Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          rJJVd/UefRAE6P9ZydJd3W1+VSSgHgj2hfwuLRHp3XI=
Subject key identifier:   61:87:67:29:B0:C8:41:BB:5C:5E:BC:96:08:49:B5:91:42:F7:DE:71
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       490C999954987A14F47640C0AE268A6E634BD4F9
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Wed 14 Oct 2026 21:40:37 +0000
ROA not before:           Wed 14 Oct 2026 21:35:37 +0000
ROA not after:            Wed 13 Oct 2027 21:40:37 +0000
asID:                     273177
IP address blocks:        2803:ca50:2c02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0c:99:99:54:98:7a:14:f4:76:40:c0:ae:26:8a:6e:63:4b:d4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Oct 14 21:35:37 2026 GMT
            Not After : Oct 13 21:40:37 2027 GMT
        Subject: CN=61876729B0C841BB5C5EBC960849B59142F7DE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:e6:db:92:98:fc:df:7f:da:eb:c1:54:d7:
                    dd:9b:23:10:1b:d7:ce:1e:24:ac:2b:34:cb:af:76:
                    f0:e6:fa:9d:30:ee:04:ea:5b:70:37:ec:26:4a:c8:
                    d9:2c:bc:5a:b0:30:0a:ea:0a:40:13:5a:fa:da:1d:
                    f5:e1:6b:b0:79:f9:35:d1:73:33:bf:cc:92:bf:38:
                    5c:b0:d1:43:cd:66:c8:5c:fb:11:6b:94:31:84:70:
                    7c:4d:e5:24:0b:1f:4a:19:ad:b3:8e:61:3d:5d:e7:
                    2c:d2:62:88:3e:16:4d:14:38:f5:86:ec:40:25:f1:
                    72:6d:22:1b:b0:cc:02:00:b9:e0:1b:ca:70:99:3d:
                    88:15:90:9f:40:51:aa:07:3d:90:7e:18:3f:9d:22:
                    41:54:c6:0f:65:0c:44:a6:ca:61:74:2a:49:b2:a8:
                    c5:55:33:d1:8e:18:c3:c1:98:2a:c4:c1:dd:0a:7f:
                    4f:62:f1:45:cf:c0:05:df:05:1f:f5:23:71:58:07:
                    57:34:7e:69:47:ea:0a:21:7a:1f:50:46:db:03:a9:
                    41:92:d5:64:ee:62:ad:f7:8a:b9:ad:20:26:fa:d6:
                    30:94:b3:69:fb:41:08:c1:21:58:12:09:3d:76:01:
                    19:87:65:b8:c9:e8:5d:8c:49:93:58:28:28:c1:49:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:87:67:29:B0:C8:41:BB:5C:5E:BC:96:08:49:B5:91:42:F7:DE:71
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a326330323a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:2c02::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:b2:8f:49:49:03:9e:eb:50:32:d7:69:83:ca:44:d2:a6:43:
         30:ad:10:b9:62:c1:73:9c:e3:cc:8b:63:a6:44:1d:0d:fa:4a:
         7f:28:2e:33:10:f5:d1:c8:69:4d:2f:7f:58:f0:8e:9d:bb:fe:
         2f:65:56:60:07:7f:6b:ad:85:f7:d1:7a:d2:8e:78:5b:ac:c6:
         30:d0:b3:6c:76:05:38:74:e4:f6:39:22:1d:f5:b2:ab:9e:cd:
         e1:75:ba:f8:f8:ff:16:82:0a:0a:15:e0:d5:eb:8e:d9:c2:b3:
         e4:5f:78:33:4f:5d:39:9e:f7:55:9d:ff:c3:9b:84:ea:20:3f:
         b7:70:24:f0:b0:ce:46:36:96:ac:61:95:b7:50:f6:e2:fc:11:
         df:f6:0a:86:82:59:63:77:7f:13:7d:b5:ed:67:08:3b:a6:a8:
         bc:ec:f5:ff:1a:ad:bd:3b:da:77:c6:fb:60:f2:7d:86:2c:59:
         5a:63:35:f9:39:8e:c6:60:ef:00:c8:3c:7c:40:be:06:34:f5:
         b0:10:1f:74:a5:dc:72:0f:39:9e:28:aa:12:6b:d3:36:4f:2c:
         f3:ef:0d:9c:da:2e:9c:bd:05:cf:c0:41:d7:df:94:df:ed:7b:
         35:81:42:fc:ff:7a:00:99:cc:bf:7b:02:c6:35:08:23:49:71:
         85:67:84:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:52:30 2026 by rpki-client