Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C2EB6082A85D279A9EFEFBD97D747D98979C8EF2C81FA79BE9E5ED0BB6FDE11/0/323830333a363933303a3a2f33322d3438203d3e20323734393437.roa
File:                     323830333a363933303a3a2f33322d3438203d3e20323734393437.roa (raw, json)
Hash identifier:          Qnvz/z8XJT25RZOIKB2LgAg4Xv+1+5WnspqPE+U7qVk=
Subject key identifier:   F5:AA:7C:B6:22:A9:90:47:CD:A3:31:0F:71:7F:49:4A:BA:FA:18:19
Certificate issuer:       /CN=F091668D74DBE7FC41B7EDF87260EDD482D43141
Certificate serial:       451A84609520FF4B04BDF6F6172E3D47DAB05E42
Authority key identifier: F0:91:66:8D:74:DB:E7:FC:41:B7:ED:F8:72:60:ED:D4:82:D4:31:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F091668D74DBE7FC41B7EDF87260EDD482D43141.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C2EB6082A85D279A9EFEFBD97D747D98979C8EF2C81FA79BE9E5ED0BB6FDE11/0/323830333a363933303a3a2f33322d3438203d3e20323734393437.roa
Signing time:             Tue 16 Jun 2026 20:35:00 +0000
ROA not before:           Tue 16 Jun 2026 20:30:00 +0000
ROA not after:            Tue 15 Jun 2027 20:35:00 +0000
asID:                     274947
IP address blocks:        2803:6930::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C2EB6082A85D279A9EFEFBD97D747D98979C8EF2C81FA79BE9E5ED0BB6FDE11/0/F091668D74DBE7FC41B7EDF87260EDD482D43141.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C2EB6082A85D279A9EFEFBD97D747D98979C8EF2C81FA79BE9E5ED0BB6FDE11/0/F091668D74DBE7FC41B7EDF87260EDD482D43141.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F091668D74DBE7FC41B7EDF87260EDD482D43141.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1a:84:60:95:20:ff:4b:04:bd:f6:f6:17:2e:3d:47:da:b0:5e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F091668D74DBE7FC41B7EDF87260EDD482D43141
        Validity
            Not Before: Jun 16 20:30:00 2026 GMT
            Not After : Jun 15 20:35:00 2027 GMT
        Subject: CN=F5AA7CB622A99047CDA3310F717F494ABAFA1819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:95:72:a9:36:b9:b4:bf:0b:f1:89:b5:60:
                    9d:a4:8f:98:89:35:b8:82:2f:ee:52:8b:f2:25:eb:
                    31:47:7e:0e:40:07:f0:a3:82:41:df:63:ed:b1:1e:
                    4e:1c:a2:62:ea:0a:d6:69:a7:e5:83:ec:ee:71:bd:
                    8b:ac:5c:4d:8f:b3:f7:1a:b1:80:a7:3e:b1:99:40:
                    4e:82:a3:1a:d3:2c:2b:e2:49:bf:a8:fd:15:0f:91:
                    92:7e:28:40:f5:1c:82:13:1e:0a:0d:a0:dd:69:ee:
                    13:a8:1b:8f:58:f7:de:52:9e:24:4f:fa:ec:c3:f6:
                    5c:5c:df:95:f1:51:54:22:c5:0e:75:41:69:0c:c8:
                    0a:f3:d4:8d:bf:9c:19:54:c8:09:ce:41:24:63:f2:
                    07:70:f6:ef:84:f9:70:a0:2e:71:b5:0e:6c:b6:8b:
                    8d:cd:ee:44:b8:a5:26:d6:d5:5b:a9:66:c7:da:66:
                    4a:9d:54:03:4c:93:49:da:97:e2:52:f7:11:61:cc:
                    71:8f:8f:b0:cd:d7:ab:2c:f2:77:e9:df:d6:77:99:
                    cb:65:ac:b4:84:97:f6:ce:fb:35:58:73:e4:5c:93:
                    48:70:58:92:61:71:40:1c:f2:55:20:95:62:d5:18:
                    48:83:51:e0:e0:bd:84:a6:9d:bb:3d:5e:22:c5:10:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AA:7C:B6:22:A9:90:47:CD:A3:31:0F:71:7F:49:4A:BA:FA:18:19
            X509v3 Authority Key Identifier:
                keyid:F0:91:66:8D:74:DB:E7:FC:41:B7:ED:F8:72:60:ED:D4:82:D4:31:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EB6082A85D279A9EFEFBD97D747D98979C8EF2C81FA79BE9E5ED0BB6FDE11/0/F091668D74DBE7FC41B7EDF87260EDD482D43141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F091668D74DBE7FC41B7EDF87260EDD482D43141.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EB6082A85D279A9EFEFBD97D747D98979C8EF2C81FA79BE9E5ED0BB6FDE11/0/323830333a363933303a3a2f33322d3438203d3e20323734393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6930::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:c3:80:8a:2a:37:62:c4:2e:96:20:fd:19:e5:f8:22:be:
         89:ae:40:2f:44:47:1d:14:9f:e6:b2:31:c8:28:6c:bb:3e:c5:
         34:ce:1f:dd:f6:33:ee:76:67:9f:81:9f:a3:48:35:1b:b8:f0:
         7e:5d:e1:9c:a6:83:0d:ec:a5:24:6c:fc:ef:64:be:97:f7:93:
         2b:36:a3:73:fc:36:c2:04:32:ba:15:57:fb:7b:e7:01:a3:53:
         b0:4e:59:15:3c:e0:75:4c:c3:0a:80:7f:d4:de:80:9e:9e:77:
         d0:8e:9e:27:67:35:80:80:1c:2b:40:76:79:15:ae:3a:27:18:
         7a:56:6a:9f:28:11:7e:24:dc:0d:59:62:3d:e7:f7:c2:af:f6:
         32:2d:e6:81:13:29:07:59:ad:96:cf:cf:a6:8b:12:a3:0b:8b:
         17:fa:09:99:e5:18:e7:18:86:91:08:4c:4f:05:b9:44:45:04:
         9f:56:94:fe:79:40:2e:f6:44:7f:a2:b8:78:93:03:25:fb:79:
         e3:a0:d1:f0:9c:ec:dd:77:b4:22:68:6a:12:23:e7:e5:43:4a:
         fd:da:92:bb:9a:33:a8:dc:ab:3b:bb:67:23:d9:b0:8a:ee:22:
         4a:66:66:b7:4e:76:4e:55:bd:ff:bb:2b:75:7e:21:de:95:41:
         ca:aa:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:55 2026 by rpki-client