Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a343030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a613034303a343030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          QMace+HseWrx7QxaYSCoOoqd4ECbpqH0zHJT2y06y+4=
Subject key identifier:   FE:1E:5E:CA:98:B7:DB:BD:4C:F4:39:2E:10:6D:7F:1F:A3:87:99:CD
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       0E22EB4346995DDFF862A7950DD7344C1BC82C80
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a343030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 02 Oct 2026 17:37:48 +0000
ROA not before:           Fri 02 Oct 2026 17:32:48 +0000
ROA not after:            Fri 01 Oct 2027 17:37:48 +0000
asID:                     263750
IP address blocks:        2803:a040:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:22:eb:43:46:99:5d:df:f8:62:a7:95:0d:d7:34:4c:1b:c8:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Oct  2 17:32:48 2026 GMT
            Not After : Oct  1 17:37:48 2027 GMT
        Subject: CN=FE1E5ECA98B7DBBD4CF4392E106D7F1FA38799CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:90:f0:5c:ac:b0:29:a5:f4:e0:5d:fc:9d:
                    85:2d:a6:46:a9:ad:b0:80:0f:2d:99:32:11:58:a2:
                    61:f3:7b:ad:6b:d9:47:c6:7b:86:1b:cf:7c:2b:2f:
                    6d:c9:70:23:0b:ba:ba:ed:23:cb:df:0b:1d:47:42:
                    a9:5e:37:27:44:a7:75:7e:b6:a7:d6:e3:8a:07:97:
                    45:55:3d:85:74:38:90:7b:f1:6d:2b:2f:dd:42:aa:
                    bc:05:2e:bc:14:74:d0:4b:2e:cd:c3:88:6c:ca:72:
                    6c:44:5a:9f:85:69:b3:81:5c:d9:2b:22:f1:82:d1:
                    30:8c:97:3f:e9:69:17:59:21:af:55:37:44:dd:47:
                    88:70:c6:73:5f:46:d1:83:f6:aa:84:3f:01:7e:fd:
                    a5:9c:4d:f6:90:f2:29:9a:a3:c2:f2:71:17:10:df:
                    a9:e8:01:54:8a:32:39:ac:e3:b4:b3:fa:15:21:fa:
                    1f:83:a5:ea:48:b3:94:11:e9:5d:ae:b4:1f:df:45:
                    04:4b:5f:20:b0:71:0f:a8:ae:9f:98:47:a9:f3:4c:
                    a0:da:19:e6:8d:47:dd:4b:54:83:79:a6:68:0d:41:
                    fb:46:8d:5a:fd:bb:07:2a:a8:c1:86:11:0e:34:61:
                    3a:f1:9d:b2:cd:00:30:6a:45:de:c5:0e:61:a3:fc:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1E:5E:CA:98:B7:DB:BD:4C:F4:39:2E:10:6D:7F:1F:A3:87:99:CD
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a343030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:f3:51:dd:f1:ae:70:8c:c0:7f:56:94:3b:23:b5:e8:2e:
         32:98:fd:87:03:7d:6f:c2:62:25:e3:b0:22:e3:b9:87:fd:f4:
         28:59:d7:04:8e:c1:f4:71:68:46:c0:59:f3:b0:73:4b:92:ba:
         98:0e:e0:be:57:21:13:35:7b:61:1d:63:8e:56:13:db:02:94:
         c7:77:d2:8b:8d:05:04:2a:ba:d5:1a:81:31:52:04:4d:fa:de:
         df:cd:86:88:f2:be:91:e3:d1:29:0c:1f:2b:e0:d4:b6:3b:41:
         74:a9:ec:b4:dc:19:04:a4:1a:f2:71:49:14:5f:36:89:b0:11:
         fd:15:3b:94:a8:d3:83:cc:f2:e1:23:ca:09:21:61:da:b8:79:
         bd:ed:f0:9a:b4:64:46:47:f3:76:cf:ab:8a:3d:68:3d:79:c6:
         a4:aa:df:d3:33:d0:da:51:a4:54:51:b2:8d:e0:d2:cd:00:ad:
         e8:8c:f0:10:81:21:8f:5f:80:d8:00:5c:02:4f:65:40:f1:8f:
         e7:b6:18:4b:7f:ac:c2:c0:74:7c:ec:27:43:89:ce:79:54:36:
         67:8e:e1:ca:31:6f:4c:b4:74:5d:bc:eb:ce:b3:1d:98:c5:84:
         a5:e3:f9:ae:4e:b7:d9:ee:19:9c:78:d5:c9:f0:72:8d:56:45:
         92:ee:06:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:25:08 2026 by rpki-client