Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a383a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a383a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          NLM1Ad1meeZjjPaWx1eAaqP8wx5slLeNNqwGubZySCg=
Subject key identifier:   5A:F2:31:C9:C4:6E:35:D6:35:41:8F:73:2F:EB:15:06:D7:BA:C3:61
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       6CF6B9DAADA59F9CACF5614F0CA1411B0F744B33
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a383a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 10 Jul 2026 23:51:56 +0000
ROA not before:           Fri 10 Jul 2026 23:46:56 +0000
ROA not after:            Fri 09 Jul 2027 23:51:56 +0000
asID:                     267787
IP address blocks:        2803:4fa0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f6:b9:da:ad:a5:9f:9c:ac:f5:61:4f:0c:a1:41:1b:0f:74:4b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Jul 10 23:46:56 2026 GMT
            Not After : Jul  9 23:51:56 2027 GMT
        Subject: CN=5AF231C9C46E35D635418F732FEB1506D7BAC361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:9e:52:10:77:ae:38:b2:2a:1f:5e:8d:4a:
                    98:b7:bf:2d:81:60:05:92:1b:a8:c2:c7:ec:f0:89:
                    bd:f2:7d:67:14:82:f5:20:a0:47:9d:7e:5a:4e:73:
                    33:a0:60:96:84:84:62:53:80:ba:51:d2:0d:c6:ba:
                    1c:c6:e5:53:9b:b7:f6:ab:e1:46:a7:ea:70:f7:27:
                    61:46:92:0b:d6:83:26:9c:e8:d6:cd:83:40:f5:20:
                    22:d0:bc:fe:16:a8:24:ef:5d:f3:93:af:b4:5b:b8:
                    97:d0:56:b4:17:5d:20:f5:3b:fc:04:00:6e:a2:85:
                    ad:2f:04:d9:d0:78:a1:41:34:ea:c7:b3:91:9e:25:
                    0b:6f:84:cb:cc:3d:ef:07:ab:62:36:07:48:0e:c9:
                    c0:64:6f:bc:86:42:15:76:a8:cd:dc:ea:f6:b6:48:
                    ac:2c:69:d5:79:8c:17:05:92:6b:33:18:aa:97:56:
                    ed:bf:07:3b:94:e4:01:fb:65:24:6b:ce:da:90:a0:
                    ac:e1:ae:1c:b8:05:cd:da:b8:6a:e8:9b:92:b3:c8:
                    1b:85:9d:23:32:5f:9d:54:08:2a:84:43:21:62:da:
                    b0:b8:65:e1:14:92:fa:9f:a4:50:65:e2:4d:16:f7:
                    50:81:85:97:ed:ea:e2:25:df:e0:73:8d:b7:8d:e8:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:31:C9:C4:6E:35:D6:35:41:8F:73:2F:EB:15:06:D7:BA:C3:61
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a383a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:10:15:68:63:d9:9c:4b:1b:54:67:ef:fe:7b:9e:02:b1:
         6b:91:06:b4:96:e1:d7:5e:14:33:99:f1:62:96:55:76:c4:b5:
         25:55:e0:dc:0d:e7:28:b5:4f:99:88:bf:03:b3:c6:83:e0:42:
         fb:81:f0:70:75:9b:e8:e2:13:20:67:39:b4:67:31:bb:e3:c1:
         03:45:48:87:8b:e1:3a:ab:d9:23:77:7d:ab:0c:32:e4:1d:97:
         09:e6:3c:d3:d4:fe:24:31:4b:99:39:5b:14:c9:ed:66:6b:59:
         5c:44:c4:07:19:2e:e8:4a:5d:93:77:8d:9d:06:3e:9b:aa:ba:
         26:29:4b:e7:8a:8a:b8:0e:c2:01:15:a2:3f:eb:57:98:aa:eb:
         e6:fb:74:6b:b6:c5:7f:5a:05:4f:38:e4:54:3c:e8:e5:93:df:
         93:79:a1:0e:1e:cb:25:cf:f4:bb:78:79:e8:a0:0d:f1:c2:7a:
         87:cf:b1:d2:0d:7b:6a:b7:61:fd:a6:46:80:49:5d:7c:61:67:
         7e:af:f8:63:5e:f5:26:35:db:02:45:82:4c:b4:bb:bf:b3:02:
         cc:f7:f8:e0:a8:3a:8c:d6:3f:99:3a:4a:f0:25:f1:1d:60:fe:
         d0:16:f1:2e:14:80:67:7b:fe:2d:b1:06:a2:35:dc:32:50:7d:
         9f:9a:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:51:49 2026 by rpki-client