Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3438203d3e203237393736.roa
File:                     323830333a3730303a3a2f33322d3438203d3e203237393736.roa (raw, json)
Hash identifier:          op17f43jpS/sombIEwR01Si3YKJMrD6cPwa6MpIHScU=
Subject key identifier:   85:1B:41:43:EF:21:52:2B:09:91:B5:3F:7B:2D:F7:CF:5D:5A:E8:12
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       6B42777C7CFFCF85E318F1EF543BE674E355EC78
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3438203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:00 +0000
ROA not before:           Fri 02 Oct 2026 18:33:00 +0000
ROA not after:            Fri 01 Oct 2027 18:38:00 +0000
asID:                     27976
IP address blocks:        2803:700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:42:77:7c:7c:ff:cf:85:e3:18:f1:ef:54:3b:e6:74:e3:55:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:00 2026 GMT
            Not After : Oct  1 18:38:00 2027 GMT
        Subject: CN=851B4143EF21522B0991B53F7B2DF7CF5D5AE812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:9f:8a:d5:f9:22:a8:6e:6b:52:4c:a2:20:
                    62:92:ab:b7:fc:93:11:3b:b7:89:91:1c:41:a8:2a:
                    70:00:8e:5f:5c:48:0e:40:4f:4e:89:fe:48:71:26:
                    8b:6c:35:15:48:a3:ec:25:42:4c:30:87:fc:6b:05:
                    15:6e:95:df:ae:8f:5d:a5:08:53:85:b3:b7:a8:81:
                    ca:9e:a3:d8:75:8c:96:05:e7:aa:46:7e:2e:97:1b:
                    28:eb:14:f6:6f:2b:28:6b:bc:6b:8b:11:70:a3:b0:
                    cf:3f:57:0b:a9:1e:91:45:c7:8b:28:32:8b:b4:d1:
                    e1:3f:fd:43:07:1e:f7:ce:71:fe:53:4d:56:41:1e:
                    20:9a:bf:5f:37:79:a6:e0:01:6d:a4:30:76:56:50:
                    00:92:ea:fa:e2:87:c4:7e:fe:8a:1b:06:dc:76:80:
                    1a:73:b5:84:d4:2a:ba:a5:fd:a5:45:e7:ac:1a:aa:
                    73:f7:5d:56:66:6b:5e:06:cf:d8:b7:95:9c:b9:55:
                    8e:ed:e6:a5:0f:0c:7f:b1:d2:2b:34:8a:9d:4e:f9:
                    da:67:90:02:cf:4f:e1:42:67:34:2e:2c:18:cf:36:
                    a7:22:d3:6a:93:2b:6c:b0:33:d7:be:19:c3:88:b3:
                    2f:16:da:03:01:41:da:08:6e:2a:0d:03:28:33:b9:
                    c1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1B:41:43:EF:21:52:2B:09:91:B5:3F:7B:2D:F7:CF:5D:5A:E8:12
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3438203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:4a:1c:f0:d3:c2:85:90:7a:29:db:8e:05:e4:24:52:fd:2b:
         fd:a3:39:5a:b3:fd:54:8b:e9:a8:aa:05:17:f2:e0:f0:84:f9:
         d6:d7:57:62:87:8a:57:50:e8:f9:01:92:9d:0c:c7:83:bd:86:
         1e:f8:b1:6f:48:55:27:c7:90:9b:2f:de:91:59:7b:1e:2b:6a:
         de:8d:64:fe:e2:72:43:fa:0c:8a:16:dd:09:85:a5:f9:90:de:
         e1:f6:a6:5f:0c:28:0d:5d:22:88:26:4c:dc:26:99:5f:e6:95:
         5c:47:b0:73:45:30:23:d8:44:f6:4c:a5:19:84:c5:92:bc:cd:
         98:25:4f:09:70:6c:03:2e:7d:95:33:e1:92:73:ae:00:f5:2e:
         96:b7:de:8a:14:6f:6f:dc:2b:fa:90:a7:03:d4:38:84:3c:0f:
         31:2a:1f:7f:f5:08:5b:d3:f3:de:b5:be:70:94:1e:e9:27:1c:
         a6:0b:ab:14:bd:ed:a6:39:ae:a4:b4:fe:28:be:dc:77:ed:d4:
         d2:b3:f0:9b:58:88:36:4c:4c:0e:ef:fe:08:68:39:14:52:00:
         6a:7a:6d:61:2b:c8:e3:5a:6b:40:51:fb:99:a0:46:46:69:da:
         7a:15:6a:ee:f2:95:cd:91:83:41:9e:e7:fa:48:4a:ff:8f:b1:
         b2:cd:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:49:20 2026 by rpki-client