Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/323830333a316164303a3a2f33322d3332203d3e20323734303736.roa
File:                     323830333a316164303a3a2f33322d3332203d3e20323734303736.roa (raw, json)
Hash identifier:          gLfp5fsLURlJ/kUVgITu588jtis3v6q6LzZvgGfsjoA=
Subject key identifier:   B9:2D:35:15:C8:BC:DE:CD:24:DB:BD:CD:A3:C9:EC:D9:B0:36:B8:46
Certificate issuer:       /CN=0A93A6C0EAF8441DE8352B346208D2723EDB984A
Certificate serial:       3AB7D1C687B76BE4919E6C0F66A5B6DD98A7DD7F
Authority key identifier: 0A:93:A6:C0:EA:F8:44:1D:E8:35:2B:34:62:08:D2:72:3E:DB:98:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/323830333a316164303a3a2f33322d3332203d3e20323734303736.roa
Signing time:             Thu 23 Jul 2026 04:30:00 +0000
ROA not before:           Thu 23 Jul 2026 04:25:00 +0000
ROA not after:            Thu 22 Jul 2027 04:30:00 +0000
asID:                     274076
IP address blocks:        2803:1ad0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b7:d1:c6:87:b7:6b:e4:91:9e:6c:0f:66:a5:b6:dd:98:a7:dd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A93A6C0EAF8441DE8352B346208D2723EDB984A
        Validity
            Not Before: Jul 23 04:25:00 2026 GMT
            Not After : Jul 22 04:30:00 2027 GMT
        Subject: CN=B92D3515C8BCDECD24DBBDCDA3C9ECD9B036B846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:92:ca:b5:d5:f8:79:12:67:15:50:24:9e:
                    69:b1:08:8e:ee:6d:3e:12:12:fa:8b:3e:e2:26:3c:
                    05:b6:39:0f:2f:7b:1b:21:f0:06:b2:10:8a:45:4c:
                    6e:78:e4:e9:f8:1e:04:b5:97:bb:f8:80:13:83:75:
                    7d:db:b4:8c:13:ff:52:c4:bb:b2:98:f7:a6:48:05:
                    f8:bf:06:a9:80:70:84:17:f3:93:5c:a6:a3:0e:59:
                    f7:e4:9c:eb:49:cf:c7:f0:aa:d4:13:48:6f:c6:86:
                    6a:c3:17:d5:fa:16:15:ea:a3:18:7b:b0:9a:ba:73:
                    cb:3f:07:da:cf:3e:4b:31:3f:00:79:ec:d5:97:d7:
                    34:31:f1:cf:1c:8a:3c:c6:69:38:ba:e8:3c:c6:34:
                    f6:8f:01:fa:ca:9c:80:ff:2e:ac:05:70:66:15:4f:
                    06:57:70:b0:af:23:f2:01:b5:70:e8:d7:0b:29:48:
                    44:97:9c:1b:0e:31:f3:8f:38:68:d6:f5:d7:83:af:
                    d8:8f:fc:b4:ab:02:75:14:9a:a8:a3:76:63:0c:cf:
                    2b:7c:27:df:a0:f3:9b:de:9e:e9:03:f6:c0:bc:4a:
                    2a:93:27:69:b9:9d:b4:ba:d0:31:bc:ed:fb:fe:84:
                    30:f7:96:74:0f:3b:d1:31:91:63:21:9c:93:40:7f:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:35:15:C8:BC:DE:CD:24:DB:BD:CD:A3:C9:EC:D9:B0:36:B8:46
            X509v3 Authority Key Identifier:
                keyid:0A:93:A6:C0:EA:F8:44:1D:E8:35:2B:34:62:08:D2:72:3E:DB:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A93A6C0EAF8441DE8352B346208D2723EDB984A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DBB833190C713EFEC20FB952446B234F53847EEEB1AF550D4A043C331856C4/0/323830333a316164303a3a2f33322d3332203d3e20323734303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:18:96:8c:98:50:3e:76:5e:62:cc:bb:ca:71:b0:7b:ae:
         e4:44:ed:89:be:72:b0:de:73:d6:4b:33:3d:81:9d:43:6f:6c:
         df:ff:89:a1:58:28:7f:66:82:67:1c:88:be:22:2f:9e:0e:a6:
         8b:90:50:ea:e7:08:82:39:37:73:51:c3:8a:a5:da:36:c6:04:
         2e:f8:97:72:62:5c:dc:42:8f:33:a1:02:f3:98:40:d4:84:28:
         b4:0b:b1:4f:59:80:89:fa:56:17:09:6f:f3:93:0a:d9:bb:74:
         3e:7c:89:c7:52:e7:56:82:fd:13:e8:1c:43:96:4b:31:a8:1c:
         26:aa:7c:ce:8a:1c:54:62:84:ee:6d:e1:d3:8c:cd:72:46:e1:
         a4:39:48:47:1a:05:ca:4b:8e:a3:54:01:2f:f9:79:15:fc:1e:
         79:4c:de:42:c6:21:b6:bf:75:89:2b:b3:04:8f:81:92:01:fe:
         bf:ab:6b:02:32:53:28:70:d6:1f:13:42:04:eb:c9:2a:71:60:
         94:16:00:7e:af:6b:39:23:85:15:1b:44:3a:5e:42:03:85:a5:
         91:d0:2d:b2:2b:c8:c9:03:2d:45:a5:4a:6c:33:1d:4b:a9:a9:
         bf:8a:f0:a3:f6:39:ea:be:be:3e:a0:45:06:1a:f3:a6:dd:40:
         82:33:c0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:29:02 2026 by rpki-client