Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3438203d3e20313734.roa
File:                     323830333a366236303a3a2f33322d3438203d3e20313734.roa (raw, json)
Hash identifier:          p5B+FPuNEAYbyBA46cWoMymUne4BcjDxCq1wCsxHvk8=
Subject key identifier:   FF:9A:57:F1:BA:AB:4D:55:70:E9:BB:AA:B1:81:92:4A:3C:A1:75:28
Certificate issuer:       /CN=87919A3C59C067523C21EF70A596F0B7F9C09798
Certificate serial:       066F698F129468079C56F6953225D45DC29F63C3
Authority key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3438203d3e20313734.roa
Signing time:             Thu 01 Oct 2026 14:37:39 +0000
ROA not before:           Thu 01 Oct 2026 14:32:39 +0000
ROA not after:            Thu 30 Sep 2027 14:37:39 +0000
asID:                     174
IP address blocks:        2803:6b60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 07:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6f:69:8f:12:94:68:07:9c:56:f6:95:32:25:d4:5d:c2:9f:63:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87919A3C59C067523C21EF70A596F0B7F9C09798
        Validity
            Not Before: Oct  1 14:32:39 2026 GMT
            Not After : Sep 30 14:37:39 2027 GMT
        Subject: CN=FF9A57F1BAAB4D5570E9BBAAB181924A3CA17528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:7a:04:c4:c0:0b:7c:70:6f:5a:3e:28:67:
                    49:e9:4b:18:39:d9:ad:12:a6:d7:55:ac:08:e1:2c:
                    4d:16:6e:3a:b9:61:52:e2:43:ca:1f:fb:de:61:23:
                    b6:e0:de:c9:aa:93:27:53:f9:15:2c:5c:59:e1:57:
                    22:ce:4f:47:d6:cf:51:cb:c4:34:8a:5c:f5:df:0d:
                    07:25:b2:b5:9c:e1:de:f3:f1:91:f8:2e:28:18:0a:
                    13:a8:b5:c0:63:41:44:f4:71:c1:d2:83:7e:31:c8:
                    ea:fe:8d:c7:25:28:25:08:c3:fd:8f:9d:e7:23:22:
                    4e:91:b7:45:a0:b0:b1:70:a8:14:bb:bd:5c:b3:83:
                    a5:4c:3c:8b:77:9f:7d:0e:44:7d:31:4e:db:79:5f:
                    d7:02:01:6a:0a:e4:fd:00:31:86:0d:e2:37:4d:aa:
                    69:ac:21:7f:c9:e4:a5:fa:f3:a4:29:42:b2:e6:5f:
                    35:18:19:0b:66:c4:5a:2a:57:77:a4:1f:36:91:6b:
                    df:7f:39:80:41:ed:6c:6d:f6:8d:67:07:0d:c7:84:
                    b7:44:0c:86:3a:70:8a:ae:aa:52:ff:55:04:56:5f:
                    1c:3e:0a:35:1e:e7:6d:e5:f2:2c:62:69:50:41:dd:
                    88:f0:69:93:f4:60:bd:03:10:e0:55:d9:e4:e5:38:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:57:F1:BA:AB:4D:55:70:E9:BB:AA:B1:81:92:4A:3C:A1:75:28
            X509v3 Authority Key Identifier:
                keyid:87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3438203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:4f:9c:a2:cb:cc:85:1d:48:45:c0:2d:38:b0:24:4f:88:d1:
         50:6f:a0:b9:87:79:00:21:a5:14:8c:13:4a:1d:98:4e:3e:5b:
         b1:37:ec:7a:0a:da:3c:6e:77:9a:cb:4e:da:df:a4:81:fd:f5:
         96:e6:d1:29:1b:ae:5a:d4:ff:4c:a0:e8:83:89:1f:a9:0e:70:
         04:70:28:fa:0b:15:69:16:85:12:64:4b:07:24:79:5a:d9:9f:
         0b:f9:a2:64:82:e2:6a:7b:e9:cf:f4:8a:d1:d0:e3:d2:af:ec:
         86:d8:3e:38:0d:0d:df:03:8e:a0:10:40:d8:68:da:cf:a6:79:
         74:f5:34:76:60:77:c4:fa:df:07:de:03:49:e0:40:56:32:71:
         e9:23:79:46:9c:f3:3a:aa:91:98:1e:cc:8c:f2:22:ed:6a:a8:
         6b:00:96:2f:b5:5b:14:63:42:7c:ae:74:16:1a:c8:16:2b:64:
         19:b5:bc:c6:c8:93:91:ad:4d:79:06:bf:58:3f:25:8e:1f:2a:
         df:0d:2e:24:f5:44:b9:db:60:53:a6:3d:b4:15:05:cb:ea:03:
         90:f5:03:61:d5:31:46:cd:11:ea:f3:45:a1:2c:41:78:c4:d1:
         08:22:0a:90:06:a9:3c:70:d4:ed:d0:d8:75:a9:80:53:62:40:
         63:19:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:52:15 2026 by rpki-client