Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23DFAD010D538559893BFE771C5DC42DBCBD774BBCA88D76E8139D60C8361992/0/323830333a326439303a3a2f33322d3634203d3e20323732393933.roa
File:                     323830333a326439303a3a2f33322d3634203d3e20323732393933.roa (raw, json)
Hash identifier:          BMc+7VroNTeg/oyg+4IdX68cNzJwfBUgOcVi/b2dFIQ=
Subject key identifier:   08:DB:CD:DD:A7:95:75:C8:A1:9E:E1:FC:50:AD:BA:E6:7D:7B:9C:7A
Certificate issuer:       /CN=B83A3086658ED0B7A22D9DB2619915619F085376
Certificate serial:       65ADB736E855FB1CB8F0A3F62C0825F5F5CD8A2D
Authority key identifier: B8:3A:30:86:65:8E:D0:B7:A2:2D:9D:B2:61:99:15:61:9F:08:53:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83A3086658ED0B7A22D9DB2619915619F085376.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23DFAD010D538559893BFE771C5DC42DBCBD774BBCA88D76E8139D60C8361992/0/323830333a326439303a3a2f33322d3634203d3e20323732393933.roa
Signing time:             Mon 13 Jul 2026 15:50:00 +0000
ROA not before:           Mon 13 Jul 2026 15:45:00 +0000
ROA not after:            Mon 12 Jul 2027 15:50:00 +0000
asID:                     272993
IP address blocks:        2803:2d90::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23DFAD010D538559893BFE771C5DC42DBCBD774BBCA88D76E8139D60C8361992/0/B83A3086658ED0B7A22D9DB2619915619F085376.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23DFAD010D538559893BFE771C5DC42DBCBD774BBCA88D76E8139D60C8361992/0/B83A3086658ED0B7A22D9DB2619915619F085376.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83A3086658ED0B7A22D9DB2619915619F085376.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:b7:36:e8:55:fb:1c:b8:f0:a3:f6:2c:08:25:f5:f5:cd:8a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83A3086658ED0B7A22D9DB2619915619F085376
        Validity
            Not Before: Jul 13 15:45:00 2026 GMT
            Not After : Jul 12 15:50:00 2027 GMT
        Subject: CN=08DBCDDDA79575C8A19EE1FC50ADBAE67D7B9C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:69:12:23:f3:03:14:71:8a:7c:40:ea:4b:
                    93:79:a1:bd:a5:fc:e8:a4:16:67:fe:f9:86:8d:28:
                    b2:cd:3e:a1:b9:82:32:d0:ad:88:08:65:cc:7b:30:
                    24:43:7b:95:c0:2c:be:1d:03:3e:ef:db:11:94:a8:
                    e3:4c:84:32:46:f4:98:ff:25:93:ae:fa:93:0a:1f:
                    25:b4:42:08:88:75:13:98:ec:08:ae:6e:59:c9:f4:
                    7e:31:e5:04:c9:7e:2a:94:68:85:60:75:a5:e1:c1:
                    15:70:00:d1:d6:83:7e:9b:e7:fe:14:92:fd:9c:78:
                    4e:ba:6e:00:15:01:25:6c:d4:87:0a:67:d2:14:82:
                    47:cf:53:57:68:20:10:a1:59:80:e0:42:22:85:0b:
                    6a:52:44:89:35:7d:47:4f:ac:6c:ad:36:f5:23:7f:
                    6b:3d:3b:a4:d4:17:4a:f6:05:6e:1a:ee:3d:19:89:
                    b3:69:4b:41:00:eb:00:c3:86:10:41:fc:f8:4b:67:
                    45:6d:28:49:9b:55:ae:9e:dd:08:84:fb:60:20:b5:
                    0d:d1:bd:2f:3e:6b:07:93:e3:b2:4e:f5:3f:3b:5a:
                    6f:cf:7d:c1:a3:c3:4b:64:bc:56:80:c9:70:17:8b:
                    d9:27:34:62:3f:dd:fa:7a:88:78:da:33:0a:04:02:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:CD:DD:A7:95:75:C8:A1:9E:E1:FC:50:AD:BA:E6:7D:7B:9C:7A
            X509v3 Authority Key Identifier:
                keyid:B8:3A:30:86:65:8E:D0:B7:A2:2D:9D:B2:61:99:15:61:9F:08:53:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23DFAD010D538559893BFE771C5DC42DBCBD774BBCA88D76E8139D60C8361992/0/B83A3086658ED0B7A22D9DB2619915619F085376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83A3086658ED0B7A22D9DB2619915619F085376.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23DFAD010D538559893BFE771C5DC42DBCBD774BBCA88D76E8139D60C8361992/0/323830333a326439303a3a2f33322d3634203d3e20323732393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:f8:db:4e:f7:ff:6d:10:a3:17:4d:e4:32:5b:2f:50:e2:b9:
         19:be:65:34:49:ce:c7:58:ff:40:c9:13:71:15:35:da:e3:5b:
         da:2f:e7:cf:21:28:55:00:b0:2a:c9:87:af:0f:39:44:2e:58:
         c8:6f:30:10:41:34:69:ce:f1:84:af:04:9a:30:09:26:3d:b9:
         cf:02:f5:dd:e8:f1:ab:8d:09:14:a7:9e:3b:7b:48:39:70:aa:
         92:ff:99:7f:a8:78:d0:0c:a9:65:2b:5a:80:9f:92:74:d6:ed:
         af:2f:01:e3:b4:b0:81:d3:0e:4e:ae:43:fc:95:a4:ea:b4:f9:
         f4:23:39:b1:5a:35:88:e8:62:84:6d:ff:88:b1:f8:df:dd:8e:
         1c:44:9b:67:c8:58:12:63:86:06:c7:c7:af:03:2a:1d:da:ef:
         a6:5a:17:93:6e:8f:71:7d:ff:14:23:b8:0f:f3:b2:d9:90:6b:
         d6:91:2b:c8:b6:0a:63:56:df:23:e3:50:84:4d:dd:08:c0:99:
         18:ae:10:ac:bf:f9:f1:94:72:8c:37:7a:13:91:39:07:77:2d:
         20:43:48:c4:bf:d8:6b:c1:1f:66:29:9a:87:30:ee:3b:d0:2f:
         fe:c4:fa:da:1a:8a:26:84:14:36:eb:7a:9a:84:15:9d:f4:27:
         78:4f:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:29 2026 by rpki-client