Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          y/WWl5O9899K5+NfYow/mk0W6heae7736dWserRpWnI=
Subject key identifier:   09:2C:1A:D8:B8:E0:D2:9D:58:F2:76:26:BB:C3:39:3B:DA:A2:2C:C2
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       6DEF1C89EEAE45F4940958EAC87B548021111C23
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 03 Mar 2026 05:32:33 +0000
ROA not before:           Tue 03 Mar 2026 05:27:33 +0000
ROA not after:            Tue 02 Mar 2027 05:32:33 +0000
asID:                     273192
IP address blocks:        2803:650:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 16:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ef:1c:89:ee:ae:45:f4:94:09:58:ea:c8:7b:54:80:21:11:1c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Mar  3 05:27:33 2026 GMT
            Not After : Mar  2 05:32:33 2027 GMT
        Subject: CN=092C1AD8B8E0D29D58F27626BBC3393BDAA22CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:3e:6c:ef:c3:69:48:02:57:6d:ee:cf:83:
                    62:33:f1:05:65:3e:aa:6e:ba:98:69:7f:cd:ef:02:
                    d3:df:78:cc:af:d7:21:36:cb:c2:90:92:14:83:47:
                    ad:d8:41:81:3a:65:bf:f4:85:f8:39:7c:3c:7d:9a:
                    3a:cd:21:58:1d:ac:19:ea:d4:c3:d5:ba:25:bd:0e:
                    e7:02:0a:d8:6f:b0:c5:82:18:53:47:33:38:bc:5e:
                    fe:c5:8a:3c:37:56:4a:ae:22:f6:9d:ba:0a:b2:e1:
                    9f:d2:c0:51:a5:24:db:3e:f1:ca:0e:12:26:55:98:
                    39:1d:a3:55:f2:6c:c3:66:79:3a:06:64:63:45:83:
                    69:8e:d2:19:f6:fd:e9:80:b3:6f:9f:9e:85:5c:9b:
                    c7:18:ea:de:b1:1d:a7:01:86:50:2d:dc:6f:ce:e0:
                    45:77:a7:f3:fa:86:35:39:15:84:e2:73:c9:9c:48:
                    92:94:32:d8:0c:27:d9:6b:1c:80:23:53:75:af:01:
                    8f:37:89:26:1e:d5:f9:6f:97:4e:93:73:af:a1:17:
                    cb:16:9b:6f:ee:cb:6f:f0:24:1f:82:01:c1:f2:9d:
                    0e:76:d8:5f:88:40:6d:1e:e7:fa:c2:e0:0c:6f:02:
                    6b:67:7a:34:0b:ef:9f:d2:00:3e:36:1e:22:ae:c3:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:1A:D8:B8:E0:D2:9D:58:F2:76:26:BB:C3:39:3B:DA:A2:2C:C2
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:3b:00:45:2f:fe:3f:cf:b2:68:62:62:f9:11:01:17:e6:31:
         74:72:5b:a7:09:dc:fa:c3:1e:d6:4e:18:bd:5f:34:0d:48:76:
         8a:bb:43:1a:3a:3d:bc:62:27:f5:6b:b7:70:81:30:5f:f8:f0:
         4e:0c:48:1b:37:fc:83:22:85:a1:67:88:b2:f4:96:b0:7b:7a:
         a8:2d:1e:60:a3:78:a9:eb:af:7a:ae:ae:4c:b5:5f:25:ca:7e:
         01:1e:66:1e:21:04:a7:36:58:23:29:fe:33:17:4b:53:89:53:
         53:83:2c:3d:91:fd:37:6a:b4:ae:de:22:fc:26:2e:da:79:7c:
         8d:cb:96:c0:08:71:79:ac:8d:81:10:15:b1:b7:14:47:80:a5:
         5f:df:af:e8:1f:0e:5f:76:e8:bc:84:29:08:61:22:34:c6:9e:
         96:29:c8:61:a4:75:71:59:f6:1c:6a:ee:08:6e:1b:c6:9d:f9:
         b1:33:10:42:57:03:21:0a:eb:0e:ca:aa:e6:da:45:4a:8b:e3:
         19:de:c3:fd:20:ed:aa:fb:13:c6:df:c1:f0:01:a0:9d:16:ad:
         2b:14:28:e2:6f:1f:37:0f:99:bf:a4:34:eb:61:e9:a2:5c:5f:
         44:7b:55:54:61:be:2e:35:51:89:d7:7a:bc:74:7f:52:0b:2a:
         d7:8f:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:35 2026 by rpki-client