Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3338303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3338303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          y3QgHk4nBJ96qnm1/8Q7xks3T5eEzQ/+Iqy1r9lNDDc=
Subject key identifier:   77:AE:7A:3E:47:09:FE:B3:2B:C2:69:6C:20:CC:AA:4C:81:6F:53:C7
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       19D13E70884910626961C2E84418B63CCBC0C30E
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3338303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:41 +0000
ROA not before:           Fri 03 Jul 2026 01:45:41 +0000
ROA not after:            Fri 02 Jul 2027 01:50:41 +0000
asID:                     273832
IP address blocks:        2803:8950:380::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d1:3e:70:88:49:10:62:69:61:c2:e8:44:18:b6:3c:cb:c0:c3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:41 2026 GMT
            Not After : Jul  2 01:50:41 2027 GMT
        Subject: CN=77AE7A3E4709FEB32BC2696C20CCAA4C816F53C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:10:e6:a3:17:61:db:72:c2:2d:fd:d8:bd:
                    3b:8b:72:f4:9d:24:e5:2f:c0:3b:6f:8e:f7:04:3a:
                    a4:8c:b1:9e:bd:4e:80:28:07:32:fd:b5:0b:58:c5:
                    cb:b1:b1:9c:b8:e5:44:70:e2:2f:c3:48:04:37:df:
                    27:3e:37:d1:41:82:90:57:90:29:14:5a:9c:eb:fa:
                    14:fb:ca:13:fa:6e:0f:2b:60:8b:65:45:8a:c4:99:
                    83:4b:7a:4d:a4:c9:88:0c:fe:76:f8:1a:80:15:5b:
                    6e:8e:71:14:03:44:54:71:64:ca:a3:fb:32:bb:cf:
                    27:1f:72:23:cf:1d:74:3e:e8:ec:4f:54:cf:84:3d:
                    30:12:ac:bc:8a:00:ed:ef:54:59:56:3d:25:88:c4:
                    6b:35:0a:c5:70:bf:81:6c:40:f9:87:94:f5:c4:01:
                    70:63:f5:19:e6:d2:45:c5:5e:0d:db:cd:7d:cf:c2:
                    9b:f0:a4:3f:90:1c:20:a4:2a:f0:5c:40:a4:43:ea:
                    87:56:47:f1:7c:e9:6b:b1:8a:8e:4b:ab:99:ce:c8:
                    c4:58:4d:d8:fb:61:e6:15:7d:f4:cc:94:2a:87:a6:
                    84:0e:b0:a6:d3:3a:06:89:59:2e:4a:f8:a7:bc:9e:
                    12:1b:dd:d9:89:93:34:21:27:a2:f2:ec:70:3b:8b:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:7A:3E:47:09:FE:B3:2B:C2:69:6C:20:CC:AA:4C:81:6F:53:C7
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3338303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:380::/42

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:12:8c:0b:47:ff:29:4b:71:22:8e:0e:d4:31:fc:54:23:
         f0:6a:1a:af:75:fc:10:f4:85:80:2e:cd:3b:0a:8f:fc:1c:4f:
         70:5a:92:02:8d:5f:4b:88:2c:6f:ec:3d:a8:77:c1:41:94:52:
         d8:53:bc:bf:85:7f:b1:e6:fa:c3:3c:2a:be:99:d2:61:8b:31:
         03:7f:c1:ba:9e:a8:bb:63:08:c5:45:f9:26:0c:14:fe:4a:52:
         75:3e:fa:b8:46:17:bd:a3:65:00:61:e3:44:7b:ef:4a:93:13:
         80:6e:95:08:82:b4:51:c2:24:f1:58:28:f7:a2:9f:66:e5:54:
         10:97:d3:d8:b4:48:7d:0e:6f:0f:2b:ad:2c:77:d4:9f:1d:32:
         7a:e0:64:7b:9b:91:d8:9b:f4:52:fe:27:64:03:5d:46:d2:60:
         26:fe:46:17:e7:ab:45:c2:3b:9c:e5:95:d1:a4:07:d2:e8:b3:
         70:24:52:63:cf:e0:8d:ef:06:46:f9:c5:9c:84:c3:e3:24:3d:
         c5:95:5d:7f:e3:0c:03:87:42:20:2f:9d:14:50:68:44:e7:44:
         d1:36:98:78:9c:9d:b0:17:e7:18:9d:30:4c:c9:64:40:51:74:
         65:06:59:09:55:d6:6d:e3:cf:a4:3a:df:5b:c3:69:49:d4:b6:
         ca:3d:fa:a5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGdE+cIhJEGJpYcLoRBi2PMvAww4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkxOTgwMTcyOTdFMjY2Mjk1N0I2RjI3NjE2RkY3QTQ0
QTgxMjk4QTAeFw0yNjA3MDMwMTQ1NDFaFw0yNzA3MDIwMTUwNDFaMDMxMTAvBgNV
BAMTKDc3QUU3QTNFNDcwOUZFQjMyQkMyNjk2QzIwQ0NBQTRDODE2RjUzQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOhDmoxdh23LCLf3YvTuLcvSd
JOUvwDtvjvcEOqSMsZ69ToAoBzL9tQtYxcuxsZy45URw4i/DSAQ33yc+N9FBgpBX
kCkUWpzr+hT7yhP6bg8rYItlRYrEmYNLek2kyYgM/nb4GoAVW26OcRQDRFRxZMqj
+zK7zycfciPPHXQ+6OxPVM+EPTASrLyKAO3vVFlWPSWIxGs1CsVwv4FsQPmHlPXE
AXBj9Rnm0kXFXg3bzX3PwpvwpD+QHCCkKvBcQKRD6odWR/F86Wuxio5Lq5nOyMRY
Tdj7YeYVffTMlCqHpoQOsKbTOgaJWS5K+Ke8nhIb3dmJkzQhJ6Ly7HA7iwJdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUd656PkcJ/rMrwmlsIMyqTIFvU8cwHwYDVR0j
BBgwFoAU6RmAFyl+JmKVe28nYW/3pEqBKYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjJBNDFGOEUyOUIzNzVFNDVFOTBFMDFBQjI3QTc0QTY1
NTdCRTcwQjgxRkZEQjVGNTYzQTlFQ0MzNTVFMEIxLzAvRTkxOTgwMTcyOTdFMjY2
Mjk1N0I2RjI3NjE2RkY3QTQ0QTgxMjk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTE5ODAxNzI5N0UyNjYyOTU3
QjZGMjc2MTZGRjdBNDRBODEyOThBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUIyQTQxRjhFMjlCMzc1RTQ1RTkwRTAxQUIyN0E3NEE2NTU3QkU3MEI4
MUZGREI1RjU2M0E5RUNDMzU1RTBCMS8wLzMyMzgzMDMzM2EzODM5MzUzMDNhMzMz
ODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzgzMzMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAOJUAOAMA0GCSqGSIb3DQEBCwUAA4IBAQBvLxKMC0f/KUtxIo4O1DH8VCPw
ahqvdfwQ9IWALs07Co/8HE9wWpICjV9LiCxv7D2od8FBlFLYU7y/hX+x5vrDPCq+
mdJhizEDf8G6nqi7YwjFRfkmDBT+SlJ1Pvq4Rhe9o2UAYeNEe+9KkxOAbpUIgrRR
wiTxWCj3op9m5VQQl9PYtEh9Dm8PK60sd9SfHTJ64GR7m5HYm/RS/idkA11G0mAm
/kYX56tFwjuc5ZXRpAfS6LNwJFJjz+CN7wZG+cWchMPjJD3FlV1/4wwDh0IgL50U
UGhE50TRNph4nJ2wF+cYnTBMyWRAUXRlBlkJVdZt48+kOt9bw2lJ1LbKPfql
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:17:15 2026 by rpki-client