Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3430303a3a2f33382d3338203d3e20323730303838.roa
File:                     323830333a626265303a3430303a3a2f33382d3338203d3e20323730303838.roa (raw, json)
Hash identifier:          jX8AtLEtRrOmd13k0XEd61GXvyXUUSXc8Y3EIPvoP08=
Subject key identifier:   46:FF:A0:21:D0:3A:15:E5:11:1E:70:FD:F2:8E:0B:74:7B:6E:D9:93
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       485476457ADEF73295549E0787A1ACC34B8A95FC
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3430303a3a2f33382d3338203d3e20323730303838.roa
Signing time:             Thu 02 Jul 2026 00:20:00 +0000
ROA not before:           Thu 02 Jul 2026 00:15:00 +0000
ROA not after:            Thu 01 Jul 2027 00:20:00 +0000
asID:                     270088
IP address blocks:        2803:bbe0:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:76:45:7a:de:f7:32:95:54:9e:07:87:a1:ac:c3:4b:8a:95:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jul  2 00:15:00 2026 GMT
            Not After : Jul  1 00:20:00 2027 GMT
        Subject: CN=46FFA021D03A15E5111E70FDF28E0B747B6ED993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:49:f4:7f:cf:8c:fb:ce:6a:2e:c2:95:50:
                    84:22:fb:05:aa:c4:03:3e:f3:70:60:fd:da:8e:7c:
                    f1:17:c8:d9:d6:d6:9c:24:a0:87:09:7d:fc:82:3f:
                    f7:75:61:5e:aa:a9:8b:d8:68:ce:93:a1:ff:3e:e4:
                    2d:18:ea:28:6d:0b:bb:66:c3:07:47:76:c3:f0:11:
                    3f:76:d7:c2:8f:3a:ce:4a:73:01:dc:02:27:20:a9:
                    41:61:51:b4:81:45:ce:21:28:0d:2d:58:62:79:68:
                    3d:ca:34:1f:1f:a1:cc:e9:e1:b6:3f:aa:61:28:d6:
                    dd:88:91:94:2a:ea:18:ec:06:f3:63:ee:11:56:13:
                    5e:a5:d1:75:5d:22:8f:6b:39:67:93:a9:84:9a:8f:
                    26:78:47:5e:d9:b8:13:d3:b6:a5:7c:bf:b2:ff:79:
                    25:5c:a7:f1:1f:72:42:d2:e0:89:f8:39:60:90:62:
                    fb:69:0b:c4:64:0d:e6:aa:d7:4d:f4:45:ab:9c:bb:
                    da:7f:32:0d:af:b9:0d:f6:c6:1c:e3:78:91:98:60:
                    ab:12:e5:06:71:3a:c7:7f:8d:7a:e6:01:9e:34:28:
                    93:17:28:66:26:1a:f5:b8:97:d9:47:30:d4:59:04:
                    ce:6e:26:6f:14:05:44:33:95:a5:b9:9b:6b:2f:70:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FF:A0:21:D0:3A:15:E5:11:1E:70:FD:F2:8E:0B:74:7B:6E:D9:93
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3430303a3a2f33382d3338203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:33:66:56:01:e1:d3:8d:0b:51:bc:5f:4f:b2:a0:01:3e:
         0b:36:f3:66:4f:75:62:f1:55:68:6b:e9:f4:05:1d:e5:bc:c1:
         d0:b4:7e:0f:ec:bf:b2:d2:57:ba:88:2d:2d:8b:c2:a6:a9:2d:
         48:af:c1:c4:90:9c:1f:df:0c:60:8f:42:ce:87:0d:4b:bf:00:
         0a:16:d0:86:a2:d8:e3:29:2c:d6:30:b7:b5:10:22:7d:7c:d1:
         c6:ad:15:5c:54:b8:d5:42:0a:ac:44:35:9a:f9:df:c2:a9:8a:
         48:e5:ef:4e:bc:8c:a5:6b:3e:06:0b:21:01:23:23:14:53:c6:
         5d:c1:fa:cf:83:6c:e2:7a:be:eb:dd:d8:e3:b8:a9:7b:b8:6f:
         88:37:fa:3b:db:79:19:7a:89:07:fd:30:e5:28:32:9d:c4:fe:
         57:66:c7:17:27:05:63:4a:1d:e9:a7:ad:83:25:72:d9:09:82:
         d6:76:95:97:1c:ca:76:81:e3:c5:fa:e5:3e:d3:84:27:ac:87:
         2f:d9:9d:9e:97:9b:41:9f:e6:83:0a:f9:59:c5:fb:4f:14:42:
         70:cd:4a:de:1c:b6:fa:b8:b7:50:b4:3b:41:26:6e:f8:ac:e4:
         1e:35:34:c9:cc:bb:d6:7c:75:19:dd:c5:19:5e:e8:e9:c1:49:
         71:4c:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:31:35 2026 by rpki-client