Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40E6EE196D99EBE8A8314AF4F874A9B83BE8B209CF9BB321F2232F298A593F0B/0/323830333a626533303a3a2f33322d3438203d3e20323734393133.roa
File:                     323830333a626533303a3a2f33322d3438203d3e20323734393133.roa (raw, json)
Hash identifier:          vZpzMaizZbmh4HhK3oefiDyeh/uYahHiVNGlpQDzSWA=
Subject key identifier:   44:D9:E8:DF:CD:B5:65:DF:02:AE:90:DA:90:BD:65:CB:9B:EC:1C:8F
Certificate issuer:       /CN=B377B421B8058821D93CD28CAB4D7FC5D901BF9D
Certificate serial:       3DBC5EABF61FB88EDA33181099290BCE8B9EEED9
Authority key identifier: B3:77:B4:21:B8:05:88:21:D9:3C:D2:8C:AB:4D:7F:C5:D9:01:BF:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B377B421B8058821D93CD28CAB4D7FC5D901BF9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40E6EE196D99EBE8A8314AF4F874A9B83BE8B209CF9BB321F2232F298A593F0B/0/323830333a626533303a3a2f33322d3438203d3e20323734393133.roa
Signing time:             Tue 14 Jul 2026 17:20:00 +0000
ROA not before:           Tue 14 Jul 2026 17:15:00 +0000
ROA not after:            Tue 13 Jul 2027 17:20:00 +0000
asID:                     274913
IP address blocks:        2803:be30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40E6EE196D99EBE8A8314AF4F874A9B83BE8B209CF9BB321F2232F298A593F0B/0/B377B421B8058821D93CD28CAB4D7FC5D901BF9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40E6EE196D99EBE8A8314AF4F874A9B83BE8B209CF9BB321F2232F298A593F0B/0/B377B421B8058821D93CD28CAB4D7FC5D901BF9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B377B421B8058821D93CD28CAB4D7FC5D901BF9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bc:5e:ab:f6:1f:b8:8e:da:33:18:10:99:29:0b:ce:8b:9e:ee:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B377B421B8058821D93CD28CAB4D7FC5D901BF9D
        Validity
            Not Before: Jul 14 17:15:00 2026 GMT
            Not After : Jul 13 17:20:00 2027 GMT
        Subject: CN=44D9E8DFCDB565DF02AE90DA90BD65CB9BEC1C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:59:42:7d:3d:bd:65:af:8b:1a:d5:83:ea:
                    c4:0b:42:5c:82:04:50:6a:fa:70:56:a3:93:27:84:
                    dc:2c:34:be:b7:88:f0:07:cc:16:ec:ca:4e:da:ea:
                    85:f7:de:06:8c:61:14:47:0e:bc:03:ca:92:61:6a:
                    a8:36:36:b2:e4:ce:76:6c:ae:a6:31:79:6c:df:bc:
                    25:cd:d3:97:69:03:58:dd:56:5a:6d:58:b9:c6:21:
                    ec:40:0c:19:61:6f:27:19:b6:b6:45:39:b7:af:60:
                    c2:66:c9:9f:d8:a9:b9:8f:99:d2:ee:c2:84:11:1f:
                    d7:33:2d:d3:d7:82:f0:6f:e4:e0:cd:53:28:41:8c:
                    eb:ee:c0:4d:c0:66:58:0c:4c:4e:d4:74:1b:b8:89:
                    21:ff:a7:53:0c:d4:ca:1a:c6:7f:4b:2e:61:8b:8f:
                    44:e5:8e:8a:b0:56:6b:b9:c0:eb:0f:5e:b1:6d:30:
                    60:d3:b2:12:09:4b:b6:8c:e4:33:dd:5e:b8:e6:f5:
                    98:e8:f1:5c:c5:23:61:ca:58:e0:f2:2c:87:fc:c0:
                    59:4b:ab:94:f5:35:ca:fd:98:35:c8:58:14:7b:10:
                    01:f8:97:5f:16:34:4b:25:c8:49:96:f7:84:15:ce:
                    1b:82:d9:90:43:c9:db:df:84:fc:3d:23:82:42:e4:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D9:E8:DF:CD:B5:65:DF:02:AE:90:DA:90:BD:65:CB:9B:EC:1C:8F
            X509v3 Authority Key Identifier:
                keyid:B3:77:B4:21:B8:05:88:21:D9:3C:D2:8C:AB:4D:7F:C5:D9:01:BF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40E6EE196D99EBE8A8314AF4F874A9B83BE8B209CF9BB321F2232F298A593F0B/0/B377B421B8058821D93CD28CAB4D7FC5D901BF9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B377B421B8058821D93CD28CAB4D7FC5D901BF9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40E6EE196D99EBE8A8314AF4F874A9B83BE8B209CF9BB321F2232F298A593F0B/0/323830333a626533303a3a2f33322d3438203d3e20323734393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:be30::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:71:ca:a7:31:b3:7f:17:ee:3d:ca:9c:21:1f:e5:c3:82:ab:
         cc:50:c0:f8:17:f1:e1:18:a1:9b:22:70:bf:7b:5d:27:05:25:
         cd:39:49:82:19:f7:23:9f:47:9e:c5:db:f5:6f:b5:9e:c1:4e:
         72:07:93:a0:ff:53:40:2a:34:ad:ab:77:e4:e8:2b:53:a9:ed:
         e6:b2:92:af:81:77:42:7f:3d:6a:ef:2e:e9:79:fc:45:6c:16:
         dd:0c:72:49:ad:9e:c3:a4:92:a5:e1:28:78:7a:a3:3f:c3:82:
         7f:d4:a5:6d:61:61:94:b1:c7:81:4f:fc:cf:cb:85:31:e9:5c:
         da:4f:27:8e:43:ba:9e:e9:4c:f6:6b:85:c2:ac:8c:db:26:22:
         18:7c:ef:3f:dc:9f:53:d9:5d:21:59:23:f5:93:d8:26:f0:ff:
         06:33:c4:15:06:f5:64:c8:06:4a:c4:4e:a4:e3:9a:e4:cf:53:
         d9:c9:44:8d:ce:a2:77:48:5d:d4:69:68:cc:84:df:7d:a9:35:
         39:a7:47:ee:f2:ab:12:63:02:4b:c7:92:58:56:70:04:31:92:
         b5:f9:33:fc:b9:75:64:31:93:3b:1b:06:82:5b:4b:36:5a:1a:
         d4:b0:02:2a:89:85:92:33:95:c1:3e:77:30:2b:96:d7:d2:27:
         e0:18:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:58 2026 by rpki-client