Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/323830333a343165303a3a2f33322d3332203d3e20323639393935.roa
File:                     323830333a343165303a3a2f33322d3332203d3e20323639393935.roa (raw, json)
Hash identifier:          guYhYjbg58vq+IWbvvvwBEY23t9+osq2o/cSpvd9xh8=
Subject key identifier:   20:F9:1E:59:05:98:90:E6:22:1A:DD:7A:D1:4F:FC:CD:9F:D9:E5:E7
Certificate issuer:       /CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
Certificate serial:       6845766ACF04433B1F8C0C279C3CE211EA1E2096
Authority key identifier: D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/323830333a343165303a3a2f33322d3332203d3e20323639393935.roa
Signing time:             Mon 06 Jul 2026 16:51:07 +0000
ROA not before:           Mon 06 Jul 2026 16:46:07 +0000
ROA not after:            Mon 05 Jul 2027 16:51:07 +0000
asID:                     269995
IP address blocks:        2803:41e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:45:76:6a:cf:04:43:3b:1f:8c:0c:27:9c:3c:e2:11:ea:1e:20:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
        Validity
            Not Before: Jul  6 16:46:07 2026 GMT
            Not After : Jul  5 16:51:07 2027 GMT
        Subject: CN=20F91E59059890E6221ADD7AD14FFCCD9FD9E5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:c1:a9:4e:34:a0:00:3d:99:ee:81:05:6a:
                    ba:14:0c:57:28:47:9d:9c:23:24:84:e3:34:19:14:
                    72:83:5f:e5:66:25:66:73:e2:5e:05:c7:df:e1:46:
                    3e:5b:f9:28:2c:d7:56:1d:8c:ae:c8:13:82:21:f8:
                    7e:27:84:54:a8:45:05:88:07:98:ef:ee:f7:70:30:
                    1c:2c:79:a3:c5:c7:c6:63:c2:91:05:86:7f:57:7f:
                    40:e1:77:b5:5b:5e:bc:e0:f0:33:92:74:cb:a3:83:
                    5f:71:02:79:cd:5e:bb:f4:6a:27:95:10:5a:da:06:
                    a8:aa:a9:9f:38:ea:7d:81:bb:53:49:a9:77:85:af:
                    9e:1b:6b:ae:8d:b6:20:b8:68:ee:bf:1a:50:d9:04:
                    25:7e:2f:2f:c2:87:a9:c1:ef:83:e0:b5:21:cc:9c:
                    39:c4:e5:cd:d2:45:bc:f5:7e:c7:c6:cf:68:24:21:
                    d0:fc:d4:a4:ea:ce:17:dc:ff:9b:cd:df:f6:69:2f:
                    2f:52:24:54:b4:c6:93:c5:ec:88:6f:b0:9a:85:8c:
                    e9:9c:48:83:ec:74:05:6f:99:47:3e:ed:1a:61:f3:
                    f6:64:be:85:19:44:01:15:77:21:d3:84:09:8a:35:
                    6f:6c:b7:15:cb:29:61:dd:6f:94:b9:ed:d7:c4:5c:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:1E:59:05:98:90:E6:22:1A:DD:7A:D1:4F:FC:CD:9F:D9:E5:E7
            X509v3 Authority Key Identifier:
                keyid:D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/323830333a343165303a3a2f33322d3332203d3e20323639393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:41e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:0b:49:e7:88:6b:66:46:52:74:a0:f8:b2:e0:16:73:f3:
         c2:32:b0:e0:bd:41:b6:d8:6c:8a:3e:5a:c3:ca:3d:70:24:16:
         11:41:24:f7:6c:c9:09:65:b9:bd:37:f0:6f:1f:56:8e:7c:de:
         cd:ba:46:eb:4d:b9:e1:99:da:ab:63:21:45:67:96:ed:38:dc:
         6e:b3:ef:65:86:42:bd:1a:a4:fa:76:c1:20:6d:51:43:9c:52:
         83:6e:c8:26:d5:66:cd:c0:72:07:5c:aa:84:98:64:f5:f7:87:
         ac:e1:85:55:c7:19:07:60:7d:50:10:bd:13:23:3f:81:eb:d3:
         39:21:c4:0f:63:31:18:0e:04:6b:bf:38:57:0a:2f:c8:03:72:
         26:7a:13:15:56:9e:54:da:bf:47:f0:57:92:b8:a8:09:f6:b7:
         5c:c4:7f:72:55:88:91:ff:a5:33:b6:83:b5:61:f8:c2:96:6e:
         b6:f2:c3:56:2a:7d:6d:2b:72:b2:f1:a3:27:6b:6d:af:d9:30:
         6c:c0:42:80:50:24:d9:12:e5:16:d8:3f:9d:d1:e0:58:ec:a4:
         ab:64:c2:8f:cd:43:59:2d:47:89:2d:f6:7b:5c:29:89:de:d6:
         47:3f:fe:11:2c:3f:d8:9a:f5:87:52:a4:04:f2:c0:f9:f2:f3:
         59:b3:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:32:44 2026 by rpki-client