Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/323830333a336133303a633030303a3a2f33362d3438203d3e20323138373138.roa
File:                     323830333a336133303a633030303a3a2f33362d3438203d3e20323138373138.roa (raw, json)
Hash identifier:          +Xvkyh8Gzxy7/3KzErJl7DEYvc4F2EhvUIzjWdiBqrs=
Subject key identifier:   D9:7E:44:D9:1F:D9:AE:64:D6:CD:B5:DF:71:A1:41:5D:81:BF:2F:E5
Certificate issuer:       /CN=5EE7B720EC9BA11065DA9392423ADAA229B6571D
Certificate serial:       2225F15D1ED3C5C4240EAC9B9385F6871D613E05
Authority key identifier: 5E:E7:B7:20:EC:9B:A1:10:65:DA:93:92:42:3A:DA:A2:29:B6:57:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/323830333a336133303a633030303a3a2f33362d3438203d3e20323138373138.roa
Signing time:             Thu 10 Sep 2026 06:00:00 +0000
ROA not before:           Thu 10 Sep 2026 05:55:00 +0000
ROA not after:            Thu 09 Sep 2027 06:00:00 +0000
asID:                     218718
IP address blocks:        2803:3a30:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:25:f1:5d:1e:d3:c5:c4:24:0e:ac:9b:93:85:f6:87:1d:61:3e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EE7B720EC9BA11065DA9392423ADAA229B6571D
        Validity
            Not Before: Sep 10 05:55:00 2026 GMT
            Not After : Sep  9 06:00:00 2027 GMT
        Subject: CN=D97E44D91FD9AE64D6CDB5DF71A1415D81BF2FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:64:f8:ba:43:ce:d2:51:1a:bb:47:ad:93:
                    88:2f:f4:41:82:d7:8f:49:53:10:60:a2:1e:d1:94:
                    73:2e:5d:0a:c6:66:2d:90:d8:6a:6b:99:43:7a:b0:
                    80:73:f0:35:9a:0d:1f:a0:4e:11:fe:8e:33:4d:0b:
                    cc:3e:bd:fe:c2:cf:4f:55:04:4a:02:44:22:46:8d:
                    ad:0c:eb:3e:fc:89:2c:16:7f:38:37:06:75:e7:30:
                    24:ca:f5:1e:ec:d7:cf:f2:71:63:ec:e8:38:bd:3f:
                    8c:fb:4f:98:80:1e:e1:83:35:d5:18:6e:11:64:be:
                    26:65:b4:c4:1a:88:c4:a6:ce:dd:b2:ff:ac:77:44:
                    a1:4b:91:cf:18:fa:e7:9c:2b:12:13:c8:04:8d:b2:
                    21:ca:72:08:e5:a0:6f:63:77:d1:1e:aa:83:a9:71:
                    df:86:59:68:19:ba:f6:e0:66:bc:6a:df:c7:77:32:
                    df:55:a8:42:97:eb:2c:01:c3:bd:c7:0f:48:56:b5:
                    17:3e:1f:5a:25:86:f2:24:cc:c3:f3:74:a6:72:ac:
                    de:69:2b:1b:ef:b5:ef:60:6f:91:60:e0:9c:a7:14:
                    fa:8a:7d:fb:fb:4f:a9:88:2f:0e:64:2f:be:21:6a:
                    1a:95:49:f6:26:63:f6:99:8f:54:a9:98:e9:16:8b:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7E:44:D9:1F:D9:AE:64:D6:CD:B5:DF:71:A1:41:5D:81:BF:2F:E5
            X509v3 Authority Key Identifier:
                keyid:5E:E7:B7:20:EC:9B:A1:10:65:DA:93:92:42:3A:DA:A2:29:B6:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EE7B720EC9BA11065DA9392423ADAA229B6571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1D64B9A0FC6A9DFFC4EFD564C34DE767CADC84EA8A6AFB17D61A02D37B7D0/0/323830333a336133303a633030303a3a2f33362d3438203d3e20323138373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a30:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:ce:fb:e0:fe:16:48:c0:15:87:b3:38:31:5a:36:dc:6f:
         e0:d5:2d:ca:12:19:ce:75:1c:a0:2e:73:b7:d3:c8:f4:46:d6:
         88:c7:4b:94:a0:d8:09:c9:6a:f3:1a:90:77:74:bf:f1:22:98:
         b5:ed:ba:da:91:ba:29:13:88:04:ad:e5:7c:8b:b5:7d:0e:9f:
         9c:7f:77:2d:32:c7:a2:40:91:fb:12:aa:dd:82:22:aa:f7:91:
         19:27:6b:49:95:b3:b9:c9:1d:9a:02:42:60:e8:38:5e:db:f9:
         b8:ad:38:3e:3d:44:29:1f:c2:b8:67:a5:5c:47:90:f5:f0:77:
         ed:13:4c:ca:0d:a8:ad:ac:c4:dd:0f:d6:13:d2:a6:2f:92:a4:
         32:fa:82:fa:13:37:40:5f:b1:18:55:03:9b:19:5e:13:c7:ae:
         49:90:1e:b3:2c:b9:e6:0d:57:20:dc:cf:64:ae:96:a4:5b:3b:
         89:35:79:73:e4:43:fe:a5:a5:9e:39:e6:6d:21:2a:50:11:b1:
         9f:45:49:9d:f2:cd:7a:37:41:84:c5:23:7f:8a:0f:1e:cf:d5:
         9e:05:83:57:5d:11:bd:0f:86:05:9e:0c:d6:11:fa:ae:68:d9:
         02:3a:86:5c:30:7b:90:75:4f:d8:85:6d:c5:b7:04:d1:60:49:
         d6:6d:6a:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:56:05 2026 by rpki-client