Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a63303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a63303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          nxlpHPxQExX6MID+PkvQLErEOtjqRxtSnyiyaoXKhLk=
Subject key identifier:   A9:53:89:E6:CC:6E:A3:E1:D6:FC:3D:4B:80:CE:F7:0D:94:DE:31:46
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       0E13CC31ABB79B882EC40D2CC1BFD8E323D006F8
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a63303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:43 +0000
ROA not before:           Fri 03 Jul 2026 01:45:43 +0000
ROA not after:            Fri 02 Jul 2027 01:50:43 +0000
asID:                     273832
IP address blocks:        2803:8950:c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:13:cc:31:ab:b7:9b:88:2e:c4:0d:2c:c1:bf:d8:e3:23:d0:06:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:43 2026 GMT
            Not After : Jul  2 01:50:43 2027 GMT
        Subject: CN=A95389E6CC6EA3E1D6FC3D4B80CEF70D94DE3146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:82:42:91:cc:1d:12:dd:e8:3e:ae:7e:a3:62:
                    c1:6e:d6:71:19:dc:e1:50:5a:31:3a:9f:2c:1f:11:
                    3a:9e:2e:25:c2:ff:e4:7f:55:05:e5:cb:a8:53:57:
                    49:c0:5e:46:04:6e:c7:0b:b1:cf:a5:b9:d8:4d:25:
                    30:f8:f8:fb:0e:f1:3c:a3:42:09:92:67:7a:2a:dc:
                    0b:1e:3a:b1:67:7f:50:f0:78:f7:93:51:ac:92:17:
                    b8:af:9c:89:21:a2:a8:1f:92:da:f8:a3:c4:17:34:
                    93:a4:c3:cb:67:68:b5:b8:12:f3:98:09:e3:b0:ac:
                    ca:cc:78:fb:57:f2:47:84:4d:1e:a2:b3:6d:33:4e:
                    ab:3b:ac:f8:40:43:be:ea:73:8c:c5:2b:d3:59:a1:
                    bf:45:9c:3a:39:f5:91:a5:cd:2b:f7:8d:85:1b:30:
                    7b:d0:f1:24:5b:fb:d7:7c:62:48:59:48:7b:5d:c7:
                    29:97:b3:a1:2f:e5:d1:88:8c:72:e1:20:2e:1a:36:
                    c6:c3:a0:a2:75:ce:75:27:3f:31:c7:d2:9b:42:ab:
                    99:26:7a:72:8a:e6:7e:60:f5:a2:6d:64:04:33:a0:
                    ec:ee:b7:13:76:42:25:60:e8:8f:e3:b4:5d:17:3e:
                    99:f5:82:42:89:a7:6c:24:9a:6e:81:38:76:03:c3:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:53:89:E6:CC:6E:A3:E1:D6:FC:3D:4B:80:CE:F7:0D:94:DE:31:46
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a63303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:b5:76:b1:e9:b2:65:66:09:f1:32:9a:f1:87:86:0c:ba:
         18:93:9e:65:17:34:99:e1:aa:1d:09:7f:c8:33:ae:31:43:9b:
         28:39:ab:7d:8d:56:43:93:eb:91:df:dd:b4:07:1e:e8:0d:24:
         42:fe:fc:9f:78:5d:96:33:b4:9c:4f:88:a1:18:25:d9:83:94:
         36:2f:d3:76:b6:d8:1f:17:60:27:19:02:2b:9c:6f:52:1a:98:
         f3:ed:a1:67:64:07:f3:50:db:22:dc:c0:3c:d6:85:5d:18:39:
         35:15:b6:9e:a1:6d:a3:bd:ac:36:40:49:28:97:d9:2e:09:b0:
         50:e9:02:55:30:f2:3f:29:e2:ab:a5:0c:95:fc:55:7d:df:fb:
         aa:83:8b:af:3a:a0:ec:e2:77:c5:56:f5:3c:07:c6:32:5d:69:
         4c:5a:48:36:85:7b:06:ff:7c:31:17:03:b9:e7:be:75:9c:91:
         d2:0a:93:04:db:0b:54:a5:ef:94:e6:a6:3c:2a:64:e7:b6:bd:
         6a:79:10:f2:31:d7:b9:9a:0a:17:a0:40:ec:27:fd:66:25:98:
         da:62:07:af:ae:d5:10:92:0c:6a:57:ca:20:87:7d:2e:8e:4c:
         61:43:e8:f2:0b:ec:52:8f:dc:2e:51:53:0c:1a:86:43:fe:0b:
         a2:5a:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:20:05 2026 by rpki-client