Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          +UxsD1Xvhq9y8zNHwwY5tMPhs0WY/n0hdEcPWBQm78M=
Subject key identifier:   89:AD:5B:A6:D2:4D:08:6C:18:12:8B:C3:9C:44:13:CC:1A:86:A4:64
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       01656BECABFF65CECC6FA7D9D2D6499D408BC287
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 02 Oct 2026 17:37:48 +0000
ROA not before:           Fri 02 Oct 2026 17:32:48 +0000
ROA not after:            Fri 01 Oct 2027 17:37:48 +0000
asID:                     263750
IP address blocks:        2803:a040:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:65:6b:ec:ab:ff:65:ce:cc:6f:a7:d9:d2:d6:49:9d:40:8b:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Oct  2 17:32:48 2026 GMT
            Not After : Oct  1 17:37:48 2027 GMT
        Subject: CN=89AD5BA6D24D086C18128BC39C4413CC1A86A464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:94:34:1f:dd:26:4a:70:7a:6e:11:c6:06:
                    c2:3a:5b:73:c6:9d:21:e1:e6:3d:f8:e7:21:79:00:
                    f2:5c:6b:53:ef:18:b2:64:9a:e1:11:33:4e:71:3d:
                    6a:52:71:70:5e:ef:0c:3f:c9:33:f5:a1:06:4a:35:
                    1d:da:61:bd:ef:20:1d:5c:7c:c7:57:47:c7:9f:23:
                    e3:9b:03:05:3f:9e:08:68:c8:c6:f6:a3:d8:24:47:
                    95:20:c7:82:d5:fc:28:ef:a2:c1:a4:85:71:95:09:
                    66:72:2a:63:52:21:a4:21:2e:03:52:0c:80:5c:75:
                    96:b9:53:51:17:41:bd:5a:55:ba:c4:aa:ad:70:37:
                    9a:fe:05:b4:06:5e:d3:f5:f2:4f:ef:f8:54:2e:8e:
                    88:42:83:c9:be:bc:b1:83:09:80:10:32:da:92:d1:
                    7d:04:c4:bc:f9:bd:9c:23:72:6e:bb:6f:51:94:7e:
                    0c:1e:81:cc:94:87:ee:9b:af:42:47:78:5a:0a:e8:
                    7f:af:c5:85:a6:74:c4:98:fd:37:03:32:29:a8:06:
                    43:a6:2f:0b:e7:d8:dc:54:e4:58:11:d8:51:16:c4:
                    ae:a7:1b:6d:02:a4:0e:43:88:20:18:c6:d1:f0:0d:
                    ec:fe:99:2e:4e:a9:e6:13:ab:90:d7:d7:03:5f:e0:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AD:5B:A6:D2:4D:08:6C:18:12:8B:C3:9C:44:13:CC:1A:86:A4:64
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:e1:fe:fd:34:cf:1d:66:08:be:7b:de:92:64:78:5b:ec:
         43:e6:a3:73:9b:ae:f7:c3:0a:2e:65:a1:16:5d:92:a6:7b:88:
         5e:df:56:10:80:bc:ae:78:9d:2c:67:e3:8a:25:d3:5d:8c:8f:
         86:21:49:4a:31:c7:51:09:46:5c:70:65:1a:51:e1:a4:ff:c2:
         2b:47:0c:7c:08:c3:53:af:9c:bf:f9:42:47:23:f7:01:c3:1a:
         03:25:15:43:fe:9b:5e:3c:cc:ed:c5:be:84:1a:5d:6c:1d:f2:
         5f:16:36:53:8e:aa:f8:a5:57:ad:c2:f3:11:25:37:2f:1d:e4:
         6f:23:76:28:95:e5:ca:c8:15:a6:ad:ca:0a:83:43:17:81:4e:
         f6:02:a7:8a:b5:a9:5c:0c:3c:71:ea:93:5b:49:0a:3e:09:68:
         8e:6f:cf:c9:87:63:f0:03:16:1f:3d:b2:42:07:ed:06:97:08:
         df:2a:3a:5b:d2:0f:d3:eb:b4:4d:bf:22:86:9f:d4:4f:e9:a2:
         d2:32:ef:8c:f5:97:5a:fb:e6:86:a7:48:b9:ee:8d:ac:2b:3b:
         c5:37:08:d1:67:1f:a7:92:c0:69:ad:f3:bd:f8:44:a1:b5:84:
         21:db:fc:4f:e0:3b:19:97:1e:b8:b9:c1:6c:80:d2:69:31:3d:
         79:c8:6d:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:22:36 2026 by rpki-client