Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a633030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a396261303a633030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          GbaKF8HbHZRlM0JirsokiMrmlS5xw/NjLHF31xhhv6U=
Subject key identifier:   6E:D4:E4:92:C8:A8:D7:B5:E0:7A:4B:94:72:5D:FD:CF:86:A9:49:FE
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       282C6DCE037AB1A401E82F4FA0F1C64C15870ED0
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a633030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 02 Oct 2026 17:37:51 +0000
ROA not before:           Fri 02 Oct 2026 17:32:51 +0000
ROA not after:            Fri 01 Oct 2027 17:37:51 +0000
asID:                     263750
IP address blocks:        2803:9ba0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2c:6d:ce:03:7a:b1:a4:01:e8:2f:4f:a0:f1:c6:4c:15:87:0e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Oct  2 17:32:51 2026 GMT
            Not After : Oct  1 17:37:51 2027 GMT
        Subject: CN=6ED4E492C8A8D7B5E07A4B94725DFDCF86A949FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:7a:14:9b:c4:44:60:3b:9c:84:86:27:7e:
                    1b:08:f1:0a:c0:96:a8:95:58:31:59:0a:23:0f:21:
                    f7:d2:53:86:d2:39:12:5f:43:e4:46:9b:77:05:92:
                    15:34:e7:86:78:2b:a7:7a:b5:85:73:65:9a:ea:a5:
                    6c:07:2d:9e:ed:e8:96:36:aa:f3:3b:16:f7:06:53:
                    31:2c:8d:35:81:1e:fc:b1:ef:05:94:b6:43:b6:00:
                    24:51:09:f4:d1:e0:e1:49:2f:a4:1b:26:2b:3b:ff:
                    c6:26:2b:dc:86:21:79:b0:25:b2:04:53:b1:8f:53:
                    4e:25:1c:87:b8:a9:38:8f:87:2d:93:76:13:8a:be:
                    92:2e:c6:c1:c1:93:c4:d0:eb:c4:a8:83:54:81:ef:
                    d5:09:8f:2b:da:7f:5d:05:ff:6f:27:6c:92:c7:68:
                    9c:44:40:f7:17:7b:f0:09:05:05:19:f9:0f:94:a9:
                    4a:41:59:50:9b:4a:52:0d:40:33:cc:9f:ec:5e:ea:
                    54:73:b2:6a:ee:88:7d:7c:95:bf:f4:af:a9:bb:be:
                    0b:dc:87:1f:7e:74:34:93:3c:79:f0:31:d0:61:80:
                    40:d2:57:4a:8f:7b:8a:a6:f4:99:95:43:87:dd:b1:
                    ad:2e:79:08:77:0e:59:f1:fa:38:7c:7e:e8:c8:a7:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D4:E4:92:C8:A8:D7:B5:E0:7A:4B:94:72:5D:FD:CF:86:A9:49:FE
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a633030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:01:e9:8d:89:c9:c0:45:13:47:c1:d7:3f:74:0f:84:cf:
         a3:66:e4:6c:ae:a1:e6:72:8b:98:b7:50:8a:b8:3e:78:16:6b:
         26:73:5a:d6:79:87:e7:bb:2d:94:14:d1:88:ee:27:cb:31:08:
         32:e3:2a:41:cb:71:ef:1d:fc:f0:d3:8b:fa:86:4a:c0:f2:dc:
         a7:97:55:58:7c:94:3a:2b:7c:6f:39:eb:1d:4d:d3:e4:63:01:
         de:50:3a:eb:88:1b:f5:b4:36:5f:de:54:ea:b3:fb:44:3c:f9:
         13:98:07:94:f9:ba:48:96:a2:5e:1a:83:44:2e:39:73:cb:d3:
         3f:2e:b5:45:d6:fd:29:9f:9f:0c:8a:7b:43:fb:44:99:13:87:
         d5:55:5a:0a:d1:d8:8e:df:55:43:76:84:09:a7:58:9b:8f:59:
         4e:97:60:a3:95:22:ce:6d:7c:2a:b3:8b:6f:81:50:6e:8d:73:
         e8:36:19:2d:51:b5:c7:16:38:f0:75:df:72:c1:cb:f1:6d:cf:
         9c:66:c6:14:a7:6e:d3:99:80:77:f2:89:1f:93:f9:1f:6d:ac:
         80:f0:e1:9b:08:3a:7e:18:09:58:a0:82:b8:7b:1f:4d:e3:71:
         66:eb:4d:a5:e0:e4:5a:63:0b:1c:bd:ef:a2:c7:93:2a:75:af:
         84:7d:62:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 14 09:56:44 2026 by rpki-client