Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/323830333a373963303a3a2f33322d3438203d3e20323635373037.roa
File:                     323830333a373963303a3a2f33322d3438203d3e20323635373037.roa (raw, json)
Hash identifier:          gIKVDBLdpOc8MyBuFp4XoOpWWEfpB4rD8ho0nizuZWo=
Subject key identifier:   0F:17:07:06:83:A0:41:4B:C2:C3:3A:6B:AE:E4:D4:1C:18:72:4E:6D
Certificate issuer:       /CN=0C9F7C8120191058D60FE1C254277BCAFC0A1960
Certificate serial:       2803376F199905C77E7291F062648F68EA8ECACA
Authority key identifier: 0C:9F:7C:81:20:19:10:58:D6:0F:E1:C2:54:27:7B:CA:FC:0A:19:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/323830333a373963303a3a2f33322d3438203d3e20323635373037.roa
Signing time:             Thu 24 Sep 2026 16:36:35 +0000
ROA not before:           Thu 24 Sep 2026 16:31:35 +0000
ROA not after:            Thu 23 Sep 2027 16:36:35 +0000
asID:                     265707
IP address blocks:        2803:79c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 09:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:03:37:6f:19:99:05:c7:7e:72:91:f0:62:64:8f:68:ea:8e:ca:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9F7C8120191058D60FE1C254277BCAFC0A1960
        Validity
            Not Before: Sep 24 16:31:35 2026 GMT
            Not After : Sep 23 16:36:35 2027 GMT
        Subject: CN=0F17070683A0414BC2C33A6BAEE4D41C18724E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dc:a0:4a:ee:ce:98:77:cd:0d:e5:25:ab:d1:
                    9d:a9:60:98:50:15:8b:ef:87:7e:bf:b2:0f:7f:95:
                    7c:3b:cd:79:6a:f1:f2:f2:54:49:ba:1f:47:fd:e3:
                    10:ea:35:d9:6b:31:6b:0c:1d:d6:36:93:4e:16:68:
                    e8:59:2d:2f:f3:c9:5c:a1:a6:ac:c4:a2:dc:b1:84:
                    fe:72:70:a1:00:20:19:c2:d9:8f:90:38:e2:21:bc:
                    e9:84:29:9f:40:26:6e:47:14:38:0a:d9:15:1d:4d:
                    df:7a:a5:0f:06:28:4f:9d:c0:e0:b9:f0:b0:74:bd:
                    58:d8:6e:37:7d:24:cf:d0:f9:e4:15:d6:a4:30:5a:
                    bf:3f:cc:ab:f6:8a:7c:c8:2e:f3:f9:42:c5:77:8a:
                    63:68:45:7e:91:c6:cc:32:01:86:ba:6c:93:cb:df:
                    97:73:c8:6a:2f:39:e4:96:a5:c2:e6:c2:eb:3d:a7:
                    1c:62:74:22:76:96:8f:95:a6:02:54:2b:18:1f:23:
                    10:0f:fd:31:5e:3a:ba:aa:94:2a:6b:70:84:03:7b:
                    ac:21:61:a9:35:b0:b4:a8:d8:fa:51:2e:06:89:f7:
                    9e:ae:3c:44:3f:7f:36:97:6c:95:cd:21:c6:5d:6f:
                    49:6e:b0:67:b0:5d:2f:4f:ca:40:16:f0:91:9c:7a:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:17:07:06:83:A0:41:4B:C2:C3:3A:6B:AE:E4:D4:1C:18:72:4E:6D
            X509v3 Authority Key Identifier:
                keyid:0C:9F:7C:81:20:19:10:58:D6:0F:E1:C2:54:27:7B:CA:FC:0A:19:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/323830333a373963303a3a2f33322d3438203d3e20323635373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:79c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:39:fe:c6:42:14:52:99:39:3c:41:ad:c3:ad:7f:3a:2c:
         c8:68:63:71:f9:78:17:02:f2:53:4b:74:fa:9f:5e:40:e3:20:
         d7:c9:82:53:ec:b7:49:1b:08:79:20:42:ce:a2:70:29:2a:01:
         3d:9b:84:c7:21:95:73:8e:ab:e3:92:ed:9e:9d:2e:2c:02:4a:
         e2:2e:8c:4f:15:79:f8:6b:90:37:05:8f:6b:81:fd:19:47:99:
         a1:c7:c4:ff:48:5f:54:00:c9:92:5d:7e:46:ce:50:8d:1d:fd:
         e6:af:a9:99:dd:bd:0b:cd:c1:50:07:93:ce:24:31:8f:4f:00:
         be:72:93:3c:2b:dd:9d:41:c9:3c:72:c9:22:42:72:27:da:3f:
         b3:f4:1e:29:68:2a:3b:cc:d4:b6:3e:ad:40:76:d8:36:50:9c:
         34:fc:f3:f6:9a:14:55:5a:3f:c4:b7:1f:ce:43:dd:6c:7e:0e:
         7a:e5:00:5b:92:bd:b8:53:28:d0:e5:89:ad:c1:cb:41:95:5c:
         a0:8c:a6:ae:7d:01:72:af:1f:81:9e:6d:cf:fe:33:e4:f2:89:
         a8:71:ec:d6:24:56:45:57:7d:1c:57:b5:74:33:49:6a:d6:11:
         05:95:b9:a1:57:a3:9b:49:c3:84:0f:2e:1e:41:68:e4:0b:78:
         57:48:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:27:14 2026 by rpki-client