Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C1197699559E9BC7848A8159AA7604D75ECD4EAFD191BBE65466F787D8564AD9/0/323830333a376133303a383030303a3a2f33332d3438203d3e20323735303335.roa
File:                     323830333a376133303a383030303a3a2f33332d3438203d3e20323735303335.roa (raw, json)
Hash identifier:          8UjiUTpkR3xskgXV40hIuQLmg9lVnHBtbk9k63PpNPw=
Subject key identifier:   CF:CB:81:1E:7B:C8:B0:17:50:58:04:DF:20:45:49:F7:BE:D2:87:49
Certificate issuer:       /CN=218F2D420BB4F30BC6A66E8F3CC7AF331A56666E
Certificate serial:       72A31AD904E51A5146C2A17FA818DAF991613FBC
Authority key identifier: 21:8F:2D:42:0B:B4:F3:0B:C6:A6:6E:8F:3C:C7:AF:33:1A:56:66:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/218F2D420BB4F30BC6A66E8F3CC7AF331A56666E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1197699559E9BC7848A8159AA7604D75ECD4EAFD191BBE65466F787D8564AD9/0/323830333a376133303a383030303a3a2f33332d3438203d3e20323735303335.roa
Signing time:             Tue 15 Sep 2026 22:00:00 +0000
ROA not before:           Tue 15 Sep 2026 21:55:00 +0000
ROA not after:            Tue 14 Sep 2027 22:00:00 +0000
asID:                     275035
IP address blocks:        2803:7a30:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1197699559E9BC7848A8159AA7604D75ECD4EAFD191BBE65466F787D8564AD9/0/218F2D420BB4F30BC6A66E8F3CC7AF331A56666E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1197699559E9BC7848A8159AA7604D75ECD4EAFD191BBE65466F787D8564AD9/0/218F2D420BB4F30BC6A66E8F3CC7AF331A56666E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/218F2D420BB4F30BC6A66E8F3CC7AF331A56666E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Oct 2026 19:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a3:1a:d9:04:e5:1a:51:46:c2:a1:7f:a8:18:da:f9:91:61:3f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218F2D420BB4F30BC6A66E8F3CC7AF331A56666E
        Validity
            Not Before: Sep 15 21:55:00 2026 GMT
            Not After : Sep 14 22:00:00 2027 GMT
        Subject: CN=CFCB811E7BC8B017505804DF204549F7BED28749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:02:8b:88:f1:07:b6:9a:49:ab:89:6e:e2:
                    24:d3:fe:9b:87:92:39:c6:75:e7:d4:9b:d2:1d:fd:
                    22:f5:88:67:f1:b2:21:4e:51:78:a6:b7:97:c7:78:
                    05:f9:8a:ea:f0:3a:a8:ab:04:e3:e4:87:35:23:7f:
                    ec:7e:54:bb:f8:14:1f:14:a8:09:80:f2:a4:6e:02:
                    85:5e:23:ce:d8:95:98:30:4f:ff:4c:b4:7b:af:d0:
                    98:b4:76:7a:2c:47:29:27:5f:b5:74:72:69:cd:f5:
                    4f:f8:02:e7:0f:14:bd:41:75:4c:4b:27:8c:a9:84:
                    db:72:7b:0a:95:a2:bc:f4:99:3c:40:8c:bb:f3:49:
                    0a:cd:fc:fe:52:8e:c9:bd:93:04:65:1b:c5:a5:c8:
                    a9:26:6d:87:21:9a:86:c0:17:af:fb:ab:a3:83:d7:
                    51:90:02:96:17:e0:0e:e1:28:51:fa:7d:0a:45:fb:
                    4a:ed:ad:28:c9:82:2f:eb:5e:bc:d7:c5:e5:17:18:
                    78:57:78:51:f7:17:9c:3a:14:8e:d1:f8:ef:5a:5f:
                    84:f9:f8:61:a4:e1:13:bf:91:ec:75:47:57:be:5b:
                    7c:49:6a:e2:e2:68:d5:3b:f7:06:43:8b:e0:48:f6:
                    4f:8f:19:d5:4c:9f:56:09:1b:ec:7a:d5:30:9d:2f:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CB:81:1E:7B:C8:B0:17:50:58:04:DF:20:45:49:F7:BE:D2:87:49
            X509v3 Authority Key Identifier:
                keyid:21:8F:2D:42:0B:B4:F3:0B:C6:A6:6E:8F:3C:C7:AF:33:1A:56:66:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1197699559E9BC7848A8159AA7604D75ECD4EAFD191BBE65466F787D8564AD9/0/218F2D420BB4F30BC6A66E8F3CC7AF331A56666E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/218F2D420BB4F30BC6A66E8F3CC7AF331A56666E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1197699559E9BC7848A8159AA7604D75ECD4EAFD191BBE65466F787D8564AD9/0/323830333a376133303a383030303a3a2f33332d3438203d3e20323735303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a30:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:9c:cb:2c:57:ff:27:63:06:7b:35:d3:e4:8a:df:54:5d:
         1d:64:1e:fe:3d:b5:83:2e:41:a6:af:49:90:1a:19:f3:e1:67:
         79:13:ea:6c:e0:e4:24:77:3c:05:cb:02:b7:9d:8b:7d:e2:b4:
         72:5f:42:97:a1:c6:b9:71:77:1f:27:5d:72:ab:28:65:4b:7f:
         9f:60:af:fc:62:b6:fb:02:22:fe:cb:68:51:e3:39:60:f5:c9:
         33:41:85:cf:ff:f5:2d:75:73:91:48:01:46:76:b6:b4:ab:6e:
         b3:96:cf:38:75:b1:8a:26:24:5a:f1:67:19:b7:3a:57:0b:bc:
         a5:b6:0e:e1:2d:bf:25:98:a5:c0:ac:fa:ae:6d:a3:9c:84:8b:
         1d:ac:5e:d9:65:e5:aa:32:a0:55:84:23:2a:9a:8c:b5:f4:82:
         60:1f:bb:8f:67:d6:0b:71:fa:bc:f0:ef:17:38:e2:0d:7e:a0:
         42:92:83:fb:0b:7a:02:89:40:95:ac:c9:57:0a:8d:d3:9a:88:
         37:99:86:7d:24:9d:59:85:ec:95:cc:57:19:ed:4b:f9:67:3d:
         f3:4e:3e:4d:b9:74:4e:b9:f8:10:7a:f6:34:25:63:d1:67:d8:
         30:68:6f:28:01:63:eb:c1:c8:39:99:66:bf:4e:72:3c:7a:ed:
         16:12:c2:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:42:03 2026 by rpki-client