Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa
File:                     323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa (raw, json)
Hash identifier:          h89f9DkI0urMUqv5q80LOJ4ZMj67KHbKO9NWUtL19aQ=
Subject key identifier:   32:15:22:D4:FD:85:8F:50:FF:76:EF:66:BF:DA:F2:9F:71:C9:C4:CC
Certificate issuer:       /CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
Certificate serial:       5530FF158550FBFEC4DF0EBFA9C3A62F595ABDEF
Authority key identifier: 90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa
Signing time:             Thu 23 Apr 2026 19:39:49 +0000
ROA not before:           Thu 23 Apr 2026 19:34:49 +0000
ROA not after:            Thu 22 Apr 2027 19:39:49 +0000
asID:                     265721
IP address blocks:        2803:2f10:8f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:30:ff:15:85:50:fb:fe:c4:df:0e:bf:a9:c3:a6:2f:59:5a:bd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
        Validity
            Not Before: Apr 23 19:34:49 2026 GMT
            Not After : Apr 22 19:39:49 2027 GMT
        Subject: CN=321522D4FD858F50FF76EF66BFDAF29F71C9C4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:6e:01:0f:72:cf:c5:69:eb:17:b4:38:e2:
                    93:e1:e8:4a:e3:24:4d:42:e6:30:4a:5d:57:63:95:
                    b2:ad:b7:9d:78:b2:f7:fc:32:3e:26:02:fa:c8:a1:
                    0e:db:29:2b:9f:e0:f8:be:65:9b:30:a1:f0:c5:5e:
                    c3:94:e0:5e:fb:90:2c:c4:2b:bb:da:1a:30:14:6c:
                    f5:4d:7e:14:9a:e5:fd:ee:d8:3f:47:03:0a:d5:59:
                    a4:f5:2a:9e:63:58:7b:fb:fd:3f:7c:87:0b:ac:34:
                    12:31:9b:f7:45:3b:62:ea:47:b0:1b:16:4c:35:c3:
                    15:9e:8a:01:0d:f3:74:99:d7:74:6d:fc:ae:10:de:
                    a2:bf:ed:f8:6c:d6:4c:2e:89:e7:6c:6c:bc:bb:ab:
                    44:0a:9d:67:3e:88:ca:c9:b7:a9:61:6c:36:3b:b0:
                    e0:0c:6e:3e:93:9a:eb:eb:80:c7:8a:74:29:5e:9a:
                    3f:fa:3f:c2:7a:d3:01:b6:97:b4:c7:af:f4:c4:a5:
                    a4:ed:0b:06:10:e0:a2:9d:78:2d:6d:75:22:32:86:
                    62:78:1f:f0:52:16:4f:bd:9d:db:fb:85:09:de:3e:
                    aa:65:3c:cb:38:d6:9c:aa:2c:a6:29:52:a6:99:16:
                    b8:47:19:f9:be:e1:3d:b4:72:f5:5c:5a:ea:47:d4:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:22:D4:FD:85:8F:50:FF:76:EF:66:BF:DA:F2:9F:71:C9:C4:CC
            X509v3 Authority Key Identifier:
                keyid:90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a386630303a3a2f34302d3438203d3e20323635373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f10:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:32:a4:d0:91:3d:22:88:62:a2:a8:02:78:30:bb:4c:05:
         fe:a3:80:b5:0c:7b:e3:9d:80:7f:df:d0:00:00:24:f4:c9:ca:
         7e:ee:d9:67:82:ac:62:fe:8a:9b:84:c2:1f:1c:a8:eb:6e:40:
         c1:2f:ab:fa:45:4d:13:e8:3c:bb:ad:85:28:c7:b3:4b:ff:13:
         a2:6c:5e:ac:c3:55:e0:1f:8f:ec:3f:74:08:3b:f8:da:98:cb:
         02:d4:e0:70:64:20:45:ec:1c:8e:9c:93:ec:d5:d0:fe:b1:c3:
         04:bb:9d:2d:e8:f8:b0:ad:8c:7c:e2:58:34:28:bb:08:e4:cb:
         8b:c6:a5:c4:e0:bb:a1:77:6f:a0:ae:0a:00:14:f2:0f:5d:e1:
         7a:ba:fb:ff:ee:6e:29:30:aa:1d:bd:f5:c8:0b:a8:82:94:26:
         85:92:f0:8e:6c:22:4e:66:99:18:a3:08:aa:33:ba:43:00:86:
         ef:c6:9b:b8:d2:af:b9:3b:5b:71:de:72:60:41:54:df:f8:4d:
         3b:8d:2d:52:7c:14:24:2a:05:d3:13:9e:82:f7:8f:3f:74:6e:
         73:63:64:f1:a3:98:19:fd:99:ca:93:c8:81:84:72:da:ff:c1:
         5a:de:04:a1:4a:ce:67:73:55:b7:d8:ca:6a:0f:aa:50:17:7a:
         cf:5f:92:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:19:57 2026 by rpki-client