Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/323830333a373235303a3a2f33322d3438203d3e20323733313732.roa
File:                     323830333a373235303a3a2f33322d3438203d3e20323733313732.roa (raw, json)
Hash identifier:          qoBDbWP1L7SXkjoJrPtQDdS9wVvlEZ0iw18MmC3IEFg=
Subject key identifier:   34:34:88:E5:E7:21:0C:E6:E2:F6:36:93:57:2B:CB:F9:2D:34:BF:DD
Certificate issuer:       /CN=CF1757B269E35FD938A83FC994D18AC167C0FC8D
Certificate serial:       76144D73407FE3775D7D2A04A7C96EA95B46CE07
Authority key identifier: CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/323830333a373235303a3a2f33322d3438203d3e20323733313732.roa
Signing time:             Tue 06 Oct 2026 21:38:57 +0000
ROA not before:           Tue 06 Oct 2026 21:33:57 +0000
ROA not after:            Tue 05 Oct 2027 21:38:57 +0000
asID:                     273172
IP address blocks:        2803:7250::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:4d:73:40:7f:e3:77:5d:7d:2a:04:a7:c9:6e:a9:5b:46:ce:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1757B269E35FD938A83FC994D18AC167C0FC8D
        Validity
            Not Before: Oct  6 21:33:57 2026 GMT
            Not After : Oct  5 21:38:57 2027 GMT
        Subject: CN=343488E5E7210CE6E2F63693572BCBF92D34BFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:ea:21:ab:3d:1b:eb:2f:57:17:ed:18:e7:
                    64:c1:3c:c0:b3:30:d1:1d:1f:a9:a5:4e:8b:8f:86:
                    aa:2d:e3:d9:4e:bb:b6:b9:04:c3:68:08:4d:5b:03:
                    81:fd:c0:9e:b5:f0:51:4c:1d:31:ec:43:c3:0e:40:
                    9e:ae:9a:11:ec:da:6e:88:b0:1e:35:6f:46:d3:8b:
                    57:6c:36:37:df:bd:81:81:f7:a0:d5:79:3b:3c:25:
                    5d:ac:4c:11:db:77:ca:e3:68:2c:02:2e:da:4b:32:
                    65:a7:98:29:80:84:7f:3c:1d:20:d9:1b:1a:4f:f0:
                    53:bf:9e:8b:44:2f:8d:8e:ce:56:05:52:dd:25:18:
                    85:20:d2:16:4a:8b:fb:b7:9b:35:4e:e4:47:c4:10:
                    f6:ff:70:f9:f6:be:f8:2f:a8:2d:99:a3:f4:ea:57:
                    66:d2:11:47:74:61:ae:c8:b9:6a:09:ed:0b:5a:94:
                    32:77:24:e4:33:64:78:7f:7e:16:3f:eb:ae:c7:5d:
                    d2:1e:81:d1:e6:e2:95:14:bc:46:96:99:d7:71:70:
                    21:dd:49:17:7b:81:d0:46:21:0d:39:f1:d1:b0:bf:
                    eb:05:38:cf:9b:42:e0:b8:d2:67:02:6c:90:0a:90:
                    5a:d3:cd:5c:56:3f:03:27:b9:bf:a7:5b:d4:8e:5a:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:34:88:E5:E7:21:0C:E6:E2:F6:36:93:57:2B:CB:F9:2D:34:BF:DD
            X509v3 Authority Key Identifier:
                keyid:CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/323830333a373235303a3a2f33322d3438203d3e20323733313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7250::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:21:51:70:1d:8a:8b:75:f6:d8:2f:c5:ee:1c:cb:81:1d:7a:
         da:c1:bd:1d:42:35:44:6e:98:4e:2a:86:4d:f6:ae:ba:0b:73:
         d0:1a:6a:4f:ff:4a:df:6e:93:35:56:c5:d3:d3:87:f3:fa:94:
         db:b2:3c:2e:3c:7d:5e:11:10:79:c5:97:c6:d9:98:89:cf:e9:
         6e:35:d6:55:00:ab:39:d7:a2:e8:e4:39:e2:13:cb:01:ba:0e:
         c4:c0:16:4b:0f:2f:fa:59:09:a0:dd:8d:27:ab:37:c9:60:8c:
         1a:11:4e:31:06:8a:f2:3b:94:29:2f:04:31:52:f2:fe:f5:4b:
         f8:9e:7f:e8:07:d0:b1:25:2e:28:60:9e:ad:ab:68:78:21:f9:
         d0:cd:43:6a:25:e5:79:7b:98:58:c9:cd:43:41:6c:9e:2e:02:
         cc:06:ed:81:18:b7:ba:6c:a3:bd:fe:a3:7d:8e:2b:e4:24:8e:
         bc:a3:25:a9:3f:89:ed:c2:84:ad:d7:98:db:58:d6:12:dd:d1:
         81:30:04:f4:5a:80:51:3e:7d:0d:45:5a:54:68:7a:69:c8:1f:
         da:cc:99:57:e9:51:2c:84:fd:25:ac:09:a5:c6:8a:e2:22:39:
         8d:37:76:f2:10:40:c2:70:68:56:1a:b5:a2:a0:1a:1f:92:b9:
         ac:09:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:33:37 2026 by rpki-client