Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/323830333a646432303a3a2f33322d3332203d3e20323636373035.roa
File:                     323830333a646432303a3a2f33322d3332203d3e20323636373035.roa (raw, json)
Hash identifier:          G90GW4LHk6O5s98fqZZSc+vW4U1oEK7Sohs5WZieQYQ=
Subject key identifier:   CD:B8:16:14:0D:F2:AE:23:FC:91:B7:6C:FF:8C:56:A5:B3:CB:E0:F7
Certificate issuer:       /CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Certificate serial:       3FC59AB6A43EB0D780A1DC3DF02DF0A79BCE8EDB
Authority key identifier: 09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/323830333a646432303a3a2f33322d3332203d3e20323636373035.roa
Signing time:             Wed 23 Sep 2026 21:36:30 +0000
ROA not before:           Wed 23 Sep 2026 21:31:30 +0000
ROA not after:            Wed 22 Sep 2027 21:36:30 +0000
asID:                     266705
IP address blocks:        2803:dd20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c5:9a:b6:a4:3e:b0:d7:80:a1:dc:3d:f0:2d:f0:a7:9b:ce:8e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09452D3964845A96D0C2242C6550EF5DDE90180A
        Validity
            Not Before: Sep 23 21:31:30 2026 GMT
            Not After : Sep 22 21:36:30 2027 GMT
        Subject: CN=CDB816140DF2AE23FC91B76CFF8C56A5B3CBE0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:50:42:26:4c:62:8d:d7:f0:ba:8e:f0:80:
                    ee:7f:18:83:90:9a:6c:f8:e8:11:c3:a8:d1:ee:d2:
                    49:61:36:2c:fa:ff:6e:1d:9e:36:3a:56:6d:28:ed:
                    9b:43:21:07:25:ba:c0:85:84:72:8f:8f:49:27:02:
                    07:21:38:1b:2a:7c:a8:9a:82:2d:f8:32:5f:cd:f0:
                    ae:a8:24:74:55:b4:17:72:18:70:cc:f1:8f:2f:41:
                    e3:c8:5e:fe:54:53:98:82:f6:47:3c:1f:04:84:17:
                    f2:01:d0:b4:90:68:19:b2:e1:e6:e0:2e:97:08:e8:
                    91:1d:e9:05:d7:0f:94:ce:06:ea:e8:8d:de:57:06:
                    65:2d:18:8a:ce:31:e4:78:29:f6:b9:a4:32:5c:7d:
                    c8:a9:7b:c5:13:64:09:4f:9b:2d:0d:0e:6b:4b:47:
                    4c:56:67:f9:f7:a5:84:a1:4f:33:08:cf:f6:46:e3:
                    49:25:14:13:5d:ab:2e:ab:88:20:aa:4b:ae:f6:3a:
                    e6:fe:55:5f:eb:9c:22:6c:d2:9f:90:b4:40:5c:6c:
                    86:88:db:ad:fb:4a:e2:26:b3:47:11:a1:6a:16:2a:
                    87:7d:b1:92:b2:74:ec:6b:4c:8b:89:37:0a:db:20:
                    04:ed:c6:cc:f8:93:f7:bb:da:69:1c:c6:31:cd:5d:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:16:14:0D:F2:AE:23:FC:91:B7:6C:FF:8C:56:A5:B3:CB:E0:F7
            X509v3 Authority Key Identifier:
                keyid:09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/323830333a646432303a3a2f33322d3332203d3e20323636373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:a0:f6:d1:cb:4a:cc:a6:bd:63:d7:40:f9:a0:55:02:b3:
         55:e7:5e:6c:2b:1a:ae:ad:91:c9:0a:56:48:88:7f:08:4d:db:
         b6:57:7f:15:69:19:77:7f:32:92:e0:8d:37:96:07:bb:de:88:
         54:1a:20:02:0d:04:8c:1c:2d:15:00:94:91:29:40:60:7a:52:
         7c:ee:1e:f1:86:2c:65:03:ad:4d:e3:6a:1a:d6:bb:fe:f1:09:
         4a:bd:b9:61:40:9f:cd:10:d4:0d:c2:b0:7d:43:9c:08:b7:fa:
         94:0a:5c:94:82:e2:19:9e:6f:d3:aa:08:da:12:eb:21:25:73:
         76:c3:d7:96:07:c6:20:a3:86:87:ea:e0:25:da:f1:ce:f0:b1:
         b9:4a:e0:ca:8d:94:87:f6:34:47:57:21:f3:fe:cc:b2:55:3f:
         0a:95:cf:e6:ac:c1:b4:7c:26:87:4c:cc:05:3d:a4:3a:4b:76:
         06:4b:89:d0:81:26:09:25:d3:60:de:c1:c6:93:05:d8:6b:31:
         72:85:3d:e3:29:dc:ef:67:5d:cb:e8:e6:d0:85:6f:fa:90:94:
         07:45:97:64:ec:28:51:bf:85:06:86:47:f4:e0:c5:b8:c8:89:
         43:d5:22:f7:8f:95:e4:60:7a:ea:46:d6:54:eb:4f:8a:12:30:
         8a:9c:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:53 2026 by rpki-client