Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33322d3438203d3e20323731383936.roa
File:                     323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (raw, json)
Hash identifier:          xsgtkQtkAK+r9Xq0B6shBgk97VS5L9ZpHi7ArbjU55Y=
Subject key identifier:   2E:CE:15:D8:63:F4:CA:7D:33:AF:C4:2E:80:2C:31:33:92:B4:B1:4E
Certificate issuer:       /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
Certificate serial:       7DE285CFDA72EB13C754F749AA05D95EB32469AD
Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33322d3438203d3e20323731383936.roa
Signing time:             Tue 22 Sep 2026 19:36:24 +0000
ROA not before:           Tue 22 Sep 2026 19:31:24 +0000
ROA not after:            Tue 21 Sep 2027 19:36:24 +0000
asID:                     271896
IP address blocks:        2803:2210::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 10:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e2:85:cf:da:72:eb:13:c7:54:f7:49:aa:05:d9:5e:b3:24:69:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
        Validity
            Not Before: Sep 22 19:31:24 2026 GMT
            Not After : Sep 21 19:36:24 2027 GMT
        Subject: CN=2ECE15D863F4CA7D33AFC42E802C313392B4B14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:c4:b7:55:54:8d:1a:fd:a8:dd:a8:e0:e5:
                    5e:d8:7f:de:8e:fb:2b:13:a9:c9:03:18:97:b8:c1:
                    d4:03:9d:64:16:3b:60:6e:be:46:f1:e0:5b:81:2b:
                    7b:90:6a:7d:bc:33:cf:88:49:01:2b:cb:85:c1:89:
                    ce:01:05:1d:35:aa:69:a0:bb:eb:f9:6a:e2:21:51:
                    e2:63:7d:f1:ef:e1:44:e5:e4:75:5a:6f:55:f8:97:
                    df:b8:48:20:9d:46:ee:75:f0:78:85:37:40:ee:2a:
                    66:26:20:5f:3d:c1:5b:19:1e:53:d4:24:08:c7:eb:
                    a6:13:ff:32:2a:31:4e:49:3c:02:e2:d9:4a:97:f9:
                    b8:44:27:e2:a0:e1:dc:8d:9f:4b:31:39:74:8a:71:
                    bd:8c:f8:ac:2f:bb:2b:a3:a4:4c:8c:16:db:af:5c:
                    4b:6b:d5:17:53:bb:d4:db:a3:4d:38:aa:eb:d0:c2:
                    87:41:7d:b5:22:ed:ba:ca:39:08:76:4d:6d:87:8d:
                    8b:83:50:32:cb:93:89:27:37:7e:fe:72:18:76:5f:
                    bb:32:fa:8c:6d:0d:14:2b:15:e1:69:b2:66:9d:09:
                    2a:7d:66:9f:62:26:27:ce:9e:31:c5:a0:2e:9a:7d:
                    17:e6:76:e0:4c:80:f5:f0:27:aa:09:26:91:ec:d1:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:15:D8:63:F4:CA:7D:33:AF:C4:2E:80:2C:31:33:92:B4:B1:4E
            X509v3 Authority Key Identifier:
                keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33322d3438203d3e20323731383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2210::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:6f:0c:db:77:04:e7:3f:bd:cf:b2:69:0b:1e:9a:1b:3b:
         c0:5f:e3:8f:81:35:96:09:8b:bd:bb:6b:63:36:4e:78:b5:fd:
         e9:77:85:6e:27:3c:a6:ec:25:f9:3f:4b:e1:76:b3:c9:7c:e5:
         dc:68:4e:14:61:c3:98:57:d2:40:d9:71:1a:e0:33:26:06:4f:
         f3:7a:f5:ad:5f:8e:ec:b6:33:78:bf:53:96:15:84:ba:ec:1f:
         21:64:9e:8c:3f:40:4e:1f:ea:08:28:80:b5:f8:2f:f8:6c:cf:
         6a:0f:7d:20:8d:76:92:8c:30:95:57:f3:c9:a5:10:1b:4f:bc:
         ce:2e:f3:79:82:99:74:e0:17:9e:bc:36:27:a6:a9:11:3d:51:
         ec:30:a7:9d:d4:3c:a3:bd:a3:d3:d5:75:ae:8c:25:f5:37:2a:
         da:27:54:08:35:d4:27:01:8e:48:cc:51:f6:70:cd:9c:65:a7:
         5b:27:d5:29:ef:61:68:dc:bf:fd:fa:76:42:79:8a:48:05:f1:
         48:14:0f:4d:d5:e2:4a:e5:54:e3:9d:ae:b4:ed:a4:56:d2:19:
         0c:26:91:3a:d1:0c:f8:28:29:67:b7:85:16:c1:78:76:7e:5a:
         42:a2:df:d9:ed:e2:f7:4b:a6:77:da:9a:f3:ee:aa:e3:f6:5f:
         fc:e3:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:45:42 2026 by rpki-client