Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          hX5p8XxXq15CqEQ1wLY5I6LZSU8VqQkL4d38NLCvaYo=
Subject key identifier:   EF:5B:41:11:2B:BA:E3:31:59:F8:5F:26:76:54:13:78:67:4C:1B:BC
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       4BEA27A57C23B4829E237563BD9272A70A097046
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 02 Oct 2026 17:37:51 +0000
ROA not before:           Fri 02 Oct 2026 17:32:51 +0000
ROA not after:            Fri 01 Oct 2027 17:37:51 +0000
asID:                     263750
IP address blocks:        2803:9ba0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ea:27:a5:7c:23:b4:82:9e:23:75:63:bd:92:72:a7:0a:09:70:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Oct  2 17:32:51 2026 GMT
            Not After : Oct  1 17:37:51 2027 GMT
        Subject: CN=EF5B41112BBAE33159F85F2676541378674C1BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:9e:80:49:f9:65:79:78:3d:29:e5:6b:cf:
                    ed:1e:1b:d3:34:d5:42:bd:98:1c:2f:f6:2c:a5:81:
                    05:af:9b:fe:cb:37:98:7f:46:e9:1e:f3:32:4a:16:
                    96:40:a8:3a:15:db:de:59:f3:18:4f:2e:0c:ea:8a:
                    0d:c9:93:09:2d:13:76:ce:02:65:55:69:53:d0:2a:
                    dc:e5:fe:7c:29:23:dc:80:f4:63:5a:ae:84:60:21:
                    7b:89:be:b0:1d:60:55:bf:67:19:4d:d4:c6:25:1b:
                    4b:91:6d:a1:69:92:d7:c7:10:07:cb:6b:17:b7:86:
                    d5:71:8e:1a:fa:90:08:df:9c:30:ac:db:fd:c5:3f:
                    87:b0:7c:d9:33:a0:8f:5f:5e:32:a6:eb:2e:92:36:
                    5c:8e:36:4c:15:9e:4f:23:4f:43:6b:46:13:31:42:
                    ad:5b:da:2d:8f:5b:50:26:1a:db:0d:ca:ff:96:4f:
                    e3:16:5d:e6:a8:79:a5:31:31:b4:be:53:50:f9:39:
                    fb:a7:6b:0f:a1:37:2f:c6:ac:a2:c3:54:15:42:7d:
                    1b:c5:ea:9a:77:57:fe:85:1f:98:93:5c:04:12:c5:
                    aa:fa:2d:31:b0:c2:c0:60:5c:7b:2c:67:15:a3:db:
                    7e:e4:ee:ef:36:8f:ec:b7:f9:00:20:ac:0f:da:f2:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:41:11:2B:BA:E3:31:59:F8:5F:26:76:54:13:78:67:4C:1B:BC
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:85:b4:d6:cb:3f:02:80:ef:bb:8e:15:d9:ef:0c:2d:14:
         62:7c:30:47:76:37:62:a0:cd:96:21:7e:3c:ec:5a:15:fa:bb:
         93:9e:79:68:bb:07:5a:45:4e:3e:50:2e:e6:95:7f:5b:d3:2a:
         5a:43:cb:85:a2:89:ee:f7:f8:96:c6:a9:22:5b:f6:40:cd:d8:
         27:7e:aa:32:f1:e6:c6:42:88:b9:bd:fa:29:45:7b:4d:f2:a2:
         f0:c9:29:cf:11:22:77:89:a5:55:b0:e6:ae:83:3b:22:32:45:
         51:78:0c:6d:d6:4c:69:78:fb:b1:5f:3b:89:9a:07:c1:9a:e0:
         ce:56:e5:c4:94:a1:8e:1b:82:d0:69:41:f7:25:f9:a3:72:4c:
         5f:4d:a9:93:a8:c1:d1:a0:7a:54:d3:d8:a9:69:31:db:12:b0:
         f7:73:e8:86:e7:86:c4:ba:2c:a3:db:29:a7:e7:a4:ec:2b:7e:
         7f:2e:fe:a2:a5:b9:0c:4c:c5:5b:f2:56:43:5b:5d:bc:99:51:
         b4:2d:51:45:32:f5:dd:a3:75:af:65:ed:65:99:fd:dd:15:63:
         fa:ab:14:a2:9e:81:fd:75:80:69:07:bf:93:18:cd:d3:b9:0c:
         e2:f4:00:2a:59:5f:11:dd:ee:f7:b1:bc:dd:85:b7:38:16:fc:
         eb:4c:ae:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:30:11 2026 by rpki-client