Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          QnL+SUwkcZ3WmzkH7bvFU7sF0v48lY7t+4eJAVKiI30=
Subject key identifier:   D0:18:DC:81:A7:D1:F8:A5:0B:F5:2E:09:73:70:EF:F9:22:EB:05:F2
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       2BEC9C4E185D6D689424C17A91F8E685B1D0F4EF
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Wed 14 Oct 2026 21:40:36 +0000
ROA not before:           Wed 14 Oct 2026 21:35:36 +0000
ROA not after:            Wed 13 Oct 2027 21:40:36 +0000
asID:                     273177
IP address blocks:        2803:ca50:1c01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ec:9c:4e:18:5d:6d:68:94:24:c1:7a:91:f8:e6:85:b1:d0:f4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Oct 14 21:35:36 2026 GMT
            Not After : Oct 13 21:40:36 2027 GMT
        Subject: CN=D018DC81A7D1F8A50BF52E097370EFF922EB05F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:00:4c:01:95:b8:8c:18:dc:82:1e:12:ef:
                    a5:55:0e:b2:62:b2:a6:9b:27:86:21:d3:cc:2d:52:
                    c4:61:f3:76:91:ef:be:4a:66:0e:0b:75:0b:c6:e4:
                    3b:76:e4:f2:cf:16:97:1a:df:99:c0:26:7a:67:c9:
                    04:38:ae:c2:d6:e3:80:a5:6e:76:f0:86:5f:8d:59:
                    e9:9b:db:25:86:26:27:5e:6f:9a:c0:de:81:ab:56:
                    dd:03:46:68:90:0b:42:b9:0f:12:da:3e:7a:28:c4:
                    74:a6:1e:f7:4d:9a:eb:eb:5e:ad:c4:4d:52:a6:7d:
                    18:78:5c:5c:3c:f5:d4:77:cd:5f:d1:44:44:36:0a:
                    a4:87:da:de:0d:e7:42:28:ff:b9:99:3d:8f:a3:4b:
                    50:32:c9:44:7a:a7:26:77:3a:af:8f:01:e2:d1:7a:
                    f9:46:9a:89:72:b8:fb:8e:0a:5e:20:49:2e:5c:4f:
                    0d:ad:72:57:a3:29:ec:98:04:2b:df:8e:f9:df:f4:
                    b6:c1:d6:d2:39:5b:6d:2c:b4:2a:3d:4b:cb:88:70:
                    cf:9c:dd:18:28:45:70:11:1f:22:1e:df:80:f3:47:
                    82:7a:d8:07:19:74:cd:23:f4:18:3c:d9:6f:60:b2:
                    93:91:d6:01:4f:a2:aa:08:1a:f5:aa:bc:0d:f8:53:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:18:DC:81:A7:D1:F8:A5:0B:F5:2E:09:73:70:EF:F9:22:EB:05:F2
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a316330313a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:1c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:bd:ca:ce:a9:29:07:a7:5a:a8:ad:81:0d:28:41:d9:61:
         8a:ee:1f:fa:5b:b5:d5:af:b5:72:cb:07:32:7c:c7:78:fc:1c:
         9c:91:37:88:35:73:64:ed:de:a5:9c:ae:82:2f:f7:c4:f0:ea:
         94:f0:8e:a0:4c:78:c6:9b:8b:ce:9f:78:8a:36:60:e6:94:41:
         a7:0a:35:87:b5:c2:57:f7:7e:2c:b6:c8:5f:5b:72:b2:9d:59:
         e4:e8:f0:83:38:15:d2:6b:38:b8:7b:8e:1f:91:d0:27:8b:d3:
         f0:3c:ea:78:37:ac:45:7c:04:6a:e6:2d:db:4a:dc:32:90:8b:
         38:14:a1:65:e5:50:30:90:ff:1c:a1:de:93:8e:b5:87:29:06:
         45:72:e5:7d:19:f7:85:8c:20:7c:94:50:89:e3:2c:fe:1d:87:
         f3:ab:4b:83:09:ee:03:c9:87:ba:bd:e4:f9:2c:c1:c8:bc:fd:
         15:f3:77:a9:c4:6c:b1:eb:35:70:8b:2e:85:1d:cd:47:10:d6:
         2f:cc:57:68:a8:af:43:1b:bb:73:0c:4e:a4:c2:d9:e0:c2:4a:
         ca:58:0e:c5:40:f5:ef:0f:73:67:ba:1d:2d:69:10:8b:15:b6:
         02:b3:5a:a5:13:7e:06:b7:05:48:29:3c:a9:96:9b:c2:90:77:
         ce:35:1e:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:47:00 2026 by rpki-client