Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3463303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3463303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          mAkP7B/MKOvz8hi+6Al3xQU/Fd+a9kSfZLx+JXIcKi0=
Subject key identifier:   78:0D:66:B9:96:5B:B8:8F:B7:8A:0A:63:52:7F:13:3E:24:A4:69:C0
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       4556D80A4C5F418C2ED8DB17EC5D0BBD2ACEEA8F
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3463303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:41 +0000
ROA not before:           Fri 03 Jul 2026 01:45:41 +0000
ROA not after:            Fri 02 Jul 2027 01:50:41 +0000
asID:                     273832
IP address blocks:        2803:8950:4c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:d8:0a:4c:5f:41:8c:2e:d8:db:17:ec:5d:0b:bd:2a:ce:ea:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:41 2026 GMT
            Not After : Jul  2 01:50:41 2027 GMT
        Subject: CN=780D66B9965BB88FB78A0A63527F133E24A469C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:bf:3e:9c:d4:eb:27:07:24:b0:e2:0a:16:
                    e4:0d:72:a9:07:ed:a0:f4:e4:95:3a:8d:dd:d9:a7:
                    c0:ab:c5:25:75:e3:bd:43:ba:29:2d:29:03:6c:a0:
                    2f:4a:63:c6:a6:ce:59:14:f7:bd:67:26:64:52:ea:
                    6e:4b:3b:dd:53:18:fd:75:66:ed:8e:8f:1d:bb:59:
                    f5:05:eb:9a:20:f0:38:27:92:f4:90:6e:df:1c:76:
                    ba:0a:18:b5:91:09:a8:e2:bb:9f:49:f0:d8:24:83:
                    92:07:43:7a:8c:9c:91:fb:ec:13:3a:2c:b7:fd:26:
                    2c:9e:9e:11:a2:a9:55:cf:69:d1:2a:07:1f:0b:8a:
                    ea:43:ac:18:ee:75:72:89:bc:5f:3f:7f:90:a9:9c:
                    3f:36:d8:d5:6c:e8:63:a2:00:5e:fd:f9:cf:47:da:
                    b6:3a:06:1f:bd:ef:b0:83:d1:90:89:72:26:45:42:
                    d7:99:a5:36:ea:39:d0:87:b3:c2:d2:c5:82:b4:f7:
                    f2:e8:97:aa:60:6e:8e:bb:58:fd:27:6a:82:09:85:
                    6c:26:d6:06:0b:87:5f:98:7b:e1:1d:13:2c:5e:f4:
                    99:fa:fb:6b:f9:b3:6e:16:c7:d8:b8:f3:f7:db:97:
                    40:0b:87:87:a2:6b:d4:93:1a:b9:58:93:db:97:f9:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:66:B9:96:5B:B8:8F:B7:8A:0A:63:52:7F:13:3E:24:A4:69:C0
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3463303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:4c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         45:34:d6:1b:5b:52:d4:57:16:3c:48:e6:84:0b:1a:88:13:72:
         1d:af:9b:49:db:0d:58:d0:cf:0f:65:9d:9e:b9:d7:2b:e8:bb:
         b1:51:24:e5:0a:e8:14:ea:30:a7:33:2b:75:45:70:3c:99:a1:
         2b:a5:d4:0e:2c:ad:9e:73:16:66:3b:98:da:7e:b9:df:53:d3:
         28:65:9c:c8:b2:52:df:24:1c:e2:0e:2b:54:84:6d:f5:d8:75:
         51:15:56:c2:50:74:69:2f:fa:67:32:46:17:dd:f7:7d:b9:d7:
         78:94:44:48:3c:9e:74:06:42:22:02:28:e2:e2:e8:b2:55:5a:
         2d:bf:57:61:4b:19:a6:cb:27:71:50:6c:8a:16:14:03:ed:0e:
         be:f8:06:8c:c8:22:fc:36:b5:3c:82:8b:0d:d0:a4:fc:1b:9c:
         61:e7:02:f5:f7:70:ea:57:51:61:4d:1d:cc:b2:76:05:ee:08:
         77:d1:36:2c:cc:44:75:32:91:6b:49:89:e9:da:f3:4a:46:22:
         20:fa:49:95:10:ec:56:38:f2:38:e3:56:fd:3c:76:f1:33:85:
         fa:fc:8c:bc:3c:ab:9e:28:d3:66:be:ea:44:90:e5:69:43:34:
         f5:f5:5f:ef:8e:b4:7f:bd:ab:dd:9e:7e:f0:ce:74:1a:c1:88:
         17:cf:00:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:03:41 2026 by rpki-client