Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8093BF7EC3879A2DAF4B2B3819A1386609F107E978865B28DD354BB0DA482EA8/0/323830333a356464303a3a2f33322d3438203d3e20323733313937.roa
File:                     323830333a356464303a3a2f33322d3438203d3e20323733313937.roa (raw, json)
Hash identifier:          YJKH50B5FN2HKeuXxRg4XmO2bcRu7KUxZb/pll2vN/0=
Subject key identifier:   8D:EC:BF:AC:AB:55:6A:A5:0E:91:3C:24:5B:E2:FC:D6:53:C8:73:A2
Certificate issuer:       /CN=0EB8A959870F39704BDBB62CC656AAACE442060C
Certificate serial:       695EE39A2781442C8C54537285F33467E2FA0FFC
Authority key identifier: 0E:B8:A9:59:87:0F:39:70:4B:DB:B6:2C:C6:56:AA:AC:E4:42:06:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0EB8A959870F39704BDBB62CC656AAACE442060C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8093BF7EC3879A2DAF4B2B3819A1386609F107E978865B28DD354BB0DA482EA8/0/323830333a356464303a3a2f33322d3438203d3e20323733313937.roa
Signing time:             Sun 13 Sep 2026 16:35:42 +0000
ROA not before:           Sun 13 Sep 2026 16:30:42 +0000
ROA not after:            Sun 12 Sep 2027 16:35:42 +0000
asID:                     273197
IP address blocks:        2803:5dd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8093BF7EC3879A2DAF4B2B3819A1386609F107E978865B28DD354BB0DA482EA8/0/0EB8A959870F39704BDBB62CC656AAACE442060C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8093BF7EC3879A2DAF4B2B3819A1386609F107E978865B28DD354BB0DA482EA8/0/0EB8A959870F39704BDBB62CC656AAACE442060C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0EB8A959870F39704BDBB62CC656AAACE442060C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:e3:9a:27:81:44:2c:8c:54:53:72:85:f3:34:67:e2:fa:0f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EB8A959870F39704BDBB62CC656AAACE442060C
        Validity
            Not Before: Sep 13 16:30:42 2026 GMT
            Not After : Sep 12 16:35:42 2027 GMT
        Subject: CN=8DECBFACAB556AA50E913C245BE2FCD653C873A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:3d:ec:c2:18:2e:0b:aa:9e:3c:72:71:09:
                    a6:8d:df:a0:da:3d:e4:dd:f6:0d:db:a9:b5:c5:aa:
                    59:00:4d:0e:6f:e1:95:97:18:fa:d3:bf:00:04:de:
                    83:2b:b1:78:d8:76:72:76:24:5c:96:87:33:21:73:
                    de:88:91:14:cf:21:6d:d0:8b:43:a0:53:b2:ac:ad:
                    6f:ac:c2:4b:42:dd:f3:cc:37:c2:94:8a:00:30:49:
                    43:56:69:f4:b4:ad:f7:89:dc:97:6a:87:7a:53:f0:
                    4d:dd:4b:23:58:f6:43:a8:08:de:f4:ec:a5:1b:6d:
                    19:39:d7:c9:e8:61:d2:58:4e:f2:a9:2a:2a:b1:55:
                    fa:52:7a:7a:50:31:08:42:ce:40:96:d8:23:5a:e7:
                    fe:62:f0:9b:3a:21:22:a1:8f:64:01:b8:fa:46:ad:
                    d6:be:fe:81:03:02:f1:e9:d5:d1:db:ab:48:e8:f7:
                    e8:f2:60:de:1c:31:d2:a3:a6:57:92:b9:92:a4:76:
                    ee:b2:24:bb:a6:d6:8a:b6:68:bd:ed:55:22:37:1c:
                    c1:3b:f3:cc:74:b5:c4:1c:3b:8d:f3:b8:c0:6f:fa:
                    10:18:5b:91:95:42:3a:83:5c:a2:d5:54:48:57:cd:
                    cf:c2:c7:a8:14:7c:c0:6d:56:a7:3d:86:54:f3:1c:
                    21:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EC:BF:AC:AB:55:6A:A5:0E:91:3C:24:5B:E2:FC:D6:53:C8:73:A2
            X509v3 Authority Key Identifier:
                keyid:0E:B8:A9:59:87:0F:39:70:4B:DB:B6:2C:C6:56:AA:AC:E4:42:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8093BF7EC3879A2DAF4B2B3819A1386609F107E978865B28DD354BB0DA482EA8/0/0EB8A959870F39704BDBB62CC656AAACE442060C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0EB8A959870F39704BDBB62CC656AAACE442060C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8093BF7EC3879A2DAF4B2B3819A1386609F107E978865B28DD354BB0DA482EA8/0/323830333a356464303a3a2f33322d3438203d3e20323733313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:67:ac:55:e9:9e:6f:9a:4d:eb:a6:7d:27:c9:d0:16:5b:50:
         78:8b:3d:fd:30:89:8b:0a:37:fc:7a:14:17:1d:24:45:04:a6:
         06:0f:80:d5:b9:06:24:71:a9:ca:f6:23:6b:58:12:c5:c1:69:
         50:91:e3:a4:14:13:3f:c5:39:bf:9d:13:60:fe:9c:65:a1:7e:
         9b:3d:80:37:a5:33:8c:3f:5d:9a:37:ed:86:94:78:19:df:14:
         dc:1f:c4:15:a8:8d:25:65:f8:a1:c7:13:05:9b:9c:6c:af:8e:
         5b:70:9c:e9:fd:d4:50:8e:f9:5c:84:03:e8:c6:59:0d:4e:74:
         d7:2a:f6:2e:69:86:d2:63:b3:9c:3c:15:71:98:1f:bf:c1:4c:
         53:4a:ec:31:01:78:bc:0f:39:e0:f4:20:57:9f:60:f6:be:99:
         dc:8d:53:08:22:e6:5a:45:71:33:bd:f3:9b:f0:71:3b:6f:53:
         89:e8:a1:92:77:f5:28:71:e6:c6:49:a3:3f:93:70:cc:b2:93:
         6a:12:6a:23:cc:57:79:16:8a:63:ce:59:44:48:76:cf:d0:a6:
         5c:1b:c0:5e:2e:6e:3c:d7:80:a1:49:eb:f9:ac:14:c7:11:dc:
         71:9d:15:5a:80:1f:d0:a9:46:e0:6a:d5:3c:6f:ee:29:5e:0e:
         8a:8a:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:05:28 2026 by rpki-client