Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          i9uo2cxHrx2AeaK8TraXl17orgxt+5RVXTQ/Sc2Fnkg=
Subject key identifier:   16:07:E3:AF:F7:08:28:49:4D:B4:0D:00:12:AB:95:56:E4:E9:40:10
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       4673A76FE4D6540720AE593FF36072EBA23B8CF4
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 28 Aug 2026 04:32:49 +0000
ROA not before:           Fri 28 Aug 2026 04:27:49 +0000
ROA not after:            Fri 27 Aug 2027 04:32:49 +0000
asID:                     273196
IP address blocks:        2803:2650:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:73:a7:6f:e4:d6:54:07:20:ae:59:3f:f3:60:72:eb:a2:3b:8c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Aug 28 04:27:49 2026 GMT
            Not After : Aug 27 04:32:49 2027 GMT
        Subject: CN=1607E3AFF70828494DB40D0012AB9556E4E94010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:09:31:ab:68:b2:48:3a:81:fa:73:c1:88:
                    2e:97:26:92:0f:e9:24:92:b9:42:04:a4:75:63:eb:
                    df:f1:ed:c0:4d:a1:7a:57:eb:1a:4c:c8:9f:b6:1e:
                    9b:76:72:b9:3f:6a:c8:b3:46:62:41:8a:96:82:f8:
                    00:97:3e:a6:05:7d:9a:23:fc:15:21:6e:5c:ee:6c:
                    df:81:05:d8:19:61:83:c0:e6:01:a6:df:a7:f4:d6:
                    8b:70:ef:ca:78:42:ad:23:ba:01:10:33:ec:ac:08:
                    a2:43:ec:e6:d3:c6:d3:dc:fd:f7:25:4a:4f:4b:4a:
                    ea:fb:95:fb:a4:bc:f3:40:15:44:6c:58:8b:93:45:
                    38:52:5a:16:b0:c0:16:da:ca:13:df:41:d8:29:db:
                    7a:7b:c9:a8:cd:e0:e6:0d:13:75:a9:a8:72:66:90:
                    43:45:41:de:5f:29:60:c7:c6:10:3b:86:f9:d5:3f:
                    9c:86:42:c4:de:a3:80:42:80:98:70:53:43:6d:7b:
                    25:4a:a6:c5:47:73:4b:f5:17:7c:c9:cf:13:10:7f:
                    3c:fb:88:85:28:ce:6e:c9:ef:10:05:38:64:1a:a2:
                    04:9e:18:c5:89:43:f5:83:4d:b1:70:f3:1e:ef:5f:
                    f8:f8:7c:9e:3c:8d:ef:06:ab:78:3c:ab:ad:29:7f:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:07:E3:AF:F7:08:28:49:4D:B4:0D:00:12:AB:95:56:E4:E9:40:10
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:e8:c8:39:3f:f8:f3:9c:4a:c5:6e:f9:a6:52:5b:e3:65:
         52:d8:8b:a7:e0:bc:f9:84:ef:fb:37:d6:30:37:b8:69:12:0d:
         b0:69:8e:e4:7d:a8:cc:08:9f:73:48:dc:71:a0:c4:b2:24:33:
         33:e7:c3:68:1c:86:39:80:1e:db:13:46:db:e1:c9:0d:07:5d:
         b1:05:b9:fc:5f:51:38:af:f2:cb:c5:22:0f:ba:2b:27:1b:c3:
         7e:af:8a:ba:c4:64:82:37:63:09:cb:67:6b:8f:52:bc:c2:1f:
         7b:55:c3:3d:8f:09:72:aa:06:81:49:95:f3:c8:54:03:6a:2f:
         c0:d6:fb:92:7c:10:12:52:52:aa:5c:a1:7b:f3:ec:e7:a0:d5:
         60:dc:29:ec:90:bc:8b:f2:05:60:3a:63:77:46:79:c3:a4:7d:
         be:25:7c:b3:d3:5d:93:56:ff:4d:d2:65:37:ce:61:02:ca:29:
         a0:bc:dd:85:b0:13:a8:0e:98:e2:f3:ea:19:c0:14:07:23:22:
         30:ce:a7:6c:b2:80:5c:9e:0f:16:0d:b7:7a:ac:16:20:d9:61:
         70:34:bb:18:23:61:9c:08:0d:bc:15:bd:8d:6a:6d:60:17:27:
         76:74:30:8a:64:33:c7:d5:d4:bb:9f:6f:d1:10:78:97:b4:64:
         54:28:32:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:44:15 2026 by rpki-client