Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/323830333a343364303a3a2f33322d3438203d3e20323734323033.roa
File:                     323830333a343364303a3a2f33322d3438203d3e20323734323033.roa (raw, json)
Hash identifier:          Ero6e9W+LRhqeGk0Z+1P0d/9ohC8qSwphhDlq7bCm3g=
Subject key identifier:   32:54:48:10:06:32:63:68:15:FF:5E:6E:6C:D5:99:47:58:54:FD:2A
Certificate issuer:       /CN=BDEAB89AAA5219DB0746A97BB746F43F4F6657F3
Certificate serial:       45E1EB7C401E3E6B4B1CAADFF06ADC4FE0419CB0
Authority key identifier: BD:EA:B8:9A:AA:52:19:DB:07:46:A9:7B:B7:46:F4:3F:4F:66:57:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/323830333a343364303a3a2f33322d3438203d3e20323734323033.roa
Signing time:             Sat 19 Sep 2026 04:36:09 +0000
ROA not before:           Sat 19 Sep 2026 04:31:09 +0000
ROA not after:            Sat 18 Sep 2027 04:36:09 +0000
asID:                     274203
IP address blocks:        2803:43d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e1:eb:7c:40:1e:3e:6b:4b:1c:aa:df:f0:6a:dc:4f:e0:41:9c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEAB89AAA5219DB0746A97BB746F43F4F6657F3
        Validity
            Not Before: Sep 19 04:31:09 2026 GMT
            Not After : Sep 18 04:36:09 2027 GMT
        Subject: CN=325448100632636815FF5E6E6CD599475854FD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:c9:e2:ff:56:71:29:80:55:3b:12:f6:6b:
                    99:05:ea:7a:ae:a6:ab:6b:f6:84:9a:3a:bb:ef:e5:
                    07:35:e7:64:13:6e:0b:c5:1d:bc:ac:96:a3:d5:74:
                    99:88:d2:42:d2:c1:dc:db:94:c6:f4:5c:95:5f:38:
                    a7:9d:79:b3:bf:bf:6e:d7:4a:2e:17:3f:29:ce:c7:
                    c4:ac:b8:58:3e:b9:86:cf:0b:32:aa:44:b7:af:cf:
                    51:10:a6:fd:15:4d:91:10:f5:80:d3:e5:6d:55:0b:
                    3f:62:e9:ec:5c:06:d2:cb:23:94:5e:d9:51:f0:a2:
                    cc:b3:ec:e2:e2:0b:e5:0b:33:c0:b7:c2:cc:2d:e7:
                    03:b5:89:b8:f0:a0:8a:91:25:05:cd:6c:89:71:bb:
                    dc:23:6c:77:41:95:1d:14:35:49:13:33:0a:9c:f7:
                    3f:69:ae:36:61:6c:0b:ab:de:3e:ac:1b:14:ba:5f:
                    81:09:67:f4:e6:7b:95:3d:47:c0:8f:bd:c1:63:50:
                    6a:c7:f5:6d:31:9d:50:2f:5b:9b:c3:f8:d4:c0:95:
                    fe:e9:23:98:2e:22:20:bc:fe:7a:e5:b5:e1:99:1f:
                    3f:75:6b:c7:b2:50:4c:65:ac:92:1c:90:60:35:06:
                    46:4d:fc:74:b6:96:58:37:c7:d0:a9:13:de:20:4f:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:48:10:06:32:63:68:15:FF:5E:6E:6C:D5:99:47:58:54:FD:2A
            X509v3 Authority Key Identifier:
                keyid:BD:EA:B8:9A:AA:52:19:DB:07:46:A9:7B:B7:46:F4:3F:4F:66:57:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/323830333a343364303a3a2f33322d3438203d3e20323734323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:43d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:73:55:7e:fe:25:bd:63:0d:82:a8:87:1a:4d:54:1b:76:ee:
         54:05:21:27:fc:ae:14:45:1d:40:50:13:9c:12:01:34:4b:d6:
         a2:91:84:68:be:4b:38:ad:a3:2c:19:7c:a1:96:f6:3d:b7:b1:
         7e:c3:fe:46:87:7d:52:d7:06:4d:66:b0:ac:dc:f1:52:69:18:
         6f:dc:b9:82:5e:89:88:0e:0f:13:0a:f0:ac:c4:f9:69:1e:0b:
         9d:2a:60:f5:d0:74:e0:ec:6d:1b:0d:a0:6b:b5:0f:cb:52:95:
         34:e4:1a:06:1b:1f:37:7b:91:2b:e8:62:af:dc:ae:a9:59:23:
         76:ae:eb:11:5b:b9:a5:d1:9b:11:a0:ad:3d:fc:00:f5:9f:b1:
         03:e9:9c:73:fa:8d:86:e5:e4:58:83:be:ec:0c:28:fc:87:92:
         69:41:47:73:b9:d0:0e:cb:4f:14:62:6f:e7:e5:18:c7:01:4b:
         35:32:c3:42:1f:bc:b4:fc:98:6b:71:75:5c:1c:17:a2:a5:e4:
         c8:ba:fc:db:d7:a2:55:2f:51:5a:f4:75:93:da:36:44:2d:a0:
         65:4e:04:4c:ef:cd:25:d5:88:65:e8:ae:d3:ad:a5:1b:53:cd:
         80:5f:50:9b:0c:c7:a2:ae:7e:f7:02:59:64:fa:a9:c3:88:d4:
         a2:76:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:44:58 2026 by rpki-client