Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa
File:                     323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa (raw, json)
Hash identifier:          Swmu+BjwHKVrqKuSQ4jIDf69+Z47kxdvq3lyZMaQqDs=
Subject key identifier:   7B:11:CA:15:C6:BB:51:88:02:4D:E1:2D:D6:9B:01:37:D8:F3:31:E1
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       0AAB6410C23650200DC4A5FCBEF5DA44C4957985
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa
Signing time:             Fri 04 Sep 2026 15:33:53 +0000
ROA not before:           Fri 04 Sep 2026 15:28:53 +0000
ROA not after:            Fri 03 Sep 2027 15:33:53 +0000
asID:                     262186
IP address blocks:        2803:de80:1000::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ab:64:10:c2:36:50:20:0d:c4:a5:fc:be:f5:da:44:c4:95:79:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Sep  4 15:28:53 2026 GMT
            Not After : Sep  3 15:33:53 2027 GMT
        Subject: CN=7B11CA15C6BB5188024DE12DD69B0137D8F331E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:a3:a0:ff:99:16:0a:7d:6b:2e:a1:28:74:
                    ce:66:74:07:c0:0b:b9:64:97:bd:69:6e:9a:a7:75:
                    68:d9:76:15:1c:41:f1:14:f1:23:9f:c2:51:59:d9:
                    87:96:df:b6:8a:40:c8:92:f5:93:fd:9a:c8:26:eb:
                    4a:aa:0b:42:a3:21:eb:d8:83:d2:0c:52:6d:a4:a9:
                    c6:df:46:d8:75:0c:2c:3e:78:1a:ed:b2:30:26:db:
                    7b:d7:93:1f:f0:3a:9f:65:63:6b:96:ae:76:91:b5:
                    de:2b:33:0f:09:04:3e:29:f7:3d:29:f5:08:51:45:
                    ac:61:bf:fa:8e:4b:95:76:e7:14:5c:b3:20:31:69:
                    95:bd:42:46:a5:09:cf:00:25:76:39:fd:7d:b0:b7:
                    3d:61:63:4a:b4:e3:43:f7:b4:bf:92:f5:a4:01:7f:
                    e1:7d:fe:d3:50:3e:b6:bb:1c:3a:34:0f:30:6f:78:
                    1d:a7:cd:43:c7:15:c5:b7:a0:39:f5:4e:f1:f7:e9:
                    57:89:d7:37:90:74:ce:bf:96:e6:c0:af:75:d6:61:
                    90:17:1e:59:eb:d3:02:b9:78:f4:2c:a7:ef:2d:26:
                    65:00:24:57:47:e7:cc:8c:fa:da:f4:25:54:5f:04:
                    f0:45:27:5e:e4:30:f8:f3:76:39:eb:45:3b:a0:17:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:11:CA:15:C6:BB:51:88:02:4D:E1:2D:D6:9B:01:37:D8:F3:31:E1
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de80:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:c9:8f:f0:71:04:67:34:5c:85:99:fb:b6:83:1b:a0:ea:
         20:d7:0d:c6:c7:a4:33:bd:4c:b9:e8:85:1b:49:1a:b0:29:fb:
         3e:86:88:50:a0:07:f9:76:4c:d4:9e:35:bc:25:3d:3e:4d:36:
         61:88:82:6b:e8:2c:12:d0:45:6c:7d:b4:04:a1:1d:d4:2f:b3:
         b0:dc:dd:f5:89:f4:b1:84:ba:7a:da:46:44:5e:7c:57:3d:51:
         70:43:ba:d2:d8:05:f9:34:f0:65:31:66:25:37:0f:d5:25:1c:
         b9:21:08:67:4b:2a:2a:63:24:82:af:dc:19:dc:91:fc:fb:6a:
         a4:b1:b4:19:13:5c:62:01:0a:fc:3c:b4:a3:36:b8:1d:cd:12:
         b5:1e:23:4d:47:23:4d:a6:da:42:21:54:4c:d4:22:18:72:b0:
         16:93:fb:1c:31:cb:6a:fe:5b:de:7f:b2:97:9a:e0:69:0d:2a:
         79:80:08:ba:ce:9b:5b:77:19:36:14:ae:1a:bd:d0:c1:93:73:
         32:a4:55:df:c1:18:fb:c4:20:d6:44:a8:fa:9d:d8:c3:79:b7:
         05:4d:1c:d7:f1:45:89:7f:70:6f:70:f0:0b:35:4a:23:f9:85:
         61:56:c2:0c:ff:ba:b1:1d:a9:fa:22:a2:2d:75:51:cb:56:d7:
         1d:41:21:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 9 21:31:04 2026 by rpki-client