Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/961986B3639BB8515767BEC86725DB9707CE9CD0819620C5118E6A5C92BEBFFC/0/323830333a393364303a3a2f33322d3332203d3e203237343231.roa
File:                     323830333a393364303a3a2f33322d3332203d3e203237343231.roa (raw, json)
Hash identifier:          83PS1sY0BNyqt0+CmepnUobfJ+OtKX9AVtwH1TQALUg=
Subject key identifier:   F3:CF:5C:2F:B0:11:A3:2B:99:30:4B:1D:13:7E:54:E8:9C:38:F2:39
Certificate issuer:       /CN=96594D5B67967365D036D285394DED58CC60261A
Certificate serial:       309BB3D137D52C712D5B1AC1DA4B147B7BB8E968
Authority key identifier: 96:59:4D:5B:67:96:73:65:D0:36:D2:85:39:4D:ED:58:CC:60:26:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96594D5B67967365D036D285394DED58CC60261A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/961986B3639BB8515767BEC86725DB9707CE9CD0819620C5118E6A5C92BEBFFC/0/323830333a393364303a3a2f33322d3332203d3e203237343231.roa
Signing time:             Wed 16 Sep 2026 20:35:55 +0000
ROA not before:           Wed 16 Sep 2026 20:30:55 +0000
ROA not after:            Wed 15 Sep 2027 20:35:55 +0000
asID:                     27421
IP address blocks:        2803:93d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/961986B3639BB8515767BEC86725DB9707CE9CD0819620C5118E6A5C92BEBFFC/0/96594D5B67967365D036D285394DED58CC60261A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/961986B3639BB8515767BEC86725DB9707CE9CD0819620C5118E6A5C92BEBFFC/0/96594D5B67967365D036D285394DED58CC60261A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96594D5B67967365D036D285394DED58CC60261A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9b:b3:d1:37:d5:2c:71:2d:5b:1a:c1:da:4b:14:7b:7b:b8:e9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96594D5B67967365D036D285394DED58CC60261A
        Validity
            Not Before: Sep 16 20:30:55 2026 GMT
            Not After : Sep 15 20:35:55 2027 GMT
        Subject: CN=F3CF5C2FB011A32B99304B1D137E54E89C38F239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:65:4b:46:67:1f:6b:b0:f4:ff:08:bf:0d:
                    44:0e:37:71:96:85:0a:6b:d1:e9:4b:76:7a:56:ae:
                    48:3a:07:41:c4:38:29:ab:f9:4b:8d:07:b7:45:d4:
                    d2:e0:03:30:68:0c:92:d6:82:ec:63:59:41:80:94:
                    53:be:38:a6:f4:25:5a:0c:99:72:82:97:02:46:3e:
                    d1:e6:bb:e9:35:18:c0:68:33:ae:d0:6a:ed:59:50:
                    49:9b:ab:7f:37:30:31:e4:1b:91:c5:16:51:36:6a:
                    c6:2a:76:f4:6e:08:77:bc:0e:dd:1b:d2:77:0b:c5:
                    e3:2a:38:bf:86:9d:9b:01:98:1e:ce:f8:2e:5d:6d:
                    ef:16:5d:b7:d4:92:fb:59:6e:7c:88:90:43:e7:5a:
                    2b:c0:f3:55:3f:00:60:b8:dd:a1:c7:d5:bc:6c:a7:
                    84:42:1d:5c:4b:3c:b8:c5:45:ec:d3:10:24:6b:51:
                    4d:53:54:1a:b0:b1:d1:c3:10:a1:e4:11:39:97:15:
                    2b:8c:fb:99:20:9f:7b:1e:4d:8f:72:f1:b4:3f:f7:
                    c5:6e:6f:2a:ac:62:52:3e:f8:c4:1f:92:b5:7f:bc:
                    07:15:91:f0:18:d7:fb:01:74:92:9b:07:1e:2c:7b:
                    39:cf:48:0b:85:50:a0:20:2f:6c:4f:97:fe:a6:66:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CF:5C:2F:B0:11:A3:2B:99:30:4B:1D:13:7E:54:E8:9C:38:F2:39
            X509v3 Authority Key Identifier:
                keyid:96:59:4D:5B:67:96:73:65:D0:36:D2:85:39:4D:ED:58:CC:60:26:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/961986B3639BB8515767BEC86725DB9707CE9CD0819620C5118E6A5C92BEBFFC/0/96594D5B67967365D036D285394DED58CC60261A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96594D5B67967365D036D285394DED58CC60261A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/961986B3639BB8515767BEC86725DB9707CE9CD0819620C5118E6A5C92BEBFFC/0/323830333a393364303a3a2f33322d3332203d3e203237343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:93d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:2c:e8:43:98:fd:ce:4f:be:52:eb:93:5f:0e:99:b9:ec:15:
         c7:11:69:3c:bf:c9:ed:46:49:8a:9a:19:0a:1b:7d:ab:de:f2:
         81:31:d0:61:df:2a:b0:4e:e0:19:a2:06:0e:2c:60:00:10:3b:
         38:78:b3:8b:df:e5:e7:97:c3:4c:5a:2d:85:1a:d7:a4:6e:4b:
         b1:2c:c4:5d:c8:05:9d:4c:e9:d5:2e:a6:2f:5a:5b:79:fd:61:
         66:d7:32:1f:cc:35:43:52:b1:c6:b4:bf:e5:b7:b8:e8:0d:5d:
         84:53:da:05:bc:8e:27:57:ac:d4:19:d9:1c:4a:6c:fe:cc:b0:
         92:33:1b:a7:43:9a:23:e4:87:2e:dc:e3:ce:2f:51:34:f8:17:
         d0:3c:5b:b4:26:59:1c:c0:29:0a:27:61:b2:e5:4d:3f:d9:68:
         cd:ff:7c:dd:48:78:fa:76:b4:44:9e:3c:75:a4:19:fa:5a:b1:
         00:d2:eb:71:87:1f:92:39:66:89:12:ba:53:15:65:17:1d:b4:
         85:a3:ab:b3:26:e1:79:ed:0f:ec:c6:c3:fe:d1:4a:61:b6:fd:
         ee:0a:8b:c4:62:82:d2:c7:bf:09:d0:da:9e:c8:26:9b:9d:6b:
         c3:35:d4:f0:ca:3a:ed:1a:54:00:45:2d:16:40:67:30:85:d3:
         c0:1c:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:38:52 2026 by rpki-client