Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3438303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3438303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          ZkeiuIYL5FmbLBTbXXCQXpqN1SB9AEhANtS3CHa5xcM=
Subject key identifier:   78:52:34:A1:8F:57:1D:67:85:20:C6:1D:7F:C9:7C:C5:66:4C:1E:E9
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       552F04321E0D3A78AFA9B1E2F5E0110205B2B50B
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3438303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:44 +0000
ROA not before:           Fri 03 Jul 2026 01:45:44 +0000
ROA not after:            Fri 02 Jul 2027 01:50:44 +0000
asID:                     273832
IP address blocks:        2803:8950:480::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2f:04:32:1e:0d:3a:78:af:a9:b1:e2:f5:e0:11:02:05:b2:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:44 2026 GMT
            Not After : Jul  2 01:50:44 2027 GMT
        Subject: CN=785234A18F571D678520C61D7FC97CC5664C1EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:68:2e:26:e3:48:31:b4:0e:20:68:5f:c0:
                    9e:14:e1:15:7f:32:4c:05:85:05:ad:b2:4b:8f:4f:
                    70:c1:4c:06:af:03:37:11:ca:b4:c4:28:6a:0d:de:
                    c7:42:61:e3:ce:7a:02:60:4a:54:51:81:00:70:43:
                    7a:dc:32:27:54:b6:78:6d:67:c0:a6:82:f3:c6:79:
                    03:70:f8:09:de:f4:75:2e:06:c7:48:e0:dc:5e:c1:
                    39:f0:1d:79:bb:72:9c:c7:25:12:cc:c3:05:f0:d9:
                    94:5b:0e:cc:76:f7:1c:a4:31:1b:b4:4b:87:17:11:
                    d7:78:c7:79:e1:3e:3c:ef:01:88:f8:32:d3:8a:e1:
                    62:c4:04:96:15:13:0c:f1:e8:3f:fe:a6:09:9c:d1:
                    b9:16:90:11:ee:82:73:59:c8:3e:7c:f1:49:52:ca:
                    46:11:60:00:cf:5e:e2:a7:80:7c:f1:05:91:af:37:
                    60:98:47:74:f2:84:7e:38:ad:32:5b:c8:35:1c:f3:
                    20:76:93:6c:cd:02:05:d2:ff:95:8d:a2:2c:45:0a:
                    d5:40:2d:c6:8a:a2:62:c9:85:f4:29:20:db:bc:d1:
                    5a:cd:58:b1:7d:c2:ef:71:0e:41:b1:24:72:50:ea:
                    3c:13:de:5c:b9:69:69:e4:a3:b7:34:d6:da:8d:15:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:52:34:A1:8F:57:1D:67:85:20:C6:1D:7F:C9:7C:C5:66:4C:1E:E9
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3438303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:480::/42

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:dd:9e:41:0c:9e:d5:23:35:1f:7d:b3:63:99:8b:96:c1:
         58:95:32:48:5a:49:51:7b:f6:c4:87:b8:10:5d:3c:2b:94:93:
         70:72:17:4c:a5:ad:2c:8f:f6:71:c3:61:6b:8c:ae:00:76:e5:
         c6:de:45:0e:cb:e3:8c:f4:e8:09:13:f8:f4:56:06:d5:d4:9b:
         b5:90:ac:e5:7d:c3:b1:bb:c1:19:1a:74:69:48:97:e0:8c:c1:
         74:51:1f:cf:fc:9c:c7:90:f0:39:1b:d7:1d:f1:b0:d5:47:61:
         87:8c:9f:de:0d:34:71:d6:92:f2:3a:1f:07:e8:cc:50:ea:89:
         97:2c:db:ed:23:1d:a5:c2:dd:ae:f7:8e:bc:76:26:37:13:aa:
         9c:5a:bb:55:d5:7f:5d:8d:af:8a:f5:bd:b9:78:0d:f7:72:f6:
         8f:c9:80:91:63:b5:91:ae:51:64:bb:d4:38:dc:9e:c6:a6:2f:
         ff:ad:b4:9d:79:fb:f7:b5:75:ee:3d:b0:aa:6c:93:3f:51:17:
         b6:d2:ea:67:d2:05:29:45:fc:0b:18:de:34:38:7a:e9:4f:39:
         09:7f:03:1d:a0:14:4c:97:ac:f2:97:e3:29:0f:34:b4:2b:6c:
         a3:58:4f:ea:07:1f:e8:ba:77:41:d5:6d:ce:1f:d8:7f:43:47:
         23:74:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:03:10 2026 by rpki-client