Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/323830333a643763303a3a2f33322d3332203d3e20323635373731.roa
File:                     323830333a643763303a3a2f33322d3332203d3e20323635373731.roa (raw, json)
Hash identifier:          3SBRmWygM2v6k/9LVXhNqN9UgSGVSrNK0lVh3OM5dV8=
Subject key identifier:   A5:67:9F:79:8D:B4:EA:7B:16:C5:FB:A9:F6:A5:4C:97:E3:D6:36:05
Certificate issuer:       /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial:       5A844D552A8DC36DC019F32E00F91F275EE16D
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/323830333a643763303a3a2f33322d3332203d3e20323635373731.roa
Signing time:             Wed 09 Sep 2026 15:45:00 +0000
ROA not before:           Wed 09 Sep 2026 15:40:00 +0000
ROA not after:            Wed 08 Sep 2027 15:45:00 +0000
asID:                     265771
IP address blocks:        2803:d7c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:84:4d:55:2a:8d:c3:6d:c0:19:f3:2e:00:f9:1f:27:5e:e1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
        Validity
            Not Before: Sep  9 15:40:00 2026 GMT
            Not After : Sep  8 15:45:00 2027 GMT
        Subject: CN=A5679F798DB4EA7B16C5FBA9F6A54C97E3D63605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:fd:4a:54:21:f4:b2:50:10:61:7b:45:da:
                    63:d5:43:bb:ba:e2:04:2c:64:08:3c:96:be:f2:a9:
                    2d:de:b2:37:69:28:41:aa:39:c0:f5:87:c2:56:bd:
                    b8:2c:a6:be:13:e0:81:9c:1d:dc:11:e4:a5:5d:0d:
                    39:b4:d6:64:35:77:ed:1a:20:fe:9d:fa:fd:b0:d3:
                    1b:5c:9b:b7:0d:4b:51:ba:74:92:dc:f5:43:03:ca:
                    34:de:e4:72:90:1c:11:6e:4e:b9:5e:54:82:ad:f7:
                    16:ee:cf:a3:09:7e:a8:a6:e4:61:a7:c7:2d:00:fb:
                    70:c4:74:ad:c0:54:06:3c:bd:75:6e:69:fc:d4:b0:
                    31:36:8f:47:0f:9d:e3:fb:79:40:4f:71:71:f9:45:
                    dd:5c:e8:48:76:c2:35:e0:d9:f6:1b:07:9c:e9:fe:
                    62:45:1c:51:74:3c:14:9d:2d:26:aa:9c:95:e5:75:
                    d8:2f:6a:93:91:05:d6:37:ec:72:24:c8:0c:b8:a5:
                    50:a5:b6:86:29:27:0f:7e:d0:09:df:19:d8:5b:c0:
                    bf:09:7c:8c:fd:e7:39:ee:75:73:67:09:49:fe:40:
                    b7:2f:a1:23:71:8f:b6:74:c6:28:e5:67:4d:76:be:
                    4f:ea:59:ff:c4:16:3e:b8:c2:81:36:77:e4:9d:29:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:9F:79:8D:B4:EA:7B:16:C5:FB:A9:F6:A5:4C:97:E3:D6:36:05
            X509v3 Authority Key Identifier:
                keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/323830333a643763303a3a2f33322d3332203d3e20323635373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:85:a6:99:12:a1:4f:9d:17:6b:54:95:c5:a1:35:a8:f4:
         f4:1a:cf:13:92:14:c4:92:4d:9c:59:af:70:99:71:85:b2:7b:
         64:56:83:07:9b:81:a8:de:ca:1a:3e:be:6a:e7:dc:fd:11:b3:
         3b:c9:21:56:b9:a4:15:b0:a1:7b:5e:a7:c0:f0:a0:6c:9f:f1:
         f3:61:d4:e5:bc:cc:39:43:82:43:9d:64:df:7f:d0:58:08:a6:
         8a:2c:a6:ad:ee:57:17:01:c9:d9:41:8e:49:a8:31:25:06:40:
         9d:31:00:da:2d:d7:1c:80:20:08:e1:f8:ea:12:b1:af:49:30:
         9e:48:7b:9e:c2:7f:46:e6:c4:b9:b4:ad:b8:bd:c2:91:3e:9c:
         95:16:a9:cc:de:1b:6b:97:a6:3d:e9:41:ff:d2:c2:5e:9c:29:
         eb:37:88:17:fb:44:29:f9:a1:4a:aa:e9:2c:52:12:bf:9d:78:
         da:45:58:f3:36:11:a9:20:77:9f:e2:31:b1:14:9d:6f:39:43:
         3c:c7:78:05:6f:d9:b6:be:e9:1f:15:f9:c8:a8:71:a3:a0:91:
         ad:af:d2:7d:72:86:38:e6:07:e6:9e:94:03:f2:e4:e9:63:52:
         8a:63:68:e4:a9:f3:b8:c8:3d:6d:bc:65:7a:60:ab:f0:ec:cf:
         02:ef:7a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:52:07 2026 by rpki-client