Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3363303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3363303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          Yb1sMR+na31E+pAdEC9SSzzcJ+fiXpCvMt4lJrfN11c=
Subject key identifier:   A3:E9:50:5E:72:43:55:2D:5B:03:8F:9B:50:B8:E4:44:D8:AF:29:8D
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       6EAB5B1740B2E50DD3010685BDE1760E9ABF05C7
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3363303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:42 +0000
ROA not before:           Fri 03 Jul 2026 01:45:42 +0000
ROA not after:            Fri 02 Jul 2027 01:50:42 +0000
asID:                     273832
IP address blocks:        2803:8950:3c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:5b:17:40:b2:e5:0d:d3:01:06:85:bd:e1:76:0e:9a:bf:05:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:42 2026 GMT
            Not After : Jul  2 01:50:42 2027 GMT
        Subject: CN=A3E9505E7243552D5B038F9B50B8E444D8AF298D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:b3:30:57:ff:5d:a7:55:a6:51:2e:bc:bd:
                    a4:77:10:2e:c5:82:37:a4:cf:2e:b5:e7:a7:d6:07:
                    41:4b:51:6f:4d:69:67:ed:2b:d9:86:82:c5:f5:a9:
                    fc:b8:eb:70:c0:fd:5c:24:d2:ec:79:34:50:73:f5:
                    f4:63:d0:1f:9c:58:2a:01:d2:23:8e:18:94:b5:fb:
                    3c:01:db:c2:e2:7d:26:22:53:bf:29:85:ed:f1:d4:
                    d8:d9:79:92:86:21:d2:c9:3f:98:50:98:10:ad:45:
                    94:41:0c:51:29:fb:15:e2:7f:42:61:f6:8e:96:19:
                    84:e4:da:cd:ed:47:fd:31:0e:ea:a5:9a:05:e5:3a:
                    2a:d6:45:08:6f:2d:31:f3:43:65:82:1a:61:b9:88:
                    b8:28:9f:81:e0:74:9f:f9:af:b4:43:bc:f9:7a:ea:
                    94:83:50:44:98:44:da:63:b1:7d:a0:08:36:b8:5a:
                    f6:0f:d0:6c:17:b5:21:8c:9c:16:71:dc:f9:7c:18:
                    2e:17:c3:4a:8a:d8:30:2c:ce:35:0d:a5:70:2b:07:
                    f7:fe:82:10:71:c7:c5:82:a5:22:f7:05:60:f2:94:
                    72:0e:29:d5:94:47:dd:1a:88:87:c3:18:e1:3f:60:
                    ca:0b:6b:82:cd:9b:74:a7:3e:3e:dd:41:0f:49:f7:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:50:5E:72:43:55:2D:5B:03:8F:9B:50:B8:E4:44:D8:AF:29:8D
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3363303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:3c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         69:6b:a4:83:f1:bf:4b:2c:14:fd:da:2f:04:dc:7e:c6:ad:ff:
         eb:ea:db:99:6f:fb:86:4e:bf:f1:26:b3:91:8a:cc:eb:f7:0c:
         6c:7a:c1:b8:4c:e8:6c:59:21:2e:65:6a:e7:42:24:f1:9e:33:
         87:cc:19:4f:ca:b1:89:28:c1:d0:6c:e2:af:45:54:46:ba:e9:
         f6:ac:c0:19:92:2b:95:c2:76:5b:0e:0c:5b:e2:39:47:40:c4:
         3d:f9:e4:80:f8:97:f2:76:a5:a4:aa:eb:39:50:46:51:ef:d4:
         61:f5:66:bf:8b:ca:fa:96:9f:d7:5c:ca:a6:0c:cd:18:a7:9e:
         4b:ba:17:bf:54:9a:d0:27:20:0d:15:3f:55:96:ef:6e:81:12:
         51:36:28:12:e6:e8:ca:4b:d6:1f:ff:6f:c1:ed:93:2b:aa:97:
         9a:9a:ef:c9:b1:d3:9a:2e:9b:85:31:7d:fe:59:ae:d9:c2:0d:
         88:78:9e:44:73:6c:5c:35:84:b8:c1:bc:a4:4e:90:4c:95:f1:
         ca:6e:cd:cb:dd:fd:bf:bc:7c:bf:44:c1:83:3c:13:f5:c2:75:
         39:ae:8c:34:dd:c4:c1:22:ac:3e:af:dd:64:97:fa:41:fe:08:
         67:19:5f:07:b5:a8:d4:96:c2:ed:c0:2f:cf:4d:cc:ab:50:f0:
         0d:3c:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:56:28 2026 by rpki-client