Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a393030303a3a2f33362d3336203d3e20323734323032.roa
File:                     323830333a396333303a393030303a3a2f33362d3336203d3e20323734323032.roa (raw, json)
Hash identifier:          cjkGcgS1eob5O+RzSILsiPwCc9yNNgNIIChMhetA9Jk=
Subject key identifier:   09:C7:8E:F2:AD:8F:2E:D0:05:C8:BD:58:6E:A6:8F:6D:D0:7A:D9:63
Certificate issuer:       /CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
Certificate serial:       1D68A1B8FBB193276B8FD3DE39F1D2DF6F9B8020
Authority key identifier: 7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a393030303a3a2f33362d3336203d3e20323734323032.roa
Signing time:             Fri 11 Sep 2026 16:00:00 +0000
ROA not before:           Fri 11 Sep 2026 15:55:00 +0000
ROA not after:            Fri 10 Sep 2027 16:00:00 +0000
asID:                     274202
IP address blocks:        2803:9c30:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 00:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:68:a1:b8:fb:b1:93:27:6b:8f:d3:de:39:f1:d2:df:6f:9b:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
        Validity
            Not Before: Sep 11 15:55:00 2026 GMT
            Not After : Sep 10 16:00:00 2027 GMT
        Subject: CN=09C78EF2AD8F2ED005C8BD586EA68F6DD07AD963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:03:ae:38:01:8b:fc:43:3a:53:74:d1:94:
                    e0:80:4b:7a:12:a4:b3:6e:cf:7d:9e:3e:f0:74:d2:
                    90:8e:d5:bc:14:4d:5b:f2:d0:8d:e0:06:c5:ce:15:
                    d6:94:83:cf:e0:39:5b:4d:0e:ce:1f:92:48:64:46:
                    1a:d8:9d:d5:ee:49:b8:cd:b9:c1:14:96:2e:be:2e:
                    2b:b9:30:89:c3:79:e1:54:f6:bd:ec:fb:8c:9c:27:
                    6a:d9:ab:af:d5:d0:8c:f6:c9:67:da:01:4e:5b:34:
                    3a:41:f4:81:44:76:4f:f5:6d:87:94:41:9d:b7:61:
                    24:00:43:45:dd:a3:ab:3b:1e:4c:29:12:98:f5:d7:
                    53:6d:77:c9:36:27:c1:b6:bc:04:47:86:d5:f6:de:
                    a3:8b:5b:24:aa:59:b3:32:d9:01:f3:51:5c:1f:b3:
                    c6:ee:6f:cf:9e:89:40:0b:a9:b9:0e:8c:ed:4b:d8:
                    2a:a1:0d:47:ce:5d:6a:16:2a:30:0f:a9:c8:14:38:
                    d7:73:84:f1:65:31:21:36:d8:71:03:7b:58:0d:e0:
                    e3:5a:ec:c7:ab:84:89:b1:af:ce:2f:74:68:f7:6e:
                    52:5e:c8:e2:24:da:26:7e:43:78:39:24:93:ee:48:
                    71:f0:ab:0b:a5:86:1f:9d:2c:56:8f:33:87:83:54:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:8E:F2:AD:8F:2E:D0:05:C8:BD:58:6E:A6:8F:6D:D0:7A:D9:63
            X509v3 Authority Key Identifier:
                keyid:7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a393030303a3a2f33362d3336203d3e20323734323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c30:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:11:de:99:5e:2a:b6:85:64:f2:5d:e5:f0:aa:b2:d7:81:2c:
         e6:3d:bc:23:b6:22:04:c0:f7:aa:c6:7b:af:d6:d6:38:08:c0:
         fd:a0:b6:e7:7f:f7:12:42:e3:3e:c7:61:86:47:35:09:01:11:
         83:b6:e7:e6:79:a4:e1:fb:92:90:56:8f:23:53:a2:16:13:02:
         1a:60:15:49:11:61:7a:1a:ee:0e:00:ce:08:5d:51:4a:83:c8:
         59:4c:5f:b0:af:c0:62:e3:aa:63:04:cc:fc:77:69:65:22:cb:
         2c:83:87:73:0a:f1:86:78:ba:46:20:d1:a4:8f:eb:0b:9f:40:
         6a:38:bd:ea:22:f1:00:46:e8:6e:b1:38:b6:b2:8e:75:87:e1:
         7b:5f:bf:50:82:67:fb:20:9f:b1:d7:ce:a0:e9:21:84:2d:a0:
         07:ad:e8:85:d8:fc:63:77:12:79:f5:99:3b:00:ae:8d:e7:22:
         1d:66:d6:b4:af:43:81:f1:f7:8a:14:ac:e0:bd:e4:f1:67:94:
         0a:94:20:92:66:82:a1:dd:e5:68:a3:4d:0e:a8:7a:73:60:fd:
         ee:96:cf:f9:c2:ac:6a:89:4a:a4:82:0e:c7:ae:2c:62:96:17:
         b2:90:0d:7a:6f:b5:01:10:f8:26:98:5a:92:20:10:2c:49:ba:
         e6:08:67:bf
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUHWihuPuxkydrj9PeOfHS32+bgCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M5REY2NUVEMjQ4RkMwNjYyNDU1MjkyMUFBNzE2MUQ2
RDVCQ0ZDNzAeFw0yNjA5MTExNTU1MDBaFw0yNzA5MTAxNjAwMDBaMDMxMTAvBgNV
BAMTKDA5Qzc4RUYyQUQ4RjJFRDAwNUM4QkQ1ODZFQTY4RjZERDA3QUQ5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gwOuOAGL/EM6U3TRlOCAS3oS
pLNuz32ePvB00pCO1bwUTVvy0I3gBsXOFdaUg8/gOVtNDs4fkkhkRhrYndXuSbjN
ucEUli6+Liu5MInDeeFU9r3s+4ycJ2rZq6/V0Iz2yWfaAU5bNDpB9IFEdk/1bYeU
QZ23YSQAQ0Xdo6s7HkwpEpj111Ntd8k2J8G2vARHhtX23qOLWySqWbMy2QHzUVwf
s8bub8+eiUALqbkOjO1L2CqhDUfOXWoWKjAPqcgUONdzhPFlMSE22HEDe1gN4ONa
7MerhImxr84vdGj3blJeyOIk2iZ+Q3g5JJPuSHHwqwulhh+dLFaPM4eDVK29AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUCceO8q2PLtAFyL1YbqaPbdB62WMwHwYDVR0j
BBgwFoAUfJ32XtJI/AZiRVKSGqcWHW1bz8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODUyRjlEMTNCQUMxRjk2RkI2ODhFRTYyN0ZFRTYxNjRF
MTFCNzk0NUQ3NkVDQzc0ODE3M0I0Q0YxNDEwNDVBLzAvN0M5REY2NUVEMjQ4RkMw
NjYyNDU1MjkyMUFBNzE2MUQ2RDVCQ0ZDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QzlERjY1RUQyNDhGQzA2NjI0
NTUyOTIxQUE3MTYxRDZENUJDRkM3LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1MkY5RDEzQkFDMUY5NkZCNjg4RUU2MjdGRUU2MTY0RTExQjc5NDVE
NzZFQ0M3NDgxNzNCNENGMTQxMDQ1QS8wLzMyMzgzMDMzM2EzOTYzMzMzMDNhMzkz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzQzMjMwMzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA5wwkDANBgkqhkiG9w0BAQsFAAOCAQEACRHemV4qtoVk8l3l8Kqy14Es
5j28I7YiBMD3qsZ7r9bWOAjA/aC253/3EkLjPsdhhkc1CQERg7bn5nmk4fuSkFaP
I1OiFhMCGmAVSRFhehruDgDOCF1RSoPIWUxfsK/AYuOqYwTM/HdpZSLLLIOHcwrx
hni6RiDRpI/rC59Aaji96iLxAEbobrE4trKOdYfhe1+/UIJn+yCfsdfOoOkhhC2g
B63ohdj8Y3cSefWZOwCujeciHWbWtK9DgfH3ihSs4L3k8WeUCpQgkmaCod3laKNN
Dqh6c2D97pbP+cKsaolKpIIOx64sYpYXspANem+1ARD4JphakiAQLEm65ghnvw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 11:28:09 2026 by rpki-client