Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a343030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a396261303a343030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          h7sNdmrpO4Vm/0fXGbhoIV3VpdTjDUhQMxrA/1/YoTM=
Subject key identifier:   F5:78:4F:3F:7A:76:3D:23:51:B1:ED:23:B0:2A:AB:12:8C:72:52:DD
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       19AF94E22499B0357D89BF50FA1E442E76276F97
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a343030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 02 Oct 2026 17:37:50 +0000
ROA not before:           Fri 02 Oct 2026 17:32:50 +0000
ROA not after:            Fri 01 Oct 2027 17:37:50 +0000
asID:                     263750
IP address blocks:        2803:9ba0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:af:94:e2:24:99:b0:35:7d:89:bf:50:fa:1e:44:2e:76:27:6f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Oct  2 17:32:50 2026 GMT
            Not After : Oct  1 17:37:50 2027 GMT
        Subject: CN=F5784F3F7A763D2351B1ED23B02AAB128C7252DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:07:a9:36:fd:77:ed:70:2c:3f:e0:c2:7d:
                    3b:79:b6:c9:ad:10:c2:ce:01:3b:be:9c:3b:4d:75:
                    8c:96:42:de:44:1d:c2:a5:fd:1e:77:14:57:28:aa:
                    5e:1a:c3:79:d4:22:a7:c9:f8:9b:5b:8e:91:4a:b3:
                    0a:e1:5a:1b:a8:f2:2d:24:b5:85:c7:ab:7e:8e:64:
                    a8:ef:35:5a:0d:a5:1d:5d:f5:5e:cd:bf:bb:45:07:
                    5b:10:1f:91:70:61:96:6f:af:51:cb:88:91:fe:3b:
                    e4:e2:66:5d:32:42:4c:ba:b8:60:09:9c:ce:e6:4d:
                    af:75:16:1f:61:62:3a:8b:d2:1c:83:87:53:68:ff:
                    c0:42:c5:0f:2f:24:57:92:e0:e0:3b:8d:70:34:87:
                    12:a4:ce:1a:e5:35:ee:e3:2f:09:3b:73:16:96:7d:
                    81:44:f4:be:c7:03:58:86:b7:fa:b7:5c:aa:07:10:
                    1c:c9:5c:f9:15:47:df:2e:52:30:68:1d:eb:b3:b3:
                    c2:e9:17:38:3b:9c:53:4f:3d:82:8e:4d:c0:25:41:
                    63:3b:8d:73:99:6a:6c:5e:8a:64:51:8f:fc:94:8c:
                    93:b1:d8:92:84:30:0c:f1:e0:eb:0b:fe:23:ab:e7:
                    a3:83:8f:47:91:1e:51:fa:23:87:16:3b:0e:38:c8:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:4F:3F:7A:76:3D:23:51:B1:ED:23:B0:2A:AB:12:8C:72:52:DD
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a343030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:77:76:1a:32:51:07:b5:d8:4b:7f:23:90:ea:0b:68:02:7a:
         60:32:01:2b:81:54:89:5c:a7:a4:b5:78:e9:a0:e2:65:49:91:
         88:d2:24:7a:ce:dc:f4:1f:79:81:3d:18:2c:3b:30:e9:49:2c:
         1b:fd:60:35:35:53:33:1b:44:82:47:cb:8d:e4:7b:08:d8:c7:
         00:df:9f:f6:f6:20:e2:ea:dc:cd:cc:d8:8d:ef:cc:dd:0c:1a:
         90:a4:58:f0:b2:9b:50:20:da:05:03:96:24:40:0a:36:b1:75:
         7a:8e:bd:c8:98:bf:45:bc:b6:c3:4d:59:a9:88:d5:bb:c2:89:
         2c:1d:06:ac:74:5f:96:46:17:4d:3d:1c:e4:f5:3c:0f:bd:07:
         d6:c2:74:6b:06:37:62:0f:bf:f3:39:fd:07:a3:85:0e:10:fe:
         13:58:79:5d:70:65:9f:00:d7:e4:dc:7e:6a:77:2e:9f:93:41:
         43:f3:29:82:f3:3a:35:1b:2e:c0:d2:a5:d8:df:53:b6:f0:ac:
         5a:e5:29:a1:1e:4d:c6:b3:29:8f:58:6f:15:35:40:71:e3:b2:
         a7:bc:a5:13:64:02:77:7d:df:81:b3:71:9e:b3:3b:6c:7c:00:
         24:da:34:3a:52:0e:78:41:e7:a0:3b:66:f7:35:75:1b:28:a2:
         85:7b:65:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 16 03:09:27 2026 by rpki-client