3:fa:ce:4f:68:32:86:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Aug 28 04:27:49 2026 GMT
            Not After : Aug 27 04:32:49 2027 GMT
        Subject: CN=D07B65891FA3BC1FC651225BD5110E9CE07751BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:f2:8f:cb:40:4d:b4:da:85:7d:89:b2:29:
                    6d:d0:1e:a6:c8:ec:1a:f7:56:00:cc:c7:a6:cb:f3:
                    5d:1b:3d:4b:f8:2f:c2:aa:15:40:87:26:d2:99:8e:
                    d6:20:bb:bd:3f:1b:0e:0f:bb:44:97:fc:b2:8b:64:
                    ca:8f:7e:06:55:7e:ce:f3:0a:76:2b:18:d1:cb:97:
                    6a:03:ae:9e:df:97:f5:5a:3a:12:b0:39:12:16:67:
                    eb:63:aa:8d:20:b8:2f:a3:5a:2f:be:45:98:00:2e:
                    e8:00:6e:2b:11:26:2c:f5:91:4f:5c:87:43:75:db:
                    52:bd:aa:dc:e5:12:82:13:9c:e5:a3:8e:c8:51:0c:
                    80:f5:e4:a2:a4:ea:76:2e:ad:29:3b:d9:52:80:21:
                    04:78:1d:c3:bd:f4:b1:ca:58:1c:58:2e:e4:9d:a7:
                    81:c7:0f:2f:bf:ea:72:d0:9f:7a:6c:12:37:b3:40:
                    fe:a4:b5:da:44:42:ab:e0:76:8e:97:02:aa:90:c4:
                    81:df:a4:99:61:a8:74:90:eb:8f:cb:a0:ea:2b:da:
                    12:fd:ae:1a:ab:13:e0:bf:72:e6:57:49:7c:37:9e:
                    31:ef:d8:48:b1:16:5b:f3:c2:c0:83:6b:a5:7a:f0:
                    49:6c:47:ce:3c:28:a5:24:99:67:62:a0:62:75:bd:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:65:89:1F:A3:BC:1F:C6:51:22:5B:D5:11:0E:9C:E0:77:51:BD
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3730303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:f3:68:7c:fa:0b:26:98:78:f0:d8:97:d7:54:01:40:f8:
         2d:26:97:67:7b:01:09:41:0f:65:0d:fc:81:53:e4:8f:39:49:
         95:69:55:24:ac:5a:17:39:17:db:d3:a4:4d:32:19:14:c3:57:
         f4:41:93:ee:8f:27:2d:9d:1c:a6:7b:6f:10:4f:99:5d:7e:5d:
         a5:7e:3e:d8:22:0d:1f:30:c1:9d:7a:41:86:c2:f0:81:e1:e1:
         91:15:53:3f:6c:a0:38:73:7b:20:4c:28:9d:7c:aa:36:07:11:
         22:b7:7f:e6:30:0d:37:42:b8:60:bf:bd:9f:fb:cc:8d:c1:f2:
         78:4e:18:3d:5a:c9:6c:b0:cd:e4:7e:49:fb:dc:7e:d9:38:e6:
         67:3c:a0:a6:91:33:d1:8b:50:25:49:40:cd:64:c8:45:ab:4a:
         1f:71:10:08:30:e3:b7:f4:19:1d:cb:43:1a:8d:d4:45:27:5a:
         f0:41:f9:22:cd:7a:11:27:41:6e:54:96:2e:06:27:cb:fb:34:
         57:c4:87:45:70:36:b0:7f:80:6d:fd:b0:89:f4:8f:4d:1c:72:
         08:7b:53:09:56:28:28:7a:2e:33:78:aa:3f:eb:7b:1c:7e:20:
         85:66:0b:f4:d8:cc:21:ee:8b:71:c8:fc:6e:5b:71:3e:d4:51:
         8e:4d:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:51:10 2026 by rpki-client