Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/323830333a323061303a3a2f33322d3332203d3e20323636373838.roa
File:                     323830333a323061303a3a2f33322d3332203d3e20323636373838.roa (raw, json)
Hash identifier:          rgyfQ8nwNbiE0r59HefwS8zyIrsIfIM0S3UnTIBG64Q=
Subject key identifier:   1E:4F:EB:FE:3B:A3:4B:F1:37:B2:CE:5D:58:A1:A8:CF:45:8C:3B:3C
Certificate issuer:       /CN=5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544
Certificate serial:       681A0EAA8A191F12742BE38D145CD9BC3D87DC60
Authority key identifier: 54:87:D0:A2:3F:79:A8:9E:A9:EA:0D:2C:CE:18:AC:BD:D7:04:D5:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/323830333a323061303a3a2f33322d3332203d3e20323636373838.roa
Signing time:             Mon 20 Jul 2026 16:10:50 +0000
ROA not before:           Mon 20 Jul 2026 16:05:50 +0000
ROA not after:            Mon 19 Jul 2027 16:10:50 +0000
asID:                     266788
IP address blocks:        2803:20a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1a:0e:aa:8a:19:1f:12:74:2b:e3:8d:14:5c:d9:bc:3d:87:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544
        Validity
            Not Before: Jul 20 16:05:50 2026 GMT
            Not After : Jul 19 16:10:50 2027 GMT
        Subject: CN=1E4FEBFE3BA34BF137B2CE5D58A1A8CF458C3B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:90:fc:f0:ec:fb:8f:a9:8c:26:a8:6e:2c:
                    65:5f:ba:0f:66:65:dd:a0:08:0f:88:2b:cc:b6:c9:
                    24:92:72:a7:13:e9:7a:a9:1e:62:a4:4a:ec:0b:ed:
                    92:52:ae:b6:c0:5f:bf:bb:ca:be:7b:72:42:7c:26:
                    77:aa:ea:23:9b:b1:fa:c4:d0:87:6e:d9:70:3d:f3:
                    e5:05:41:3c:1e:ac:7f:81:79:cc:af:21:b2:90:22:
                    13:57:63:e6:97:53:b2:4b:16:31:ed:2d:23:dd:48:
                    1d:a7:46:2a:aa:18:22:c5:59:ad:f9:b2:db:ff:dc:
                    cd:84:6e:f5:29:d6:0e:5c:fb:bd:cd:f3:ce:72:30:
                    98:6f:4a:b7:26:7c:ab:07:d8:a9:90:d5:4f:46:65:
                    a8:7d:0e:45:22:2c:04:3a:33:e4:9f:21:cf:9a:90:
                    37:44:fc:71:35:e9:52:da:fa:01:99:60:80:53:bb:
                    de:21:2a:94:21:cd:62:bb:b0:d0:1f:81:33:98:47:
                    44:31:73:60:ba:f4:ab:70:ef:d1:4f:58:0d:f8:b3:
                    a0:0b:c8:0a:ca:d4:51:b1:07:24:1e:32:79:83:97:
                    be:93:d6:12:ae:f2:d1:07:64:48:26:03:cf:df:93:
                    41:01:70:1a:42:65:a8:24:22:50:d7:e9:1c:f2:5f:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4F:EB:FE:3B:A3:4B:F1:37:B2:CE:5D:58:A1:A8:CF:45:8C:3B:3C
            X509v3 Authority Key Identifier:
                keyid:54:87:D0:A2:3F:79:A8:9E:A9:EA:0D:2C:CE:18:AC:BD:D7:04:D5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/323830333a323061303a3a2f33322d3332203d3e20323636373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:20a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:4a:79:08:2c:fd:36:a6:3c:58:d2:64:11:08:dc:f0:ec:f9:
         c3:34:4f:4b:45:af:3e:3a:61:7d:1b:85:32:64:99:47:56:c3:
         7d:9f:88:7f:80:13:6d:84:ad:9f:58:74:3d:1c:5f:c0:81:d2:
         6d:82:f3:0a:14:76:81:bb:35:13:a2:b6:f8:16:52:c4:ba:09:
         a4:36:45:f5:37:c5:d2:9a:01:9c:7f:fb:a3:52:ac:2e:c9:98:
         c8:0e:cc:1a:7a:2b:e3:53:78:f6:6f:67:5c:84:3e:b7:6d:23:
         9b:b8:49:d0:df:10:cb:41:a4:51:bb:48:c8:7c:02:12:1c:99:
         0a:ce:83:85:f4:9a:3f:91:74:0d:7a:6f:b3:2d:43:34:39:57:
         68:57:c7:c4:88:41:09:4a:ac:da:71:05:82:2f:91:e6:d0:0e:
         fc:f7:b5:47:b5:76:ea:97:bd:d5:7b:06:c4:a6:e3:6b:a9:54:
         11:d5:f5:b9:03:22:80:6c:77:da:a7:76:00:6d:1e:4e:cd:6c:
         70:20:04:0a:8f:f7:c3:a4:1e:87:fe:6c:9e:98:4b:8a:2f:9b:
         2c:e3:6f:05:96:79:ca:88:91:62:b9:7d:b4:a7:44:d1:e6:c6:
         39:b9:5d:85:52:85:6c:8e:09:66:ac:ea:c7:07:c2:bb:dc:6c:
         c1:6a:17:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:25:45 2026 by rpki-client