Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3332203d3e20323732383133.roa
File:                     323830333a383439303a3a2f33322d3332203d3e20323732383133.roa (raw, json)
Hash identifier:          bgxrSutpdey8zc6nX5/oX9zFOrl5IkoZnAhRmMVkGmA=
Subject key identifier:   EA:E5:61:F7:CC:C6:A9:0C:CF:CA:80:1C:93:21:20:14:88:46:78:5E
Certificate issuer:       /CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
Certificate serial:       36BBA90321F5D2B7F8CCC5CEDCAEDEC21CFC5A39
Authority key identifier: 86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3332203d3e20323732383133.roa
Signing time:             Fri 10 Jul 2026 12:51:49 +0000
ROA not before:           Fri 10 Jul 2026 12:46:49 +0000
ROA not after:            Fri 09 Jul 2027 12:51:49 +0000
asID:                     272813
IP address blocks:        2803:8490::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 19:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bb:a9:03:21:f5:d2:b7:f8:cc:c5:ce:dc:ae:de:c2:1c:fc:5a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
        Validity
            Not Before: Jul 10 12:46:49 2026 GMT
            Not After : Jul  9 12:51:49 2027 GMT
        Subject: CN=EAE561F7CCC6A90CCFCA801C932120148846785E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fd:91:25:26:a7:4a:97:01:0d:1a:ea:d9:04:
                    a5:2a:ba:8b:33:99:36:2f:bc:c9:28:ae:ad:ed:d0:
                    7e:ba:58:29:f2:8f:15:09:27:a0:1e:c9:5d:ab:99:
                    d9:4a:89:3b:b2:e6:de:1b:e1:f4:b5:36:76:d5:a5:
                    f0:62:3d:db:4e:88:93:42:53:fe:0d:4e:d0:a7:0d:
                    75:ef:3b:76:18:11:18:be:3d:9e:4a:f6:b8:89:a4:
                    b1:d3:92:8e:a8:d8:a8:ab:fc:22:59:26:00:a9:0c:
                    ee:50:dd:b2:d1:6e:31:af:e3:1a:bd:38:c1:ce:ca:
                    ec:3a:59:7a:d4:8e:d4:fd:7c:9a:2f:26:35:e8:62:
                    e6:c7:22:f4:48:26:a9:d3:7e:b7:c8:bb:ef:94:80:
                    ce:47:1b:c6:f8:3b:5a:6b:66:9e:9f:93:37:a9:86:
                    99:38:3f:68:13:8d:ad:5f:6b:eb:8e:ea:51:51:3f:
                    b2:71:df:c3:61:ec:3f:f5:b6:78:b5:25:38:6c:fc:
                    2b:bd:c6:20:29:e2:c9:78:df:2d:fb:ba:b5:51:37:
                    a6:90:76:fe:8c:5c:ab:86:53:79:08:03:0a:b4:40:
                    b9:34:0e:bf:da:54:2a:2a:c4:2a:ba:e5:f9:09:e8:
                    cd:76:da:ab:a7:db:a2:75:0c:70:9d:2d:16:78:98:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E5:61:F7:CC:C6:A9:0C:CF:CA:80:1C:93:21:20:14:88:46:78:5E
            X509v3 Authority Key Identifier:
                keyid:86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3332203d3e20323732383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8490::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:26:7a:7b:81:34:f1:ac:8b:ef:74:04:e9:f3:d0:51:e2:71:
         9c:d9:05:9c:20:23:b7:a6:14:0a:fe:41:a5:f7:fa:3f:91:e6:
         85:68:c7:c7:8f:17:e6:96:fb:30:09:87:28:c7:09:62:0b:72:
         f6:04:05:b1:8b:6f:9e:fe:cc:56:50:dd:4a:ab:0d:8b:43:d1:
         60:03:91:c0:c1:40:41:5c:cd:7d:18:3c:4d:44:0f:ed:5f:41:
         c2:be:ea:55:a2:d1:f6:27:27:b6:57:75:76:a8:58:90:1f:63:
         b2:c2:9b:ac:bc:57:c6:46:06:be:1c:41:0a:91:7b:28:19:93:
         a4:6f:23:d7:dd:8d:49:90:fe:81:66:00:92:8e:71:12:44:12:
         f2:08:1b:4e:46:44:dd:30:98:1c:ab:f5:9c:36:9c:da:fb:67:
         10:00:4b:fe:8e:51:79:3c:20:dd:29:31:55:ef:a9:fd:ca:fc:
         92:ee:c7:5d:77:02:79:af:06:67:7a:67:86:6e:25:cd:f2:d1:
         6e:7c:b1:6b:ea:5f:59:4c:15:b9:a6:31:ba:27:3d:ef:5f:e6:
         77:dd:98:86:a1:4c:a9:6a:a6:59:44:20:2e:02:07:79:66:01:
         86:1f:66:03:22:04:63:13:a2:14:14:b0:f3:0e:f5:c0:69:3c:
         a7:c7:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:15:12 2026 by rpki-client