Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          3q19Nq5PW4BdCgqoN/SzbOOd39So1jkUmzH2HRTDnhQ=
Subject key identifier:   69:55:F3:77:D7:5B:4F:1B:37:BD:4E:6C:31:31:F4:AC:11:61:55:94
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       1F4CBF53D8CD5692654AAF7F374840029739C62E
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 12 Aug 2026 16:25:11 +0000
ROA not before:           Wed 12 Aug 2026 16:20:11 +0000
ROA not after:            Wed 11 Aug 2027 16:25:11 +0000
asID:                     273920
IP address blocks:        2803:7b50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4c:bf:53:d8:cd:56:92:65:4a:af:7f:37:48:40:02:97:39:c6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Aug 12 16:20:11 2026 GMT
            Not After : Aug 11 16:25:11 2027 GMT
        Subject: CN=6955F377D75B4F1B37BD4E6C3131F4AC11615594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:8e:ca:f0:d7:17:b0:e0:b7:64:1c:8c:cd:
                    b7:15:c8:41:2e:91:4f:87:ff:1c:8b:94:45:14:c2:
                    33:49:ff:99:29:0d:f6:98:1a:22:fb:c4:27:29:e1:
                    29:83:39:48:94:83:b8:83:ae:1d:78:cd:67:ba:d4:
                    ac:58:0f:6b:26:09:90:db:be:cc:b1:7e:de:5c:f0:
                    1a:8b:e1:46:57:61:4c:11:d7:0f:c6:70:69:77:d0:
                    d7:16:78:8c:31:53:44:6b:8c:5b:9a:a0:d2:9b:2a:
                    26:80:52:27:5b:77:68:9b:ba:c8:a2:d4:ad:98:e3:
                    36:c6:55:3b:f4:66:a5:98:56:48:45:f9:90:a3:6d:
                    6e:7d:b2:81:ea:f8:e8:25:f8:0a:ae:ca:72:65:28:
                    be:ae:4f:20:5c:fc:6a:51:bf:64:70:27:e8:3c:fa:
                    27:01:45:4e:cd:01:22:35:79:71:58:1a:7f:5e:99:
                    ad:cc:07:e4:e8:5c:9d:af:ca:69:02:61:3c:32:a8:
                    c7:8f:c0:7a:9b:13:db:59:f6:84:82:53:99:de:fb:
                    ed:dc:67:5a:62:0d:4d:29:2b:aa:71:cd:b3:6f:0a:
                    ec:c8:d9:6e:48:81:82:78:37:de:07:e6:7d:c4:a9:
                    ab:09:a5:a3:ef:71:8f:ad:0e:1d:0e:fb:d2:72:da:
                    8c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:55:F3:77:D7:5B:4F:1B:37:BD:4E:6C:31:31:F4:AC:11:61:55:94
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:75:2a:d3:92:24:60:97:a9:63:0d:cf:8c:97:b2:de:ad:6b:
         93:7e:ad:8c:b3:00:71:57:cf:c1:49:51:6f:62:e2:83:fe:68:
         25:54:f0:c6:45:33:ee:16:80:6c:f9:b9:ed:72:cb:bb:3d:e4:
         65:bf:d3:ef:63:86:77:08:40:15:f4:b9:e6:61:ce:2f:97:7d:
         15:64:98:32:13:5f:6f:9a:87:08:e4:f7:21:2e:3d:1e:a2:48:
         cd:84:f6:08:2b:4d:d8:c9:4d:a9:2f:05:ab:fb:6e:ad:19:d2:
         37:1b:0b:5b:e9:a5:de:ab:4c:30:22:31:74:ca:df:74:76:90:
         e5:99:7a:61:bf:18:41:00:cc:99:bb:15:e4:f2:a6:46:15:17:
         57:1b:8c:95:c5:8c:dc:87:04:99:29:99:73:b5:2a:67:3f:16:
         03:58:91:00:33:50:d3:c9:6d:27:c2:bf:f3:19:3c:86:99:57:
         86:19:dd:6f:4d:6e:4c:92:91:22:dc:70:14:05:fd:93:d2:65:
         10:c9:84:be:0e:42:6a:69:19:3f:a0:a0:d5:80:37:06:08:dd:
         45:ea:f8:64:f9:76:9a:c3:d2:18:d8:9c:a8:40:3c:1f:fa:17:
         bc:d4:cc:6f:36:0e:97:cb:89:db:04:4b:2c:87:6a:3a:95:91:
         ce:54:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:17:43 2026 by rpki-client