Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/323830333a333964303a3a2f33322d3438203d3e20323734313630.roa
File:                     323830333a333964303a3a2f33322d3438203d3e20323734313630.roa (raw, json)
Hash identifier:          CQ0p19cVrA43vifVdMpQdOA3v/RKPM2x4XJdIwgef6A=
Subject key identifier:   06:29:D1:15:9C:37:C5:5C:8B:E8:50:76:F6:EE:F6:19:D7:CC:A1:CE
Certificate issuer:       /CN=0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D
Certificate serial:       71616BB238B3E30A557D7BB11308C7442C6E1DB1
Authority key identifier: 0F:D9:06:0A:0C:DF:11:D8:26:3A:9F:5F:E4:A7:3B:31:58:EB:51:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/323830333a333964303a3a2f33322d3438203d3e20323734313630.roa
Signing time:             Tue 06 Oct 2026 18:38:54 +0000
ROA not before:           Tue 06 Oct 2026 18:33:54 +0000
ROA not after:            Tue 05 Oct 2027 18:38:54 +0000
asID:                     274160
IP address blocks:        2803:39d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:6b:b2:38:b3:e3:0a:55:7d:7b:b1:13:08:c7:44:2c:6e:1d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D
        Validity
            Not Before: Oct  6 18:33:54 2026 GMT
            Not After : Oct  5 18:38:54 2027 GMT
        Subject: CN=0629D1159C37C55C8BE85076F6EEF619D7CCA1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:f8:3a:d4:05:39:e9:86:a5:41:7c:f1:a5:
                    05:bb:17:5c:a3:73:3a:14:0a:ec:b6:e4:ff:e7:b4:
                    bc:7f:96:a8:82:da:69:39:33:38:f7:16:c6:e6:9d:
                    d9:0e:4f:4a:1b:b4:1a:77:e3:e5:14:09:b6:1b:98:
                    8e:70:87:92:0c:d3:bb:4a:19:0b:1f:fb:3b:a9:3f:
                    e8:e6:1e:ea:27:a3:0a:6c:93:86:34:a0:ca:b0:a6:
                    dc:f1:60:e4:33:d1:7e:df:30:10:dd:1e:04:ec:4d:
                    32:e8:e8:a6:3f:cb:ef:73:72:df:1a:47:a7:05:61:
                    9d:2f:4d:d2:ff:d6:7e:51:7d:61:8e:45:36:a2:49:
                    27:86:f8:10:0a:bc:c3:6f:ca:79:f5:e4:c9:90:7f:
                    07:cc:fd:54:89:38:70:62:a6:20:ef:5d:a2:e6:5c:
                    a8:01:40:82:7b:44:45:d0:00:a1:68:0b:33:e2:58:
                    fc:00:2a:c9:6a:3b:ec:55:1f:6e:d6:fb:a8:fb:f4:
                    13:b7:27:8d:0a:d7:81:71:12:84:7b:19:85:f4:4f:
                    0a:ff:94:c6:d0:a3:22:e3:aa:b8:8d:c5:91:93:91:
                    cf:d7:14:f5:37:88:0e:dc:ed:99:ec:a1:13:fc:f8:
                    a2:a3:ea:9c:1d:da:1a:38:03:82:29:ba:34:c8:e1:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:29:D1:15:9C:37:C5:5C:8B:E8:50:76:F6:EE:F6:19:D7:CC:A1:CE
            X509v3 Authority Key Identifier:
                keyid:0F:D9:06:0A:0C:DF:11:D8:26:3A:9F:5F:E4:A7:3B:31:58:EB:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/323830333a333964303a3a2f33322d3438203d3e20323734313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:39d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:18:50:05:f7:49:8a:ab:3b:e9:4e:2b:c3:02:36:7e:d2:
         3d:cb:c5:12:a4:fa:8e:b0:5d:41:73:f4:e1:44:39:80:81:9b:
         a7:e8:28:0b:f9:a1:da:58:80:b2:73:bc:b3:ff:80:ce:b9:82:
         fd:9f:a3:18:dc:e0:94:a8:b9:2a:8f:28:09:46:b8:bf:98:fa:
         ec:f8:43:f7:9c:f9:a3:94:00:bb:ca:c3:ab:7c:6b:41:b9:79:
         97:7e:9a:cd:d3:8f:a0:b5:70:d7:4a:00:b6:bf:45:a7:8f:32:
         78:34:b8:3b:91:82:54:96:7b:95:34:f0:e6:db:41:cb:06:92:
         77:4b:af:31:0f:5b:fe:64:f2:00:c2:2b:1b:d8:98:69:00:25:
         ce:cc:6e:3e:99:46:ad:bb:a6:06:23:68:59:98:99:b7:b9:71:
         fd:cc:fe:ee:49:ec:e8:79:bd:16:c8:54:1f:5e:d4:66:63:81:
         48:3f:06:96:c6:c0:1d:3f:47:7d:8f:df:a2:3b:2c:bf:96:3c:
         20:15:7d:3e:14:4a:74:9e:56:da:64:5c:b1:16:3d:bb:1f:f6:
         9c:7d:87:93:75:e1:20:7d:01:8c:01:e1:bb:0d:8d:a5:07:38:
         2a:e1:14:48:47:71:7f:30:74:d4:30:8a:50:06:6d:fe:0f:b6:
         59:a4:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:43:22 2026 by rpki-client