Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323733303739.roa
File:                     323830333a353763303a3a2f33322d3438203d3e20323733303739.roa (raw, json)
Hash identifier:          gHq9El1hqAtKMiiUK+F5Qc8jsxjWa+yRJEyDbLMzvnc=
Subject key identifier:   6B:0F:2A:E7:E0:73:B0:A6:D1:00:57:43:85:92:32:05:1E:71:4A:38
Certificate issuer:       /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Certificate serial:       638419CCAE589B5672FBB5E23C59A93060474C35
Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323733303739.roa
Signing time:             Tue 08 Sep 2026 21:00:00 +0000
ROA not before:           Tue 08 Sep 2026 20:55:00 +0000
ROA not after:            Tue 07 Sep 2027 21:00:00 +0000
asID:                     273079
IP address blocks:        2803:57c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:84:19:cc:ae:58:9b:56:72:fb:b5:e2:3c:59:a9:30:60:47:4c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
        Validity
            Not Before: Sep  8 20:55:00 2026 GMT
            Not After : Sep  7 21:00:00 2027 GMT
        Subject: CN=6B0F2AE7E073B0A6D1005743859232051E714A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:e9:2b:40:11:e4:bf:52:15:4f:37:b4:4e:
                    fa:92:f2:ac:90:e5:c1:e4:5d:32:4f:ef:35:5d:5a:
                    07:ce:6d:cf:d0:4d:6b:c8:fa:74:4d:ab:f9:39:9d:
                    66:51:c2:d5:52:fe:d2:db:87:26:1a:30:a1:a7:73:
                    76:4f:ce:00:94:33:3a:41:33:2b:cd:78:a6:eb:7c:
                    a1:31:2c:de:ef:2e:89:6b:ed:0e:cc:1a:7b:8a:9b:
                    5b:ab:be:e3:bd:eb:0b:6f:9c:cc:7f:da:ae:96:30:
                    7c:da:6c:c9:68:25:b5:21:d9:f5:4d:0c:76:eb:ff:
                    c8:9b:9b:5b:3e:69:10:ef:af:3a:fd:aa:89:1e:c7:
                    ee:08:5e:01:39:85:98:ce:77:23:19:f9:f0:21:83:
                    d6:b6:bc:ab:0c:71:36:10:81:5e:fc:4e:e9:f1:02:
                    10:78:50:6d:b8:e2:3a:8b:ea:cf:5d:57:4c:d1:03:
                    3a:7e:4e:ed:cb:80:ad:c1:bd:85:46:41:5b:e2:26:
                    29:85:53:aa:f2:39:ba:08:e9:34:56:e8:e6:61:e7:
                    bc:d1:23:62:c5:19:96:26:74:7d:19:8e:d7:af:38:
                    52:ab:e4:8a:fe:89:e3:62:6e:ac:92:a9:35:d9:a5:
                    5f:9a:24:29:db:70:4a:0d:6b:03:44:ef:c3:19:5a:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0F:2A:E7:E0:73:B0:A6:D1:00:57:43:85:92:32:05:1E:71:4A:38
            X509v3 Authority Key Identifier:
                keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323733303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:57c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:e9:e2:3d:06:64:b7:61:56:8c:c7:27:0b:f3:ba:b2:fb:
         49:f6:a0:92:74:9d:c3:6c:ef:0d:81:12:7c:81:09:5c:48:1d:
         5d:a2:a4:01:2a:6c:49:a0:d5:3f:04:b0:ff:65:5a:cb:cc:15:
         be:c6:0f:44:73:3a:e9:96:8e:7e:85:d3:69:55:18:53:e4:e6:
         0e:80:a6:95:68:15:fc:dc:33:c3:e5:49:4f:ec:b9:c2:15:e2:
         4f:d5:cf:63:f1:83:75:40:b5:a8:69:b3:ba:d4:24:fc:53:4b:
         0d:5e:1d:57:64:43:b1:5d:2f:03:2e:08:30:9d:71:e9:66:43:
         0c:04:88:87:7f:e1:88:d5:b0:7e:d3:cf:98:34:7a:d1:78:07:
         72:2b:1f:93:f7:39:4a:4e:cd:bc:70:b8:7c:d0:fe:8a:b6:98:
         6d:5e:c7:cb:79:53:cf:91:21:23:b6:a9:42:7b:71:a9:72:37:
         c8:37:d7:bc:7a:0f:24:1a:64:fd:a4:61:e4:9a:7b:dd:e6:ab:
         81:8e:5c:7c:f1:1e:ec:95:bf:be:69:ad:d3:8a:02:08:f6:9f:
         7e:57:58:49:46:36:83:fb:94:d2:72:5c:22:e5:8f:fa:ac:2c:
         05:d4:22:33:98:b2:f3:4d:b5:73:1f:30:7e:3b:58:2e:1d:57:
         96:57:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:18:51 2026 by rpki-client