Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a323a3a2f34382d3438203d3e20323732393632.roa
File:                     323830333a663939303a323a3a2f34382d3438203d3e20323732393632.roa (raw, json)
Hash identifier:          luTIwBsGn3NUWm3tF6i2fhCSHSu2plv6e+Rnl6yqn4g=
Subject key identifier:   51:C7:C0:BF:62:93:7C:69:89:18:FC:8D:A4:B1:FD:90:C4:66:77:F3
Certificate issuer:       /CN=83F7E47489A9B33F206BDEF2A5355211978698EE
Certificate serial:       6445183C949EB24314E405C180C044E8585446AA
Authority key identifier: 83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a323a3a2f34382d3438203d3e20323732393632.roa
Signing time:             Wed 30 Sep 2026 14:37:25 +0000
ROA not before:           Wed 30 Sep 2026 14:32:25 +0000
ROA not after:            Wed 29 Sep 2027 14:37:25 +0000
asID:                     272962
IP address blocks:        2803:f990:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:45:18:3c:94:9e:b2:43:14:e4:05:c1:80:c0:44:e8:58:54:46:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F7E47489A9B33F206BDEF2A5355211978698EE
        Validity
            Not Before: Sep 30 14:32:25 2026 GMT
            Not After : Sep 29 14:37:25 2027 GMT
        Subject: CN=51C7C0BF62937C698918FC8DA4B1FD90C46677F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:8b:55:f3:ac:69:6a:33:0c:10:b9:dd:26:
                    cc:7b:e3:32:c4:b8:97:91:d9:42:a7:2c:b0:3b:1a:
                    d6:08:74:a2:c5:52:84:83:0d:11:03:e5:50:e7:11:
                    8d:fc:77:86:0d:17:48:30:d0:1b:d1:e5:b2:5c:89:
                    7f:56:e8:b8:00:90:f2:5e:e4:bd:dc:ca:f0:9d:44:
                    5c:7a:2a:89:bc:ab:56:26:0d:01:31:ad:55:65:88:
                    29:74:e6:96:d9:de:ae:ad:36:a8:f0:1b:09:02:27:
                    3d:74:de:c7:96:02:50:97:27:4c:32:30:3c:28:48:
                    dc:f9:cf:83:9d:2a:13:f5:89:32:01:18:6f:f3:1b:
                    87:46:d9:5e:62:83:69:be:dd:82:3b:d8:4d:b7:82:
                    8b:30:62:16:fa:65:f9:e3:76:b6:8e:66:6f:e2:7f:
                    37:9e:c7:85:26:20:e8:c1:c6:07:7a:e3:21:a3:88:
                    1a:65:3e:8e:fd:18:82:2a:f9:c1:e9:fd:27:84:ce:
                    d7:bc:c3:01:a3:d7:35:fd:b3:6b:c9:45:8a:ad:19:
                    42:3f:76:be:40:19:a3:02:45:00:85:cb:32:af:e3:
                    4b:11:8c:74:1d:6a:d3:7f:bf:20:4f:1e:92:f7:e3:
                    72:c3:96:5e:08:2f:85:53:e6:7b:bf:c5:f5:87:88:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:C0:BF:62:93:7C:69:89:18:FC:8D:A4:B1:FD:90:C4:66:77:F3
            X509v3 Authority Key Identifier:
                keyid:83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a323a3a2f34382d3438203d3e20323732393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f990:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:d3:cf:84:73:ba:af:06:15:3e:ff:2e:98:c2:7b:fd:ce:7f:
         fa:a0:43:aa:8e:2b:13:43:66:be:12:24:5e:ab:16:39:17:a4:
         0a:48:26:1c:74:54:ea:94:8c:1a:a1:a1:db:21:14:ae:f3:5c:
         8a:84:b0:2e:ae:3c:e4:08:57:ee:d8:e5:1e:dc:c7:94:04:8d:
         0a:8b:3e:a7:0e:35:c8:ec:a6:dc:74:b0:09:53:cb:8e:42:67:
         1c:cc:3e:51:58:97:d6:91:57:70:31:e5:e0:e0:dd:4b:d8:3b:
         73:99:66:6d:24:09:d7:95:29:53:79:e8:6c:f3:a0:35:03:ef:
         e6:66:ec:e8:c2:44:a9:65:94:8f:07:6e:ac:17:6d:ec:2a:86:
         81:5a:1d:d1:93:d6:fe:d0:26:3e:8a:86:f4:ee:a3:60:84:db:
         89:cf:9f:08:b0:81:99:f5:98:63:f7:78:e9:6c:ae:4e:26:b8:
         6a:74:5d:0c:80:97:69:b2:bb:dd:68:a7:25:49:b7:31:3d:f4:
         a9:1c:79:f4:75:da:cd:28:03:2e:c7:cb:b0:8d:11:22:12:09:
         ba:11:92:76:d3:54:12:5c:92:6a:1c:2e:d3:b9:b7:6e:ad:27:
         9d:3e:25:08:8f:54:5b:48:82:eb:e7:cd:c4:26:45:e8:ef:35:
         e9:70:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:57:18 2026 by rpki-client