Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B7D394207DD4060543CD50776336DD22EDC2B2354854A54D7916CD6589D1E3E6/0/323830333a363364303a3a2f33322d3332203d3e20323734323037.roa
File:                     323830333a363364303a3a2f33322d3332203d3e20323734323037.roa (raw, json)
Hash identifier:          pWXQoTK5N1Mh1VzGih+Bnk5LVozII//O6obclPf23Q4=
Subject key identifier:   AF:72:F2:12:74:D5:DD:8F:C1:C7:B4:A0:A1:C4:A8:2C:33:08:93:4E
Certificate issuer:       /CN=4EE3B781FD99C06938A17CF6BAB96578328EE29B
Certificate serial:       72A53207344680C4173A562C20E4E32631611700
Authority key identifier: 4E:E3:B7:81:FD:99:C0:69:38:A1:7C:F6:BA:B9:65:78:32:8E:E2:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EE3B781FD99C06938A17CF6BAB96578328EE29B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7D394207DD4060543CD50776336DD22EDC2B2354854A54D7916CD6589D1E3E6/0/323830333a363364303a3a2f33322d3332203d3e20323734323037.roa
Signing time:             Tue 29 Sep 2026 04:37:17 +0000
ROA not before:           Tue 29 Sep 2026 04:32:17 +0000
ROA not after:            Tue 28 Sep 2027 04:37:17 +0000
asID:                     274207
IP address blocks:        2803:63d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7D394207DD4060543CD50776336DD22EDC2B2354854A54D7916CD6589D1E3E6/0/4EE3B781FD99C06938A17CF6BAB96578328EE29B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7D394207DD4060543CD50776336DD22EDC2B2354854A54D7916CD6589D1E3E6/0/4EE3B781FD99C06938A17CF6BAB96578328EE29B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EE3B781FD99C06938A17CF6BAB96578328EE29B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a5:32:07:34:46:80:c4:17:3a:56:2c:20:e4:e3:26:31:61:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE3B781FD99C06938A17CF6BAB96578328EE29B
        Validity
            Not Before: Sep 29 04:32:17 2026 GMT
            Not After : Sep 28 04:37:17 2027 GMT
        Subject: CN=AF72F21274D5DD8FC1C7B4A0A1C4A82C3308934E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:36:2b:53:d8:db:34:b1:d4:ad:c6:36:cc:
                    9d:c8:d8:68:47:04:4c:68:35:4c:9b:e8:49:36:b6:
                    4c:d6:ef:51:c5:c1:65:ce:ff:88:68:5f:1c:3e:75:
                    ad:e4:07:ed:b8:be:92:45:f0:cd:bc:47:56:1d:52:
                    d4:44:cd:78:3d:c5:7c:07:13:72:17:0f:d6:4d:a1:
                    11:8c:31:38:32:aa:f0:84:63:c1:09:7a:51:4d:d7:
                    78:f6:d7:5e:31:f8:37:8b:c0:c7:d5:30:d2:a5:23:
                    e1:6c:1b:3d:1d:13:17:bc:c8:60:6e:31:cf:36:8a:
                    1d:fa:62:d0:ad:5a:97:13:88:4d:40:3a:90:57:74:
                    1a:78:e4:58:29:bf:f4:a6:21:cd:71:73:c2:dc:a5:
                    00:21:a5:c4:d3:41:c2:17:d3:dd:64:30:21:bc:32:
                    c0:4e:3a:7d:c4:73:9c:84:97:82:7a:9e:b5:a1:ba:
                    d1:0b:97:84:9b:36:f1:3e:02:79:dc:1e:be:dd:01:
                    13:45:2c:cf:eb:b5:5a:94:d7:7e:e9:67:60:30:f0:
                    d8:7c:85:0c:f1:4a:6c:67:4c:96:a5:93:65:b6:e7:
                    e6:05:b3:58:6d:65:a7:58:0e:b0:f0:2a:94:ec:4e:
                    8e:93:4c:3e:1d:ac:21:4f:0a:4a:b2:45:e8:42:9a:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:72:F2:12:74:D5:DD:8F:C1:C7:B4:A0:A1:C4:A8:2C:33:08:93:4E
            X509v3 Authority Key Identifier:
                keyid:4E:E3:B7:81:FD:99:C0:69:38:A1:7C:F6:BA:B9:65:78:32:8E:E2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7D394207DD4060543CD50776336DD22EDC2B2354854A54D7916CD6589D1E3E6/0/4EE3B781FD99C06938A17CF6BAB96578328EE29B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EE3B781FD99C06938A17CF6BAB96578328EE29B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7D394207DD4060543CD50776336DD22EDC2B2354854A54D7916CD6589D1E3E6/0/323830333a363364303a3a2f33322d3332203d3e20323734323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:63d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:24:b7:55:7f:8c:ce:4e:4b:09:eb:c3:e3:1c:c2:c0:c3:
         47:2c:98:be:f9:34:ca:8f:51:c8:10:66:4b:37:a6:f6:3b:bb:
         d1:8c:f4:65:60:5a:18:64:e8:08:52:c2:ea:2b:db:7f:e7:6f:
         8e:35:8b:1a:37:1e:6f:7a:aa:44:77:a6:dc:99:12:20:63:d6:
         54:86:fe:d0:a7:e2:05:2f:1a:b0:f0:88:36:34:f7:ba:68:5e:
         0f:2e:aa:a7:30:f9:3f:aa:01:c5:fe:84:f3:c2:a6:7e:42:ad:
         ec:e2:63:8d:85:e7:d5:e1:9f:f1:6e:da:2f:31:75:c4:8f:30:
         6c:61:50:c2:84:6b:11:e1:f3:fa:61:73:c9:e2:24:11:59:1f:
         7c:3f:cd:0f:d9:df:ac:13:a5:31:f6:76:aa:6b:51:fe:4e:44:
         07:5c:17:bc:62:88:d5:45:67:9a:75:ca:65:3c:74:8e:32:35:
         75:d1:e4:22:74:46:5a:e3:78:2f:5f:2d:7e:a9:ba:10:26:12:
         90:bf:90:7e:c3:2e:82:38:4e:68:5b:e6:cb:ba:41:b4:09:32:
         f4:f4:7d:6e:b9:e7:c3:ce:44:f1:21:33:2c:2b:87:29:42:42:
         88:c8:43:fc:3a:1c:23:29:e9:42:0f:fe:3d:e0:d0:c3:2c:3c:
         b6:75:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:36:48 2026 by rpki-client