Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a383030303a3a2f33362d3336203d3e20323734323032.roa
File:                     323830333a396333303a383030303a3a2f33362d3336203d3e20323734323032.roa (raw, json)
Hash identifier:          YXuhdKIzluL2Zx5CzM/x7ec6Gn5D6EkSG8URDaBWVA4=
Subject key identifier:   2D:5F:C5:89:FD:23:51:BF:C6:58:78:25:05:53:29:99:8F:09:71:F7
Certificate issuer:       /CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
Certificate serial:       36D490A4A3E3AEC6B335C848B93C143340C09A6C
Authority key identifier: 7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a383030303a3a2f33362d3336203d3e20323734323032.roa
Signing time:             Fri 11 Sep 2026 15:55:02 +0000
ROA not before:           Fri 11 Sep 2026 15:50:02 +0000
ROA not after:            Fri 10 Sep 2027 15:55:02 +0000
asID:                     274202
IP address blocks:        2803:9c30:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d4:90:a4:a3:e3:ae:c6:b3:35:c8:48:b9:3c:14:33:40:c0:9a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
        Validity
            Not Before: Sep 11 15:50:02 2026 GMT
            Not After : Sep 10 15:55:02 2027 GMT
        Subject: CN=2D5FC589FD2351BFC6587825055329998F0971F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:85:2e:00:c6:4d:6a:cf:a4:70:5f:d1:24:
                    30:1b:d8:fe:59:52:c2:2a:6f:46:7a:2a:9f:95:c2:
                    8f:2e:1c:79:39:65:6a:4e:9b:a1:d4:68:c0:5b:65:
                    5d:e0:0f:73:b3:0b:d4:61:ea:b4:12:99:af:aa:23:
                    c0:ac:20:8d:a7:fb:7f:9b:80:4a:f3:e3:5a:61:ac:
                    cb:46:23:d3:17:88:77:ba:47:1f:80:d6:4c:fe:02:
                    fd:c2:7d:25:92:c9:90:63:fb:51:73:81:ed:54:ba:
                    df:ec:1a:51:46:af:e0:88:21:d3:49:85:82:65:d7:
                    6c:d6:fb:28:23:24:1b:ba:07:e0:8c:79:23:11:2b:
                    05:a1:3b:21:23:cb:36:c0:59:10:bf:12:9f:de:d6:
                    96:c5:11:ae:8b:6b:1d:b6:fd:e5:6a:65:f7:47:97:
                    3d:2c:a8:65:b7:fc:80:9b:d3:fc:ad:0a:91:39:dc:
                    95:7e:ca:e8:4e:b7:36:7c:fb:62:a6:a6:87:ac:22:
                    ef:36:da:98:91:d5:6c:9a:de:e0:db:89:fa:1d:aa:
                    44:5e:d9:9d:1b:ef:f7:9a:df:9c:6f:0e:15:98:f8:
                    ca:72:7d:5f:21:dd:64:7e:c2:fe:07:5c:cb:22:75:
                    d9:0a:80:52:b5:39:35:e8:eb:91:94:b4:31:8c:2b:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5F:C5:89:FD:23:51:BF:C6:58:78:25:05:53:29:99:8F:09:71:F7
            X509v3 Authority Key Identifier:
                keyid:7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a383030303a3a2f33362d3336203d3e20323734323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c30:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:8d:b4:1f:0e:0a:8b:5b:22:e1:55:32:a7:35:c5:64:0b:
         57:be:46:48:a5:0a:16:e9:9b:d0:56:38:58:92:86:47:4f:91:
         aa:fd:04:33:bd:b2:23:1a:13:0a:19:09:81:9c:ac:53:8e:2c:
         da:f8:80:89:fb:c7:7a:61:1d:a2:9b:36:fb:5f:d3:ee:d2:7c:
         4a:0f:66:1f:fe:c1:07:4b:65:c1:ca:8d:80:6a:52:a6:2b:9d:
         f0:f0:6c:76:64:e8:fa:7b:74:b6:b6:5a:ff:65:71:44:a7:48:
         00:3e:4c:9c:09:4d:44:7d:a4:06:e8:f8:d8:98:dc:90:3d:ad:
         20:3b:60:1f:cc:59:2d:c8:14:3b:0d:6a:51:2e:c4:bd:04:d7:
         f9:d3:e0:fd:bd:f0:3a:5c:a9:9d:49:c0:43:42:b1:28:66:70:
         1c:ae:cb:2f:ec:d1:4d:12:c7:c5:d5:5f:f8:65:dc:c2:24:ba:
         49:57:07:ec:92:0c:68:79:c6:95:de:9c:96:be:d8:e5:cf:6a:
         bb:09:08:60:9e:00:06:34:e4:35:af:e2:a6:50:01:ff:18:31:
         9b:2d:09:89:88:09:70:71:dd:4b:c7:c9:08:6a:57:a1:46:b8:
         be:76:1a:39:f7:06:64:d8:f6:91:ee:46:4a:7f:d5:7a:f9:b1:
         5d:4b:96:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:56:47 2026 by rpki-client