Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a323030303a3a2f33362d3336203d3e20323734323032.roa
File:                     323830333a396333303a323030303a3a2f33362d3336203d3e20323734323032.roa (raw, json)
Hash identifier:          WKD7IVwzDuz0JtpD2JMs/pPr+T1H9yabllAA0DxGPRc=
Subject key identifier:   2E:01:8E:D9:CD:05:B3:3A:39:D3:2E:5A:E6:1F:56:AD:9E:A8:4A:54
Certificate issuer:       /CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
Certificate serial:       419DF6023F07945959BACAAF3A09DA27051ABD1A
Authority key identifier: 7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a323030303a3a2f33362d3336203d3e20323734323032.roa
Signing time:             Fri 11 Sep 2026 15:55:00 +0000
ROA not before:           Fri 11 Sep 2026 15:50:00 +0000
ROA not after:            Fri 10 Sep 2027 15:55:00 +0000
asID:                     274202
IP address blocks:        2803:9c30:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9d:f6:02:3f:07:94:59:59:ba:ca:af:3a:09:da:27:05:1a:bd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
        Validity
            Not Before: Sep 11 15:50:00 2026 GMT
            Not After : Sep 10 15:55:00 2027 GMT
        Subject: CN=2E018ED9CD05B33A39D32E5AE61F56AD9EA84A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:0c:1a:01:d2:27:01:d2:17:a8:2a:a9:fc:
                    fe:c1:a1:b5:05:ad:ed:18:0f:17:80:3c:5a:e6:e6:
                    3d:8b:ef:82:4a:e2:86:b3:3a:cd:c9:d8:d1:41:9a:
                    8e:54:87:6d:3f:45:5d:41:a7:df:96:ab:08:a1:93:
                    5e:71:90:00:00:50:95:40:fe:5a:6c:7a:b1:df:16:
                    35:89:9d:06:ed:b9:f8:12:9d:24:f8:0f:59:b5:01:
                    c1:09:af:19:78:f2:31:6f:4b:c1:e4:35:ad:83:6f:
                    79:20:75:42:3e:76:5b:0a:b1:e7:5a:82:20:6d:fe:
                    19:5f:d2:a0:6e:d3:69:7f:a5:df:c6:34:9b:4a:30:
                    de:bb:be:7f:9f:b3:c4:c2:ec:3a:6a:13:24:84:b1:
                    5e:aa:d1:2d:e1:74:61:87:15:65:c6:da:4d:e0:d6:
                    18:cc:96:ec:2c:c0:7a:dd:db:b0:97:75:f1:78:e9:
                    3e:8d:88:41:23:f5:e1:2f:a7:44:40:79:42:af:88:
                    9a:a5:b9:d7:ff:7f:87:67:8f:26:2c:72:a1:ec:63:
                    db:3d:85:06:86:46:d7:bc:31:1c:17:3f:39:55:9a:
                    6b:d7:e7:fb:07:d3:6d:bf:e5:d0:6b:e2:eb:65:90:
                    b7:aa:db:d8:80:e4:32:b1:47:8b:2f:57:c1:91:c3:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:8E:D9:CD:05:B3:3A:39:D3:2E:5A:E6:1F:56:AD:9E:A8:4A:54
            X509v3 Authority Key Identifier:
                keyid:7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a323030303a3a2f33362d3336203d3e20323734323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c30:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:cb:dc:fb:4c:03:93:e6:d7:53:1e:ce:c1:6a:38:ef:02:
         3c:38:ae:3a:79:6a:26:b2:17:e0:d7:ce:cb:95:49:65:76:de:
         7e:b9:1a:01:4f:7c:a2:f0:f5:bb:69:1c:ef:dc:0a:cc:d3:e6:
         3e:69:fa:14:57:2d:6e:52:e5:e0:03:4a:31:de:99:c6:a6:7d:
         e7:a1:64:a2:df:54:ec:bc:e3:d3:55:35:22:fe:07:fe:70:26:
         a4:d2:ba:da:c1:d5:6f:fb:df:42:5f:5e:1c:80:ca:b0:4e:e9:
         1b:f5:26:f8:36:cc:0e:0f:35:97:67:d8:7d:f8:15:1f:a2:e0:
         df:d0:63:7a:5c:8b:59:61:9f:39:6b:86:16:43:d6:40:7c:1b:
         98:38:b9:ad:05:0c:37:b4:c9:fc:cf:bf:17:d2:31:45:75:43:
         02:37:b6:03:ad:07:ad:0b:ed:75:89:61:15:ed:3b:6f:31:15:
         82:6c:b1:5d:45:78:96:69:6b:62:4b:b2:05:32:9f:ec:b5:26:
         8d:bd:ce:ec:ac:10:22:4a:f8:88:b1:77:54:fe:e5:cc:c6:72:
         6d:02:a0:56:f8:85:5a:cc:43:18:ce:52:6f:ec:6e:68:9a:dd:
         ea:22:27:1b:44:81:7d:8a:5a:b6:0e:e9:e7:66:2d:6b:b7:5a:
         dc:fb:b8:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:47 2026 by rpki-client