Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa
File:                     323830333a313235303a3a2f33322d3438203d3e20323733313634.roa (raw, json)
Hash identifier:          SWvWNtexrJ80YECRThlI9yLY9mt5TjPeAGYfzN0cssU=
Subject key identifier:   85:30:D5:B9:0E:D3:5B:57:01:D7:48:0D:39:1D:AE:FD:CE:EA:A5:E5
Certificate issuer:       /CN=EA9B6894EB822C6BCDA4C500A14D50C8791D1F18
Certificate serial:       6C42E5B764F2D536D677DB4517AB2CBC55C89243
Authority key identifier: EA:9B:68:94:EB:82:2C:6B:CD:A4:C5:00:A1:4D:50:C8:79:1D:1F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa
Signing time:             Tue 29 Sep 2026 01:37:17 +0000
ROA not before:           Tue 29 Sep 2026 01:32:17 +0000
ROA not after:            Tue 28 Sep 2027 01:37:17 +0000
asID:                     273164
IP address blocks:        2803:1250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:42:e5:b7:64:f2:d5:36:d6:77:db:45:17:ab:2c:bc:55:c8:92:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA9B6894EB822C6BCDA4C500A14D50C8791D1F18
        Validity
            Not Before: Sep 29 01:32:17 2026 GMT
            Not After : Sep 28 01:37:17 2027 GMT
        Subject: CN=8530D5B90ED35B5701D7480D391DAEFDCEEAA5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:22:e6:e0:65:0e:06:47:c4:88:ea:1b:84:
                    e9:31:7f:f3:36:33:02:46:05:f7:b3:e2:31:af:41:
                    69:36:6e:f7:26:2d:13:37:38:4b:ea:aa:a1:fe:6a:
                    03:9b:77:1b:8a:00:41:8e:af:b1:c7:b9:a6:8a:c9:
                    9d:50:b7:3f:89:e6:8a:c8:b7:a8:06:79:60:60:35:
                    25:96:55:f3:ad:6c:fc:fd:a6:36:fa:4e:0d:48:17:
                    78:b8:6a:41:60:85:15:94:61:05:12:b0:9e:d5:73:
                    7a:cf:a0:6f:da:31:64:7b:d6:9c:f8:3b:c1:0a:6f:
                    88:b7:fb:0a:b1:4e:1a:19:dd:fc:0d:c4:44:a7:93:
                    f7:e2:a0:5f:01:19:1c:4f:3f:e5:25:27:ba:c5:af:
                    f4:05:fe:51:45:0c:01:cb:44:58:8b:d3:27:3e:5f:
                    1a:ad:2e:b5:76:c0:37:35:2d:bd:50:ab:37:54:29:
                    2f:c3:0d:fd:56:23:90:3b:5b:44:c2:ba:49:59:90:
                    57:b8:ea:97:79:ce:da:c7:e4:97:f1:e9:95:ee:60:
                    3b:8f:67:cf:a3:6b:16:ae:ae:91:fd:2f:37:45:fb:
                    fd:1e:47:a0:72:cc:ce:f6:72:f5:76:86:e7:b4:aa:
                    05:f1:26:0e:99:e3:4e:6a:54:1a:7a:b7:b4:3d:56:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:30:D5:B9:0E:D3:5B:57:01:D7:48:0D:39:1D:AE:FD:CE:EA:A5:E5
            X509v3 Authority Key Identifier:
                keyid:EA:9B:68:94:EB:82:2C:6B:CD:A4:C5:00:A1:4D:50:C8:79:1D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA9B6894EB822C6BCDA4C500A14D50C8791D1F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DA0484FB8BD705CD3C1F615A8A06CFE5F4057C4584B23365FCF546D68B4319/0/323830333a313235303a3a2f33322d3438203d3e20323733313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1250::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:8d:f7:c8:7a:fc:05:05:51:9e:fb:91:f1:2a:bd:24:1b:b1:
         d7:c1:69:20:f2:00:40:d7:bb:1a:af:b2:c6:2a:16:c7:68:ed:
         48:10:93:0e:8b:0b:9f:1f:02:be:c6:e7:ae:3e:11:f2:ba:6e:
         7d:7c:0c:78:95:bf:69:a3:09:9f:fd:62:a6:27:19:b5:c7:90:
         67:34:21:05:b2:2e:1d:7c:4f:c3:3a:c8:62:dd:fa:ba:c4:54:
         09:e2:e6:8e:41:f6:cf:8c:ab:f8:28:18:81:41:ad:a7:e4:37:
         b8:77:c1:22:c5:21:da:19:47:1b:89:67:f6:df:1e:34:25:bf:
         ff:78:b9:4c:bb:2c:72:ec:a5:48:b9:7b:50:a0:5b:c1:37:74:
         45:d6:55:4c:6d:4e:b3:14:30:03:bd:4a:20:7a:b7:bc:2b:58:
         ea:e1:59:9a:e9:e9:ce:b4:37:aa:a8:59:ed:5e:fc:bf:a5:a1:
         ca:10:72:0c:01:77:1c:69:36:f5:a9:76:ad:ae:38:bc:9e:c7:
         40:94:94:d1:e9:2d:dc:0b:ef:c2:02:39:76:30:42:45:b1:54:
         f0:63:81:53:67:35:eb:33:0e:c6:5d:4e:7d:7e:4e:9f:50:38:
         dc:b3:26:2a:d7:8e:d5:bc:45:ef:82:cf:87:5e:b7:25:dd:af:
         e8:2d:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:32:13 2026 by rpki-client