Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353230313a3a2f34382d3438203d3e203634313436.roa
File:                     323830333a636436303a353230313a3a2f34382d3438203d3e203634313436.roa (raw, json)
Hash identifier:          t4i4eRsD2H40F5kY16G3dG0EdFSQYURbU8spNr3FWwk=
Subject key identifier:   D7:2C:A9:11:84:D6:53:06:D0:5A:FB:89:0B:63:16:D4:10:79:2F:A4
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       0852AAC315CEFBD748194EEF7AF25989D05E23
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353230313a3a2f34382d3438203d3e203634313436.roa
Signing time:             Tue 29 Sep 2026 20:35:01 +0000
ROA not before:           Tue 29 Sep 2026 20:30:01 +0000
ROA not after:            Tue 28 Sep 2027 20:35:01 +0000
asID:                     64146
IP address blocks:        2803:cd60:5201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:52:aa:c3:15:ce:fb:d7:48:19:4e:ef:7a:f2:59:89:d0:5e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Sep 29 20:30:01 2026 GMT
            Not After : Sep 28 20:35:01 2027 GMT
        Subject: CN=D72CA91184D65306D05AFB890B6316D410792FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:b7:6d:0a:a5:0b:42:b5:25:7f:bb:6a:ea:
                    97:20:0f:3b:fb:28:55:d3:c2:35:b3:4d:3f:86:a5:
                    b4:fe:07:8d:39:6f:07:77:ad:2c:a5:75:09:7d:ba:
                    8b:42:09:59:c3:02:75:ba:a2:14:dc:d1:77:33:09:
                    41:a8:82:09:14:df:d4:a2:bd:18:72:5f:35:b0:d8:
                    54:f9:f7:77:bc:9a:97:08:af:7d:2f:aa:93:83:a0:
                    01:30:30:6d:30:a8:c0:fc:7a:c9:3b:e3:62:be:20:
                    97:66:fa:01:4c:67:52:05:04:55:7f:df:b2:35:3d:
                    54:80:52:83:c6:6b:19:43:80:a9:a3:e7:7e:b7:da:
                    3e:0c:0b:26:15:1e:a1:ec:c5:60:01:0f:d6:09:bc:
                    f9:51:3c:c5:f0:e2:fa:5e:94:37:e6:7f:eb:10:61:
                    37:84:1c:74:33:dc:aa:c2:fc:3c:9c:64:ba:25:fe:
                    e3:e7:8d:95:42:8c:ea:b6:1c:3e:33:92:b5:34:f8:
                    a4:23:97:dc:d2:3b:b3:de:e6:c5:88:cd:98:0c:04:
                    cc:96:f2:1c:60:50:70:b5:bf:03:9b:82:47:51:69:
                    c5:8e:6d:85:bd:de:06:eb:94:fd:33:b5:0d:b0:ad:
                    ab:a7:9a:7b:3f:d5:f1:45:22:ea:71:5e:d1:af:b3:
                    ab:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:A9:11:84:D6:53:06:D0:5A:FB:89:0B:63:16:D4:10:79:2F:A4
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a353230313a3a2f34382d3438203d3e203634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:5201::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:6b:63:d3:f0:9a:c4:93:09:c1:22:b4:bb:d0:40:d4:21:
         98:4e:02:af:f3:8d:55:84:6b:55:a8:61:07:45:83:db:fd:3c:
         c6:11:23:d5:06:39:1e:c9:79:34:4f:77:0d:66:75:8b:5a:49:
         0d:f9:cf:bd:41:31:f1:c5:f6:d4:77:82:f5:a1:c9:60:f4:b0:
         c2:0c:38:e6:89:3f:fb:39:4d:b5:a3:f0:a3:da:88:b4:99:12:
         6e:32:ef:ac:42:dd:3e:2f:6d:c7:ce:c1:03:23:8c:23:97:e6:
         4b:ae:78:42:de:75:c6:42:30:06:5c:c5:8d:ba:86:c1:a0:35:
         52:cb:82:ed:c5:25:22:8f:d2:37:6e:52:1e:b0:7c:a3:ea:64:
         d0:70:3c:4d:f6:0b:2c:ff:38:44:e7:68:11:14:b3:aa:2f:91:
         ab:38:4c:ee:d2:33:9f:de:98:9c:8d:fb:40:03:63:d2:94:76:
         8d:10:30:62:df:62:8c:ca:59:44:6a:73:19:3e:bd:d8:6b:37:
         aa:00:82:2f:23:75:12:07:d2:48:91:98:a6:f8:34:c5:fb:2c:
         02:e0:68:9e:38:65:65:88:1f:b9:37:cd:96:99:ac:51:47:0d:
         ba:a3:bc:d0:41:8f:28:6c:8b:e1:ac:b4:15:11:d6:ec:43:1e:
         56:11:a2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:43 2026 by rpki-client