Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/323830333a3461303a3a2f33322d3332203d3e20323636383139.roa
File:                     323830333a3461303a3a2f33322d3332203d3e20323636383139.roa (raw, json)
Hash identifier:          3uau8q1XLkR+n9VKQw48DUMb2cuUq7ohzN9MzKH8lAo=
Subject key identifier:   B6:CB:7E:22:F9:5B:EC:2F:67:0F:7A:8A:2D:25:55:74:FA:7E:5F:AB
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       253C053EE3761226E17B860153AD02C25D08FFA9
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/323830333a3461303a3a2f33322d3332203d3e20323636383139.roa
Signing time:             Wed 23 Sep 2026 02:45:00 +0000
ROA not before:           Wed 23 Sep 2026 02:40:00 +0000
ROA not after:            Wed 22 Sep 2027 02:45:00 +0000
asID:                     266819
IP address blocks:        2803:4a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3c:05:3e:e3:76:12:26:e1:7b:86:01:53:ad:02:c2:5d:08:ff:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Sep 23 02:40:00 2026 GMT
            Not After : Sep 22 02:45:00 2027 GMT
        Subject: CN=B6CB7E22F95BEC2F670F7A8A2D255574FA7E5FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:73:22:d2:08:27:22:08:d3:f2:b1:57:50:
                    48:71:9c:07:8a:33:be:12:d3:07:28:dd:0f:ed:3c:
                    6e:66:c6:59:8f:73:76:0c:d2:ec:1f:99:35:c0:dd:
                    f1:56:42:b6:87:8b:17:84:30:1d:a1:df:88:97:6d:
                    4d:31:50:0d:be:6b:c4:73:22:5f:fe:17:8f:83:92:
                    e8:92:ab:17:0a:be:ef:41:cc:24:91:30:09:24:b9:
                    b6:87:01:dd:17:06:b6:a5:7b:21:14:3c:bf:18:2d:
                    00:ff:f8:ec:cd:4a:5a:49:38:4a:da:32:2a:bb:43:
                    82:e6:69:54:3f:db:a1:3f:1e:a6:62:d3:36:11:d1:
                    47:ff:b6:ff:ad:e7:8d:de:82:6d:db:b4:0a:db:4a:
                    cb:64:3f:d0:59:0e:63:86:3c:cd:8e:24:eb:cf:b3:
                    9c:a8:1e:40:92:2a:58:7a:21:6e:62:d2:fc:0a:35:
                    98:e0:8f:28:8c:b8:dd:93:75:27:1a:4d:db:f2:24:
                    76:f1:f8:3e:06:d5:14:b0:a8:3d:91:76:b6:53:dc:
                    0d:5c:2e:7a:2d:5a:11:c9:06:8c:9e:b7:35:9a:36:
                    a5:89:b3:c4:3b:e7:81:e1:51:51:31:64:db:af:c3:
                    6a:f6:9d:c8:41:b9:91:43:86:7f:56:4d:4b:5b:1b:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CB:7E:22:F9:5B:EC:2F:67:0F:7A:8A:2D:25:55:74:FA:7E:5F:AB
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/323830333a3461303a3a2f33322d3332203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:b4:bb:3e:30:c0:a8:cd:23:0b:79:d7:99:24:46:f2:13:
         7a:24:c5:53:01:84:db:dd:60:41:47:de:10:32:95:06:fb:aa:
         45:71:10:0b:91:2f:b5:18:1c:5e:86:2d:76:82:4a:ad:af:29:
         d9:94:9f:37:2c:39:57:14:61:9b:38:db:1f:0c:66:7d:cb:ba:
         1b:c2:88:ff:fa:74:57:a7:79:d6:54:9c:03:1a:bc:05:63:8e:
         54:47:49:74:c6:f9:76:25:fa:70:82:5d:76:a7:31:db:5d:22:
         13:3a:2e:27:fc:b9:c9:ab:2a:68:8d:eb:1b:cc:dd:65:e6:9d:
         5b:d0:18:f9:4a:5c:71:9c:71:44:bd:46:b3:80:8a:3c:0e:0d:
         d7:fb:c5:b9:93:2a:a8:88:46:77:04:e7:96:d5:e0:db:49:31:
         73:f0:ec:ee:06:f6:a3:f8:0c:d4:ac:e1:4e:2b:01:29:d7:95:
         fc:14:ac:45:0e:de:85:6f:98:a2:a3:5d:5a:87:cd:d8:94:ac:
         1c:de:91:25:b8:88:ee:dd:93:cc:ab:4e:14:67:90:49:74:fe:
         55:92:6b:1f:6b:5e:7a:a8:42:8f:cf:b3:bd:6b:2c:85:e8:e2:
         cc:1a:9b:5e:f4:d3:39:1e:cc:3f:97:50:6b:b2:99:04:7a:06:
         61:21:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:01:06 2026 by rpki-client