Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939613a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a393939613a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          QPrjBa7r4HZZ3RRrO7R8vU84SZxyb6LkBkuT7LCqJWU=
Subject key identifier:   3D:63:B6:79:78:FE:ED:2B:E4:7D:83:45:F1:73:8F:7D:EB:FF:F7:66
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       15D7C0D0000484E864E4DC34222B66424F87BC43
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939613a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 05 May 2026 20:41:21 +0000
ROA not before:           Tue 05 May 2026 20:36:21 +0000
ROA not after:            Tue 04 May 2027 20:41:21 +0000
asID:                     272979
IP address blocks:        2803:b0e0:999a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 21:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d7:c0:d0:00:04:84:e8:64:e4:dc:34:22:2b:66:42:4f:87:bc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May  5 20:36:21 2026 GMT
            Not After : May  4 20:41:21 2027 GMT
        Subject: CN=3D63B67978FEED2BE47D8345F1738F7DEBFFF766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:e6:41:69:71:93:f7:f2:d9:3a:07:53:e4:
                    1c:ae:7b:71:c5:0e:b9:b3:e6:c2:3a:14:34:64:5b:
                    34:96:aa:e9:0a:b5:a9:21:79:40:1e:0f:0b:b3:a9:
                    6a:64:a0:b0:3f:e8:55:50:89:e1:e6:48:f3:95:ef:
                    da:05:f6:5e:54:e8:09:4f:7a:ec:db:0b:33:8b:9a:
                    8d:c6:ba:f8:f7:54:e4:98:f3:c4:81:e8:2a:b3:29:
                    f6:1a:18:c2:d4:b1:23:30:9a:8f:8d:85:4d:43:aa:
                    4e:60:f7:9f:f9:b2:5c:6c:f0:08:de:ec:d8:6f:bb:
                    aa:74:09:e8:3f:8e:94:79:cf:49:fe:29:a9:28:4e:
                    db:8d:86:c3:2e:c6:67:de:d2:a9:45:89:b8:3a:c8:
                    05:92:52:7d:d9:2e:76:33:72:75:71:a5:e5:df:83:
                    1d:66:d1:ce:c7:69:34:73:7f:56:a0:16:c7:54:76:
                    77:22:ef:10:7a:61:79:b8:b1:e5:84:20:d6:eb:c7:
                    a0:03:4b:fe:08:2e:0f:0c:fd:92:1a:fb:eb:d9:ec:
                    15:58:43:2f:06:49:00:09:24:89:38:14:aa:5c:43:
                    9f:20:cb:5a:ea:e3:e4:c9:25:66:bc:9c:da:64:5b:
                    28:07:af:a5:aa:14:32:21:3b:f9:8a:aa:c1:3d:3d:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:B6:79:78:FE:ED:2B:E4:7D:83:45:F1:73:8F:7D:EB:FF:F7:66
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939613a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:999a::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:be:96:5d:78:26:a7:21:c7:8d:13:a0:60:21:88:63:4e:7c:
         ac:9d:b7:12:09:8c:30:4e:ed:8a:76:0a:4e:33:8a:7c:ca:c8:
         ee:e7:68:66:a3:fe:92:4b:fc:19:cc:8c:ed:ab:9d:cf:2d:58:
         ac:85:29:78:03:3f:3b:24:fa:b6:a9:be:5d:3c:4c:fe:99:1c:
         30:45:59:7c:25:c6:76:66:af:94:08:91:bd:a9:79:a7:df:14:
         ee:ad:e1:5a:f2:0a:87:6b:78:12:fb:59:f1:60:3a:d6:18:9d:
         6c:6f:78:4a:3c:cc:66:6b:c8:62:b2:42:18:90:b8:d2:ae:32:
         b0:b7:fd:12:3b:0d:d6:fd:54:7e:03:6f:5d:26:c1:08:5a:41:
         cb:7f:70:72:9d:36:34:cb:42:6b:0b:1b:69:e6:08:16:ab:ad:
         1a:e9:6e:a0:21:70:8d:59:a7:0b:89:4d:f5:73:21:e9:99:13:
         ea:fd:80:36:f2:2b:b8:da:7e:3a:70:83:ec:1c:0a:43:d7:1a:
         dc:c2:26:eb:e7:80:28:cb:f3:1e:cc:d2:58:2b:6b:93:7a:c2:
         a3:53:ee:be:6f:f7:1b:d2:ba:4b:1d:6e:f6:72:21:16:d0:c7:
         27:77:3e:cc:4b:dd:58:ce:9a:f3:f5:b1:44:ed:28:b6:df:44:
         4f:e8:fa:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 16:41:32 2026 by rpki-client