Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3334303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3334303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          VN2pAK7t72PLp4ckdboqZ9ChXsuAifXpGFYXwZ/XWfY=
Subject key identifier:   D5:7D:72:43:FC:3E:E3:30:A9:E3:AF:EE:FB:9F:DC:C3:B0:94:48:0B
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       48970AAED3F625A88C203DAC376BD3120252E501
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3334303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:40 +0000
ROA not before:           Fri 03 Jul 2026 01:45:40 +0000
ROA not after:            Fri 02 Jul 2027 01:50:40 +0000
asID:                     273832
IP address blocks:        2803:8950:340::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:97:0a:ae:d3:f6:25:a8:8c:20:3d:ac:37:6b:d3:12:02:52:e5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:40 2026 GMT
            Not After : Jul  2 01:50:40 2027 GMT
        Subject: CN=D57D7243FC3EE330A9E3AFEEFB9FDCC3B094480B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:23:32:eb:3f:7a:67:a3:21:4c:67:ed:ec:
                    e5:57:87:07:1c:bf:bc:f7:c9:75:54:95:b1:ae:32:
                    97:7f:08:22:16:90:c4:df:94:d6:73:af:e8:08:98:
                    d6:9e:52:0d:40:16:d6:17:de:a4:80:6f:16:14:4c:
                    83:a3:6a:f5:c3:32:d6:65:38:45:1c:e9:99:08:1d:
                    b0:4c:c9:40:e0:2b:4e:7e:23:2c:9d:0f:4d:9b:53:
                    5e:a5:b4:4e:82:8b:4d:46:43:5e:a5:a1:05:09:83:
                    c9:b7:80:01:66:11:ae:28:52:aa:ad:b9:8e:7b:b2:
                    97:fa:4f:7b:78:0a:bb:ad:bb:78:c1:dd:cb:68:43:
                    4a:18:32:15:ca:1b:ae:1b:1c:86:6f:b4:e0:f4:5e:
                    a9:28:69:4c:05:70:b7:56:c6:81:78:16:57:f6:54:
                    50:57:ad:1e:85:95:91:b9:d8:35:cf:bf:35:ba:4f:
                    20:34:c9:18:11:d1:ba:d3:a8:41:00:00:e3:32:e3:
                    f2:32:50:1b:f2:cd:56:35:25:63:a2:e3:a5:a9:6c:
                    f9:e7:bd:d5:f0:1c:02:81:99:aa:3a:2d:60:fe:d6:
                    85:71:4b:1c:ca:ab:63:8b:a0:27:4d:6f:b7:5c:2b:
                    a7:81:ca:f8:6f:c7:2c:11:e8:d0:de:7a:b4:fb:78:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7D:72:43:FC:3E:E3:30:A9:E3:AF:EE:FB:9F:DC:C3:B0:94:48:0B
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3334303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:340::/42

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:b9:b4:cb:fd:12:d0:2f:55:b2:9b:64:ac:51:eb:ee:78:
         7b:dc:5e:39:4d:56:78:51:31:eb:0c:56:51:3e:dc:f4:3a:78:
         f3:5c:a5:68:50:9b:a8:d0:60:b4:58:11:ff:7a:64:22:b3:b3:
         1d:2f:22:6c:94:07:31:a5:1a:0a:f3:9d:bf:45:ce:2b:77:1c:
         68:fd:b7:6d:3f:ae:dd:ed:93:7f:4b:20:bb:68:ad:2a:76:0d:
         60:99:01:d4:18:c1:fe:5e:f3:c5:6a:00:1a:cd:28:07:34:03:
         84:fd:28:be:f7:d3:76:30:20:ea:fd:45:ed:45:3b:e1:d7:a8:
         e5:de:c2:a9:e4:79:2f:fa:43:8b:bd:7f:00:28:27:c0:11:21:
         94:d9:40:5b:0b:0c:db:01:c1:1f:6c:93:20:1f:f4:cc:ef:8b:
         3a:ea:23:ff:58:cc:fe:72:db:63:1f:0f:11:08:8b:6a:72:68:
         0b:cb:d1:c4:65:6c:ce:3a:1b:a3:45:a2:88:20:76:97:f0:3f:
         13:ec:c8:a4:01:4a:40:b3:d0:c6:0b:4a:9b:42:a4:80:99:75:
         7e:3c:f6:f7:5e:15:cf:c0:32:18:9a:72:b0:d1:e9:e0:f9:8d:
         c7:84:e2:88:43:3f:13:dd:5b:7d:64:bd:4a:b7:33:80:f7:41:
         1e:8b:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:34:55 2026 by rpki-client