Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          4lV7rww9C6A2Lh8MRwNXtlwNY2Jg9OSK05VHm1kwKeM=
Subject key identifier:   85:E6:27:85:6C:4C:47:DC:E2:89:5F:6A:5F:0A:3B:ED:D2:7A:21:C3
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       09CAD3C359653DB49DF41CEB8DDF7A2889FD69AC
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 12 Aug 2026 16:25:11 +0000
ROA not before:           Wed 12 Aug 2026 16:20:11 +0000
ROA not after:            Wed 11 Aug 2027 16:25:11 +0000
asID:                     273920
IP address blocks:        2803:7b50:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ca:d3:c3:59:65:3d:b4:9d:f4:1c:eb:8d:df:7a:28:89:fd:69:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Aug 12 16:20:11 2026 GMT
            Not After : Aug 11 16:25:11 2027 GMT
        Subject: CN=85E627856C4C47DCE2895F6A5F0A3BEDD27A21C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:65:20:bc:98:e7:90:51:f2:f3:86:8f:57:
                    e5:62:19:2b:92:cf:b3:1f:a9:26:d4:6e:1d:87:5a:
                    02:29:85:23:12:68:0f:94:d1:45:43:4d:24:85:54:
                    b1:6b:3b:74:cf:5d:97:f3:3e:5a:50:d0:0a:1b:d2:
                    d1:41:70:7d:2d:fe:d0:29:ab:ae:9d:43:c9:5b:ff:
                    a9:1f:1e:d0:55:4c:96:67:be:76:92:de:f8:04:41:
                    7c:9c:69:50:35:f8:be:f4:f0:e9:c7:2f:90:72:3a:
                    4d:34:a7:59:c7:ac:7b:e4:2c:e6:da:9d:bf:5f:9f:
                    a5:3f:28:f5:2e:1a:e5:92:1d:ec:49:a3:e8:1d:fe:
                    21:d3:ee:8b:ee:e9:a8:36:36:59:1a:08:8f:19:ef:
                    fa:c7:64:66:3d:ef:51:02:f5:fa:ba:b6:85:39:ea:
                    1f:26:8e:05:03:ed:f4:de:50:c4:2a:2f:82:fe:a4:
                    82:21:05:31:39:5c:d1:17:d7:6a:39:11:fe:b2:9c:
                    ce:5f:81:29:df:3f:86:6c:b1:51:56:d4:30:06:aa:
                    5c:16:a1:30:6c:e3:cf:04:9b:a6:3b:ff:c7:37:ee:
                    ed:95:ce:64:25:a5:0c:70:0f:4d:54:2b:99:f3:15:
                    83:a4:57:d5:53:69:94:c4:09:b0:a6:de:42:30:86:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E6:27:85:6C:4C:47:DC:E2:89:5F:6A:5F:0A:3B:ED:D2:7A:21:C3
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:9c:16:e0:d6:62:4f:67:47:72:2d:f9:92:c4:39:5a:a9:
         c5:2d:41:24:9b:a3:a0:2e:81:ef:fa:a6:e0:45:0b:72:40:f0:
         b0:99:36:6b:a9:0d:1f:60:e0:d0:6d:36:87:28:b4:f3:b6:53:
         6e:58:67:ff:7c:e5:a9:6f:f7:bb:96:35:0c:f4:62:3b:3e:7f:
         2f:1b:3c:63:ea:65:48:e7:66:4d:21:0b:02:65:50:58:5d:d7:
         b4:36:00:f9:8d:fa:ef:51:e7:8d:a7:54:fc:b4:23:03:de:66:
         0c:bb:ce:66:e4:2a:3d:58:b4:ce:c6:f8:e2:f0:99:e7:67:b5:
         9a:2e:7a:b4:04:56:d4:d1:3a:cf:3e:73:96:96:5e:9f:fa:89:
         9d:9d:18:4b:8c:7e:00:70:11:81:2f:b6:28:28:01:fa:31:fc:
         35:ec:bf:4d:3c:37:c3:c4:04:15:17:0b:a1:fa:5d:1b:08:b1:
         f5:69:8e:86:aa:69:de:e0:89:73:3f:a5:08:33:b2:31:e0:18:
         7a:69:d5:97:5a:6f:46:25:8f:25:fa:e9:fc:b4:aa:c3:6e:95:
         c5:9d:ea:ab:ec:e8:2a:c3:22:28:ad:30:69:3e:cb:04:41:d7:
         f1:1f:8a:31:42:1b:19:ad:87:66:b1:5e:db:db:f1:e4:1b:5a:
         e5:5b:27:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:41:21 2026 by rpki-client