Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa
File:                     323830333a356130303a3a2f33322d3332203d3e20323632323136.roa (raw, json)
Hash identifier:          GOv4wk2//o/w9FzBRKd6OkiC7oNxvdh872MhZT1+vDE=
Subject key identifier:   1C:4D:9F:7D:80:79:BB:F6:52:71:43:82:CF:28:55:E8:B9:01:2F:78
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       3CDB10EBE350DFB8241D62B51B8EA4551641C9FE
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:32 +0000
ROA not before:           Fri 11 Sep 2026 15:30:32 +0000
ROA not after:            Fri 10 Sep 2027 15:35:32 +0000
asID:                     262216
IP address blocks:        2803:5a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:db:10:eb:e3:50:df:b8:24:1d:62:b5:1b:8e:a4:55:16:41:c9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Sep 11 15:30:32 2026 GMT
            Not After : Sep 10 15:35:32 2027 GMT
        Subject: CN=1C4D9F7D8079BBF652714382CF2855E8B9012F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:5d:7d:31:b9:52:91:02:84:e4:a9:c4:5e:
                    6d:97:86:e3:56:ec:67:2a:2d:e4:42:60:df:a3:99:
                    78:02:d6:2e:10:a2:0b:0e:6f:72:0b:30:8c:2f:bf:
                    c2:78:8e:1a:d3:b3:80:b6:f8:9f:0a:fe:38:54:c7:
                    45:5f:94:38:1a:08:5e:21:91:0e:e7:76:50:bb:e5:
                    c4:03:7c:c9:49:fe:0d:10:4f:ab:86:ff:69:b6:f3:
                    f8:4d:e9:37:25:ec:6b:b9:32:6c:89:ad:93:c6:32:
                    84:03:e9:8b:b5:55:84:2c:8b:11:17:63:aa:ef:7c:
                    d0:4b:ba:6b:3c:2c:39:53:86:7b:f0:20:ea:c0:2c:
                    0f:91:9d:95:80:4b:e7:6e:05:6f:5e:5f:80:49:03:
                    90:b2:73:5e:42:58:0f:9d:c2:de:21:c3:86:e7:46:
                    a9:14:96:33:2f:ab:98:06:22:c0:82:47:85:57:70:
                    4c:38:01:d7:eb:fe:d3:04:5b:98:66:18:af:a9:83:
                    25:4a:b5:f0:79:92:57:36:98:2c:9f:77:6a:c3:74:
                    b6:d2:0b:2e:73:3d:ca:94:4b:b1:8f:d2:74:c6:11:
                    3d:2c:24:b3:fa:5b:ef:9e:c4:2c:b3:46:93:42:a4:
                    cc:cf:98:18:c3:59:96:4d:15:3a:69:12:cc:ef:45:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:9F:7D:80:79:BB:F6:52:71:43:82:CF:28:55:E8:B9:01:2F:78
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:27:8e:e9:b1:0e:26:b8:cc:26:35:7c:54:d8:87:51:67:bb:
         87:18:62:7e:37:f3:5b:32:2c:05:ce:b1:50:ef:13:6d:15:6e:
         68:69:bd:bf:aa:51:04:28:f1:50:9f:96:54:7a:81:29:45:7e:
         5c:ed:ae:8d:4c:5a:2c:c0:ec:12:07:8d:a5:e0:f5:db:6a:36:
         74:aa:a5:9e:2a:4b:ed:e0:ff:84:05:85:18:4b:08:ad:83:6b:
         0c:2b:c7:a7:5c:a6:40:d7:c5:5b:6c:32:fa:cb:f9:36:f5:e8:
         89:2e:e7:91:6e:4f:52:f4:d0:8c:1d:e6:41:76:d9:b7:af:4b:
         22:f0:36:ac:89:d2:97:9d:0c:a1:89:f8:bf:c2:ae:68:18:d5:
         91:f2:eb:75:e2:63:67:e7:a7:ee:88:e0:58:a5:b6:c3:f5:65:
         5b:63:1b:85:f3:a5:6e:57:ac:a7:0b:e6:d8:9c:c9:9f:41:c5:
         46:31:22:e9:d2:9f:64:1f:75:df:95:5d:a9:09:0e:e5:45:95:
         e0:ba:c3:b2:b2:a9:71:d9:a5:94:43:0c:60:e8:39:fd:fd:53:
         d6:48:2d:ff:d7:ff:fb:24:ad:4f:bf:90:9d:d5:0f:87:5a:8f:
         42:67:3a:49:f1:6b:66:7e:ba:fa:b5:3b:a3:c4:89:5a:2a:7c:
         c5:46:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:39:11 2026 by rpki-client