Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a3132613a3a2f34382d3634203d3e20323734303633.roa
File:                     323830333a663264303a3132613a3a2f34382d3634203d3e20323734303633.roa (raw, json)
Hash identifier:          BwQLpz3xZvc+xaHG1FE+a9yxq/5WZqcxSXlqFvYqdIk=
Subject key identifier:   E1:C2:F4:66:67:67:2E:CC:32:5D:16:B2:AB:B6:99:72:00:A3:D9:1A
Certificate issuer:       /CN=0024F2646BA42106407316FE59A0CD2A76EF240C
Certificate serial:       52B6B13A50241D1B971BA643036D96D3A45DCDBC
Authority key identifier: 00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a3132613a3a2f34382d3634203d3e20323734303633.roa
Signing time:             Sat 17 Oct 2026 22:45:00 +0000
ROA not before:           Sat 17 Oct 2026 22:40:00 +0000
ROA not after:            Sat 16 Oct 2027 22:45:00 +0000
asID:                     274063
IP address blocks:        2803:f2d0:12a::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:b1:3a:50:24:1d:1b:97:1b:a6:43:03:6d:96:d3:a4:5d:cd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024F2646BA42106407316FE59A0CD2A76EF240C
        Validity
            Not Before: Oct 17 22:40:00 2026 GMT
            Not After : Oct 16 22:45:00 2027 GMT
        Subject: CN=E1C2F46667672ECC325D16B2ABB6997200A3D91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:4a:31:4d:6b:b7:55:90:ad:c5:fd:45:0a:
                    78:bf:7b:1e:c2:19:15:f9:c4:7c:71:6f:cb:bb:fc:
                    2b:dc:59:f8:46:89:4c:1f:36:b9:cd:88:bf:5a:25:
                    c0:b9:83:b7:9d:94:56:c0:c5:0b:55:45:e4:49:10:
                    13:36:d0:a9:1c:42:01:16:9e:9d:e5:6d:3c:08:c7:
                    7d:a0:8b:8b:d7:79:ba:4a:76:ff:ed:77:b0:89:64:
                    08:46:59:bb:7a:63:da:46:61:3b:30:f6:b0:d5:c0:
                    c7:0e:13:42:69:44:66:58:ac:ba:78:ba:ca:2b:ee:
                    62:80:e8:43:02:88:91:10:b5:f1:81:98:8f:33:93:
                    fc:41:fc:c8:cd:df:53:61:b2:b2:02:62:60:af:36:
                    e8:29:34:22:8d:d8:10:a2:f0:b6:20:66:ad:8a:b7:
                    e2:69:0f:9f:9e:f8:b3:ba:6d:1f:5a:94:d8:be:78:
                    7a:44:0d:80:f3:f5:89:d7:48:6c:8e:99:e2:fc:46:
                    c3:01:e5:91:7b:fc:e4:87:65:9e:2d:a5:94:26:ac:
                    28:c8:07:69:a9:4e:9f:27:53:e1:15:34:d0:54:ee:
                    44:87:69:aa:43:98:bd:55:12:68:99:75:1c:51:df:
                    b5:8d:46:83:79:b8:c2:4d:ef:bd:9b:7c:25:3f:9f:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C2:F4:66:67:67:2E:CC:32:5D:16:B2:AB:B6:99:72:00:A3:D9:1A
            X509v3 Authority Key Identifier:
                keyid:00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a3132613a3a2f34382d3634203d3e20323734303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2d0:12a::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:d6:90:f0:b3:80:03:19:b8:7e:de:42:d0:36:8e:51:86:78:
         e7:18:3f:39:f8:92:18:04:70:1d:cd:54:ef:11:22:6d:59:1b:
         cb:58:03:52:02:3f:5a:50:74:db:a5:3d:4b:42:83:6d:50:56:
         e3:9b:13:dc:ac:20:13:e3:41:69:bf:3f:1e:8a:8d:e9:d3:50:
         c2:7b:71:29:c0:76:85:9d:e4:b9:30:2a:2a:6a:b2:e2:55:48:
         35:e1:dc:bb:c2:a3:30:a7:40:af:59:1f:df:03:4d:3e:39:95:
         a1:c8:2d:65:f0:43:cb:b8:3b:12:2b:18:78:62:ac:3a:d5:4d:
         45:81:d2:e5:ac:d7:9d:dc:62:12:f5:1a:02:03:7d:da:d1:21:
         99:c0:6a:c8:48:a1:00:5b:9e:86:5e:f7:72:89:52:63:0f:87:
         2e:1f:b2:ab:12:cc:e0:0d:9d:c6:14:11:59:e3:8b:ea:bf:ee:
         7b:d3:d8:2e:a2:2e:95:77:65:b6:3d:56:91:4a:a6:5a:27:4b:
         ac:9b:ff:4c:2a:7c:e5:56:5b:01:15:08:cf:63:c0:ae:73:7c:
         63:52:1e:6f:66:0d:b5:04:55:3c:92:e2:bb:ad:1c:3f:80:8b:
         78:93:7e:10:0a:a8:83:3e:17:1a:6a:4f:44:28:02:c7:59:46:
         5f:f6:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:48:00 2026 by rpki-client