Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3634203d3e20323635373737.roa
File:                     323830333a346663303a3a2f33322d3634203d3e20323635373737.roa (raw, json)
Hash identifier:          HzzVGddIXF+k7lpvlTp+n7lEql7R51hjl+Na16OizU8=
Subject key identifier:   D8:F7:C7:D9:FE:B1:22:03:8F:B4:2B:28:13:9D:D5:88:89:5D:57:0C
Certificate issuer:       /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial:       72CB6CEEF03360945327E3D841DA433363F442E9
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3634203d3e20323635373737.roa
Signing time:             Mon 28 Sep 2026 13:37:11 +0000
ROA not before:           Mon 28 Sep 2026 13:32:11 +0000
ROA not after:            Mon 27 Sep 2027 13:37:11 +0000
asID:                     265777
IP address blocks:        2803:4fc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cb:6c:ee:f0:33:60:94:53:27:e3:d8:41:da:43:33:63:f4:42:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
        Validity
            Not Before: Sep 28 13:32:11 2026 GMT
            Not After : Sep 27 13:37:11 2027 GMT
        Subject: CN=D8F7C7D9FEB122038FB42B28139DD588895D570C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:97:4f:9f:e9:cb:64:b3:e3:8c:47:60:1c:
                    67:9c:74:0f:d1:35:e0:0f:53:bf:da:e7:38:42:2c:
                    90:96:7d:12:43:59:5e:de:d0:59:b3:a3:63:85:9c:
                    f0:d9:9a:9b:9a:b9:d9:cc:1c:84:2d:a7:6a:a6:19:
                    cb:e3:42:66:e1:98:0f:e7:10:63:51:46:bd:a0:71:
                    bf:3f:cf:e8:2b:3d:2c:22:2b:bf:f5:ff:c4:36:85:
                    bb:de:37:90:61:ec:6a:bd:c7:c1:52:32:35:38:6a:
                    c4:9e:d7:41:3d:04:2a:d4:7f:62:a1:4f:58:b3:14:
                    83:8e:63:d7:a8:49:64:8b:bc:9e:23:15:7c:01:81:
                    5e:a0:55:fc:22:16:70:ec:3d:6a:d5:0d:7a:98:3b:
                    85:de:d6:25:0d:a1:67:a8:13:d1:94:a1:48:47:c3:
                    7e:6d:5c:80:37:61:72:81:ec:3e:43:cd:73:79:90:
                    16:a8:a8:0f:06:51:ce:86:6c:32:70:81:21:53:18:
                    51:7b:40:36:82:2b:07:d8:2f:96:87:d4:f0:55:17:
                    4c:53:ce:83:ed:9e:cf:4a:9f:3f:ac:60:3c:fa:53:
                    a2:e9:dc:42:f5:a9:23:98:32:72:be:0e:a9:b4:13:
                    7c:fd:d7:bc:0e:46:96:48:06:82:a4:8e:1f:1a:16:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:C7:D9:FE:B1:22:03:8F:B4:2B:28:13:9D:D5:88:89:5D:57:0C
            X509v3 Authority Key Identifier:
                keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3634203d3e20323635373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:f2:e7:e5:02:06:f7:99:74:a8:39:6a:c1:25:79:2a:7b:
         40:88:f6:9c:75:50:af:7e:9f:5c:9c:83:49:83:78:f2:c8:39:
         6c:03:02:b8:19:5a:0e:ea:4a:93:41:19:81:d9:18:50:c1:4f:
         6a:ab:18:11:3c:fc:de:93:66:ce:28:b9:49:0e:2d:ad:91:2e:
         37:42:8f:6d:6a:00:c6:85:96:64:52:c7:f4:79:42:3a:fd:cd:
         4a:2e:e9:20:0d:41:15:25:cd:62:46:e7:1a:c7:a6:70:bf:fa:
         4f:a2:6f:d8:84:d9:76:36:bc:f5:56:22:93:ba:07:e8:0e:78:
         95:1c:0f:94:51:59:7d:09:2a:fe:e9:fb:c9:5c:b0:23:3d:38:
         14:94:ff:d8:05:42:d6:b2:64:f3:a8:93:53:3d:04:c5:ee:d0:
         65:63:f6:95:70:9b:62:54:1a:b3:37:af:cf:e2:8e:ef:48:75:
         0e:71:b8:04:ad:0a:64:6b:0e:4f:3f:0b:44:d1:e0:cb:04:88:
         27:5c:b2:be:7e:e9:94:71:ee:05:dc:0f:4b:45:3c:e8:be:33:
         c2:1d:0e:f6:8e:09:f2:f8:b3:75:ec:8f:c4:cf:0e:3d:eb:72:
         7d:2d:a3:8a:84:1a:e6:2b:d9:ad:34:57:21:1b:78:eb:de:dc:
         ac:08:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:10:24 2026 by rpki-client