Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3438203d3e203232383630.roa
File:                     323830303a3866303a3a2f33322d3438203d3e203232383630.roa (raw, json)
Hash identifier:          Lft9jMY0kW+JF4T1qrQFZrhW51ppoIdt9zJpAENTvDQ=
Subject key identifier:   92:64:C6:57:1B:0A:E1:4B:BC:29:1A:E5:EE:67:F7:CC:2E:90:E3:1A
Certificate issuer:       /CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
Certificate serial:       5244D8CF63BD0123E3A85DF707CF1E02B8981E26
Authority key identifier: 9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3438203d3e203232383630.roa
Signing time:             Tue 17 Mar 2026 21:34:23 +0000
ROA not before:           Tue 17 Mar 2026 21:29:23 +0000
ROA not after:            Tue 16 Mar 2027 21:34:23 +0000
asID:                     22860
IP address blocks:        2800:8f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:44:d8:cf:63:bd:01:23:e3:a8:5d:f7:07:cf:1e:02:b8:98:1e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
        Validity
            Not Before: Mar 17 21:29:23 2026 GMT
            Not After : Mar 16 21:34:23 2027 GMT
        Subject: CN=9264C6571B0AE14BBC291AE5EE67F7CC2E90E31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:69:3c:ac:5c:4b:73:28:11:b9:ae:73:c8:
                    6f:f0:85:81:b9:d0:a3:68:0f:a2:53:57:e1:e1:11:
                    45:cc:af:a3:93:f7:d0:a9:9e:37:ff:cf:0f:83:9c:
                    16:d8:7c:19:b3:dd:d2:ff:00:27:7a:c0:68:42:31:
                    fc:92:88:5f:2e:4c:2a:a8:83:19:2f:ce:47:59:0e:
                    20:a9:db:31:f8:24:77:98:d1:0a:2f:7e:66:fd:cc:
                    a0:41:3f:c7:f0:0a:09:cc:eb:18:39:e6:e6:b9:29:
                    45:f8:fe:2d:8b:da:c0:e0:ae:77:c8:a5:d5:01:9a:
                    9c:56:75:41:99:4b:dd:0e:eb:b8:62:87:09:7b:31:
                    0c:f0:07:0d:a3:5e:3b:50:dd:55:47:c9:3f:72:51:
                    95:45:fa:78:5b:50:5d:2c:5b:c6:13:39:48:f1:a2:
                    f9:67:6a:93:51:e5:f0:e3:75:f1:f9:35:34:92:52:
                    51:e8:f9:df:dc:3e:e5:d9:28:3b:d3:dc:04:c7:3f:
                    ca:99:0c:51:00:26:37:53:5e:7d:14:3b:19:c5:f4:
                    9f:54:29:a5:1b:59:94:4b:b1:f4:72:cc:34:4d:90:
                    4f:e7:63:61:43:91:a3:e0:2b:af:2c:b7:10:0c:e3:
                    a5:6b:0a:6d:76:86:2f:23:f7:16:11:54:66:3e:34:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:C6:57:1B:0A:E1:4B:BC:29:1A:E5:EE:67:F7:CC:2E:90:E3:1A
            X509v3 Authority Key Identifier:
                keyid:9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3438203d3e203232383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:72:d5:72:be:4b:76:42:d3:f5:a8:de:7e:1b:f1:af:4c:48:
         be:00:42:fd:17:eb:53:21:97:d3:1e:fe:44:cf:70:5b:cf:f8:
         4c:f3:2c:12:b3:98:57:78:61:c2:b7:56:c0:e8:a0:34:04:cb:
         95:65:e5:09:22:3d:1c:1c:31:8a:db:c7:55:f4:d0:d7:5a:ec:
         3c:d7:74:00:ad:35:b1:25:a8:71:b1:60:94:d3:20:31:02:75:
         dd:08:73:fe:f5:39:43:57:79:43:5d:3b:f7:01:d7:a3:52:f6:
         3d:fa:3f:80:42:5d:07:e8:46:81:83:4d:3e:7d:3b:30:01:38:
         b2:47:c8:f2:4a:97:ad:fc:b8:b5:84:c6:6b:26:2f:e0:2f:f4:
         33:cc:d5:ff:54:1b:60:3e:4c:03:a4:5e:0c:e0:b6:c8:ef:34:
         87:d2:e6:6d:87:91:51:ef:1a:dc:ad:6a:ca:c8:e2:b8:39:55:
         e6:59:ff:af:41:74:59:f0:9e:fb:dd:2a:d8:2f:69:c1:7c:04:
         68:2a:d1:a7:3b:35:48:be:09:9b:a3:bb:38:b7:3f:60:71:f1:
         2a:12:ce:dd:84:2c:0b:66:92:66:ad:5a:63:14:17:1a:54:2d:
         81:99:e9:ad:b1:42:9b:ba:4d:42:0a:e1:af:58:aa:e8:bb:62:
         d4:0f:c1:bd
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUUkTYz2O9ASPjqF33B88eAriYHiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY2RUEyRDMyNDI1OURGMjdERjg3MzBFN0U3NTBDQTRD
QTQ0OTQyMTAeFw0yNjAzMTcyMTI5MjNaFw0yNzAzMTYyMTM0MjNaMDMxMTAvBgNV
BAMTKDkyNjRDNjU3MUIwQUUxNEJCQzI5MUFFNUVFNjdGN0NDMkU5MEUzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKGk8rFxLcygRua5zyG/whYG5
0KNoD6JTV+HhEUXMr6OT99Cpnjf/zw+DnBbYfBmz3dL/ACd6wGhCMfySiF8uTCqo
gxkvzkdZDiCp2zH4JHeY0Qovfmb9zKBBP8fwCgnM6xg55ua5KUX4/i2L2sDgrnfI
pdUBmpxWdUGZS90O67hihwl7MQzwBw2jXjtQ3VVHyT9yUZVF+nhbUF0sW8YTOUjx
ovlnapNR5fDjdfH5NTSSUlHo+d/cPuXZKDvT3ATHP8qZDFEAJjdTXn0UOxnF9J9U
KaUbWZRLsfRyzDRNkE/nY2FDkaPgK68stxAM46VrCm12hi8j9xYRVGY+NMEjAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUkmTGVxsK4Uu8KRrl7mf3zC6Q4xowHwYDVR0j
BBgwFoAUn26i0yQlnfJ9+HMOfnUMpMpElCEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQUM0RUYxQzgyNTRFNzE4NUEwRUUwREI5RDQ2RUJGRERD
MTA0QUZEMEQ4QjMzMEQ3OUE1OTJDN0QzNjE4QkE3LzAvOUY2RUEyRDMyNDI1OURG
MjdERjg3MzBFN0U3NTBDQTRDQTQ0OTQyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjZFQTJEMzI0MjU5REYyN0RG
ODczMEU3RTc1MENBNENBNDQ5NDIxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEFDNEVGMUM4MjU0RTcxODVBMEVFMERCOUQ0NkVCRkREQzEwNEFGRDBE
OEIzMzBENzlBNTkyQzdEMzYxOEJBNy8wLzMyMzgzMDMwM2EzODY2MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjMyMzgzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAI8DANBgkq
hkiG9w0BAQsFAAOCAQEAJ3LVcr5LdkLT9ajefhvxr0xIvgBC/RfrUyGX0x7+RM9w
W8/4TPMsErOYV3hhwrdWwOigNATLlWXlCSI9HBwxitvHVfTQ11rsPNd0AK01sSWo
cbFglNMgMQJ13Qhz/vU5Q1d5Q1079wHXo1L2Pfo/gEJdB+hGgYNNPn07MAE4skfI
8kqXrfy4tYTGayYv4C/0M8zV/1QbYD5MA6ReDOC2yO80h9LmbYeRUe8a3K1qysji
uDlV5ln/r0F0WfCe+90q2C9pwXwEaCrRpzs1SL4Jm6O7OLc/YHHxKhLO3YQsC2aS
Zq1aYxQXGlQtgZnprbFCm7pNQgrhr1iq6Lti1A/BvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:24 2026 by rpki-client