Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          wqfuQRR+jhBr+fgaoJAI0Xp/TMtGeLFNSZjWGuuPxYU=
Subject key identifier:   62:1C:38:38:24:B2:29:8C:F2:FF:A4:35:D9:0A:68:D5:AB:90:6B:52
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       0BD2B182F272C84BE7480140F2F08B9E090BAB66
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 10 Jul 2026 23:51:56 +0000
ROA not before:           Fri 10 Jul 2026 23:46:56 +0000
ROA not after:            Fri 09 Jul 2027 23:51:56 +0000
asID:                     267787
IP address blocks:        2803:4fa0:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 20:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d2:b1:82:f2:72:c8:4b:e7:48:01:40:f2:f0:8b:9e:09:0b:ab:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Jul 10 23:46:56 2026 GMT
            Not After : Jul  9 23:51:56 2027 GMT
        Subject: CN=621C383824B2298CF2FFA435D90A68D5AB906B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:71:17:5c:5e:9e:2d:a6:73:58:a0:6f:6e:
                    f8:b2:ea:79:29:61:84:1a:a9:e9:6d:7b:2f:d6:55:
                    e3:ce:b7:8d:8f:23:0c:f8:83:28:4f:9b:e7:29:dc:
                    1b:56:c3:a5:d9:dc:cd:57:14:6c:fb:e4:99:fc:cd:
                    8d:98:a7:9a:4f:ef:be:6b:56:b3:01:f8:7c:8e:d4:
                    56:5a:99:ce:80:0b:05:7a:5e:a0:0f:21:f6:0d:13:
                    ea:30:5a:c2:2d:1d:12:61:5c:3c:37:ee:00:1c:9a:
                    7d:02:23:bd:bd:20:21:87:05:08:f4:9d:a1:62:89:
                    52:08:82:da:9a:b9:95:91:52:15:39:b3:06:3d:24:
                    99:22:ec:78:2b:0b:92:82:11:02:17:2d:1e:74:05:
                    84:0c:ef:28:cd:3d:cf:cf:90:70:b0:a8:f8:bb:73:
                    13:c1:07:dd:9d:b3:c8:f4:7f:de:5a:d8:55:93:d3:
                    75:75:9c:f8:c4:0c:a2:09:6d:08:bb:19:ca:0c:97:
                    c5:ed:89:86:bb:f4:1d:48:93:b9:60:94:5a:cc:07:
                    91:e7:11:00:37:a2:66:a1:17:91:37:80:49:89:63:
                    69:11:b4:05:f9:81:38:d4:dd:af:96:34:03:b3:34:
                    35:04:cd:2f:44:37:86:fe:41:c6:d8:a7:9a:1f:1b:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1C:38:38:24:B2:29:8C:F2:FF:A4:35:D9:0A:68:D5:AB:90:6B:52
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:aa:d3:39:cf:56:6d:03:ba:3a:0c:e6:7d:01:94:d3:5b:
         a2:dc:7b:61:4a:24:c8:dc:e5:71:7d:7f:9a:1b:ce:67:1f:d4:
         93:23:d0:2d:3b:57:c7:68:cf:1f:c2:67:ae:d6:28:36:10:a2:
         c3:ef:cb:81:bd:4b:54:dc:aa:4b:1e:1b:07:67:ac:b2:e7:96:
         0c:b0:c3:c9:ca:ff:0e:1b:61:c4:ca:e9:6a:f7:94:97:e4:b2:
         46:c5:52:6d:5c:3b:fe:c1:d9:2c:33:b0:5f:48:98:4d:1e:36:
         82:4a:72:5f:b1:53:03:45:f5:08:10:b8:66:36:b5:71:28:56:
         44:81:e2:db:93:06:25:e6:9c:1e:d1:07:f0:84:a4:c2:e2:3c:
         ef:f2:50:97:c6:f3:92:65:6e:53:ad:b3:0d:24:4f:26:8c:0f:
         47:9e:d8:81:07:44:5a:5e:0f:f1:71:bf:f0:b2:a3:83:d0:fa:
         99:fa:e6:be:9a:4d:8b:98:cb:d8:ab:0f:c1:2b:17:9c:31:a2:
         fa:33:90:b2:90:2e:2c:0d:49:21:49:07:69:4d:53:b9:80:55:
         60:23:97:81:b5:e5:1c:b0:0a:1b:d8:fb:53:10:24:a3:f4:80:
         d6:63:5d:46:dc:ed:ea:ec:c8:da:11:2f:db:3e:6d:af:84:02:
         28:ad:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:44:00 2026 by rpki-client