Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3438203d3e20323637393035.roa
File:                     323830333a333636303a3a2f33322d3438203d3e20323637393035.roa (raw, json)
Hash identifier:          INqRw3NiPCWyBnqV9slm9u9qpWf1NpvmYB3ayoHBOQg=
Subject key identifier:   17:F1:FD:1A:52:29:16:38:40:15:D6:BB:5B:5C:FF:50:32:58:21:85
Certificate issuer:       /CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
Certificate serial:       3706BDABEA87333B7BB8BEE016D8D171282A91AB
Authority key identifier: 5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3438203d3e20323637393035.roa
Signing time:             Thu 08 Oct 2026 02:39:13 +0000
ROA not before:           Thu 08 Oct 2026 02:34:13 +0000
ROA not after:            Thu 07 Oct 2027 02:39:13 +0000
asID:                     267905
IP address blocks:        2803:3660::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:06:bd:ab:ea:87:33:3b:7b:b8:be:e0:16:d8:d1:71:28:2a:91:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
        Validity
            Not Before: Oct  8 02:34:13 2026 GMT
            Not After : Oct  7 02:39:13 2027 GMT
        Subject: CN=17F1FD1A522916384015D6BB5B5CFF5032582185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:6d:71:f6:47:11:7c:60:52:cd:a5:01:a0:
                    76:9d:6a:a3:df:1f:4d:8a:6c:58:b1:15:51:9d:36:
                    0b:5e:74:65:35:76:04:86:f1:a7:93:ed:4c:ac:7c:
                    9f:b5:95:e0:b8:8d:2a:14:03:c5:61:fd:f1:56:6a:
                    74:2a:de:43:93:1e:b7:f0:f0:6a:e4:7e:ee:c3:a6:
                    59:96:7f:b0:f5:60:29:0e:e7:3a:57:6e:60:01:54:
                    11:bc:5c:89:bd:38:d8:c1:50:af:40:5e:83:f7:45:
                    40:f8:56:38:35:a5:42:e9:cf:40:0a:2e:1a:36:5c:
                    2c:57:1f:d8:3b:b3:fa:c2:dc:da:96:c2:97:38:18:
                    1f:1a:25:26:0a:10:46:af:22:7f:f6:79:df:4b:0f:
                    f9:c9:1f:93:cd:f8:fe:dd:bc:71:b6:8c:73:d9:96:
                    8b:d5:44:da:dd:2e:b5:3a:a7:e7:ae:73:8f:ff:8b:
                    37:5f:6a:f0:4c:88:64:72:cf:d9:41:bb:c9:07:14:
                    2f:f7:dc:e0:6d:81:ca:ba:db:88:d9:31:68:b1:b1:
                    b7:96:d6:b9:d5:fe:6c:3c:13:b2:21:ea:96:f7:dc:
                    62:17:e1:0e:b4:23:b3:34:fa:9f:48:a1:fc:ab:93:
                    a4:2d:3e:de:af:32:9a:9d:ad:ea:82:cf:32:b5:c6:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:FD:1A:52:29:16:38:40:15:D6:BB:5B:5C:FF:50:32:58:21:85
            X509v3 Authority Key Identifier:
                keyid:5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3438203d3e20323637393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:58:21:6c:3c:06:3b:1a:11:fe:79:b8:b1:b9:38:d4:c3:b6:
         c4:b8:86:19:a0:ce:83:d1:8c:ed:83:f9:cb:3f:32:17:da:40:
         3f:f2:f4:40:2d:f9:df:15:2d:6e:07:79:45:cf:8e:b5:7c:f5:
         61:b5:bf:84:cb:1c:af:a9:08:37:b0:40:82:a0:34:d7:38:7a:
         0a:b7:c9:70:c0:c9:48:e3:70:e0:ee:50:2e:c0:66:0d:a7:ca:
         93:61:e9:c8:91:41:eb:3c:db:18:07:9f:4a:b7:6f:b0:74:7a:
         57:56:82:9e:d3:2b:2d:a9:5f:bd:39:d6:e3:ab:9b:f7:98:d1:
         02:97:25:a9:c1:7b:0f:c1:16:e5:1f:94:bf:22:9f:15:ea:dd:
         e3:7f:47:7d:35:de:5b:c4:0a:68:07:de:59:d4:74:aa:93:f4:
         14:ac:c9:99:aa:23:50:72:44:30:72:48:9e:7d:29:be:a7:df:
         65:24:7b:ab:f4:5b:e2:9e:e4:1a:e7:3c:43:f2:0c:f6:b2:43:
         c1:c1:73:8e:bf:ba:d1:bd:44:f2:b0:e9:da:65:21:93:bc:0e:
         14:0c:9a:e8:e3:bf:5e:6f:5c:c3:7a:10:2a:9b:05:db:fe:58:
         17:ec:f1:05:ca:82:00:df:48:cc:48:c0:16:57:ba:fe:d1:2c:
         97:cc:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:57:55 2026 by rpki-client