Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a35303a3a2f34342d3434203d3e20323637393139.roa
File:                     323830333a656536303a35303a3a2f34342d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          cb3VIXKEY4J4AquMKVt/oOOOrk7Pnnr/mMESrb3XUAg=
Subject key identifier:   66:B1:C8:FF:9F:20:62:3F:5F:2A:D7:52:74:35:53:FD:89:5C:35:6D
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       1E23E325A8080AEC9E5B5E8AE5927962D3B205DA
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a35303a3a2f34342d3434203d3e20323637393139.roa
Signing time:             Sun 20 Sep 2026 03:20:00 +0000
ROA not before:           Sun 20 Sep 2026 03:15:00 +0000
ROA not after:            Sun 19 Sep 2027 03:20:00 +0000
asID:                     267919
IP address blocks:        2803:ee60:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:23:e3:25:a8:08:0a:ec:9e:5b:5e:8a:e5:92:79:62:d3:b2:05:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Sep 20 03:15:00 2026 GMT
            Not After : Sep 19 03:20:00 2027 GMT
        Subject: CN=66B1C8FF9F20623F5F2AD752743553FD895C356D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:8d:ac:0c:1f:18:88:22:de:db:84:e0:67:
                    46:9f:6f:3b:a3:58:dd:aa:35:16:a6:90:30:8c:b8:
                    a2:aa:4e:7d:cc:69:2e:1b:d1:dc:7c:3b:f4:12:1c:
                    38:e5:0f:7a:bc:3d:df:0a:4e:f2:bd:66:25:3a:dc:
                    0e:a6:c1:e6:ca:1a:2b:75:6f:1f:13:67:84:3a:48:
                    e4:bf:64:53:e3:68:bc:47:56:26:c4:e2:eb:a3:91:
                    73:de:cd:88:94:eb:4d:70:03:64:c2:5f:70:fd:7e:
                    30:fa:6f:3f:45:29:ed:0d:ab:d1:23:7b:14:2f:d6:
                    fa:52:94:bb:44:72:ea:a8:cd:f9:f9:d8:03:74:ba:
                    0e:31:67:72:da:5e:f9:b3:78:d6:35:1b:22:41:2b:
                    a9:a9:bc:a3:ea:5f:f0:89:05:fa:54:3c:5f:95:28:
                    7a:34:f4:76:a0:34:28:30:91:1f:75:8f:38:92:60:
                    26:21:e2:4e:34:32:32:92:b7:64:96:ee:05:c4:c5:
                    7b:7a:7c:c1:0a:49:41:b0:fd:34:c9:1d:84:f4:39:
                    22:47:2d:f6:57:3f:8f:2b:59:40:a2:48:97:99:f9:
                    53:8d:41:c5:0b:93:e6:f9:7b:1e:6e:27:53:45:ca:
                    00:06:51:cd:bc:96:dd:0b:89:6a:37:95:45:c7:2f:
                    6f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B1:C8:FF:9F:20:62:3F:5F:2A:D7:52:74:35:53:FD:89:5C:35:6D
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a35303a3a2f34342d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:a4:cc:1d:3d:ed:4b:a1:17:f8:0b:89:03:f0:26:e3:3c:
         70:2a:e0:34:4e:c3:67:d0:ce:7d:2e:65:7e:ff:89:c8:38:a2:
         d8:ae:a7:a8:c6:60:7c:1c:73:fd:7f:eb:fc:26:81:a7:31:92:
         9c:db:ae:06:46:98:10:ef:17:84:31:d3:11:9a:58:b7:dd:60:
         c2:45:d7:32:4a:0a:f7:b3:b6:46:9c:36:9c:97:45:ca:e7:3a:
         7d:f3:34:7a:7a:01:a2:05:9c:c7:0c:33:57:7d:b2:8f:1e:95:
         0f:9f:55:dc:7c:05:f2:cb:eb:a9:9c:6d:b6:0e:85:72:d5:dd:
         23:b8:f0:37:0d:69:91:d8:c2:4c:54:e0:20:37:a6:25:1f:ee:
         13:ec:2e:c2:10:7a:b1:68:f5:06:bd:c1:aa:5a:93:46:89:8a:
         ed:56:b0:af:d1:d6:ce:89:44:e7:3b:50:eb:bd:c9:48:85:9b:
         20:cc:16:6d:ed:e3:cc:95:a4:a5:f7:f6:13:90:dd:ba:02:52:
         8d:a7:21:35:7a:63:2b:be:ce:b3:9e:f0:c4:a8:96:d8:54:75:
         16:2a:8c:0e:89:e0:25:2b:5f:ca:d6:61:4f:2f:fe:85:ce:a9:
         f5:07:f8:32:22:66:0f:80:71:ee:67:4a:13:05:78:33:71:46:
         f7:82:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:27:55 2026 by rpki-client