Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/323830333a363864303a3a2f33322d3332203d3e20323733393838.roa
File:                     323830333a363864303a3a2f33322d3332203d3e20323733393838.roa (raw, json)
Hash identifier:          s+9APTGg2HvX4clBZ3qVfVJ22C5myqwArY8npHruhs0=
Subject key identifier:   12:EB:F6:E8:A6:26:1A:01:F1:5D:9B:88:14:F1:39:1E:BD:E1:5D:26
Certificate issuer:       /CN=F8E0714A6741D7B50C762705420EEF87759C9B4E
Certificate serial:       1551047AF5CFA964F835BEF21EFACF9DD3A0742B
Authority key identifier: F8:E0:71:4A:67:41:D7:B5:0C:76:27:05:42:0E:EF:87:75:9C:9B:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/323830333a363864303a3a2f33322d3332203d3e20323733393838.roa
Signing time:             Mon 23 Mar 2026 03:35:39 +0000
ROA not before:           Mon 23 Mar 2026 03:30:39 +0000
ROA not after:            Mon 22 Mar 2027 03:35:39 +0000
asID:                     273988
IP address blocks:        2803:68d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 05:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:04:7a:f5:cf:a9:64:f8:35:be:f2:1e:fa:cf:9d:d3:a0:74:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E0714A6741D7B50C762705420EEF87759C9B4E
        Validity
            Not Before: Mar 23 03:30:39 2026 GMT
            Not After : Mar 22 03:35:39 2027 GMT
        Subject: CN=12EBF6E8A6261A01F15D9B8814F1391EBDE15D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:d2:41:1b:79:4c:b0:de:29:b5:bd:43:5d:
                    c0:4c:4c:b3:3d:e7:b8:c4:b6:05:33:b5:b9:f9:7a:
                    64:aa:45:30:06:40:b1:62:0f:08:af:51:b6:dc:9f:
                    05:c2:f6:c9:23:9a:b1:b3:b3:04:ad:f5:2e:fc:1e:
                    81:31:2f:be:e5:d4:0c:de:13:63:82:53:42:bc:25:
                    26:b2:98:62:46:fc:2d:07:47:f9:ed:c6:48:d8:5b:
                    8a:fa:fd:77:68:7d:c9:9d:a3:f9:74:16:e3:17:af:
                    70:0d:5e:d9:dd:84:14:0c:12:4c:5d:1a:92:e9:1e:
                    3c:46:3f:9e:3d:9b:6f:e8:d1:57:aa:c9:a6:8f:3f:
                    8d:ec:4f:de:fb:d8:c3:48:9d:ce:ef:bf:30:19:9e:
                    9c:09:02:9a:8c:d8:74:7e:1c:c9:b7:ad:d0:04:a4:
                    69:65:c8:dc:d9:30:c2:8d:58:c0:11:c5:17:ad:a0:
                    82:cc:2e:37:1b:33:48:6a:4f:58:fb:ec:b1:87:68:
                    79:f2:7a:51:b3:d8:c8:db:a9:5a:11:ec:20:bd:d7:
                    3d:b4:46:3b:86:56:30:8d:be:6c:d5:d3:dd:b2:7f:
                    8b:0c:df:c5:19:d0:58:6e:fc:bc:48:6e:6e:ed:06:
                    eb:43:54:fc:ea:e9:01:94:f6:1d:e5:9e:76:e1:1a:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:F6:E8:A6:26:1A:01:F1:5D:9B:88:14:F1:39:1E:BD:E1:5D:26
            X509v3 Authority Key Identifier:
                keyid:F8:E0:71:4A:67:41:D7:B5:0C:76:27:05:42:0E:EF:87:75:9C:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8E0714A6741D7B50C762705420EEF87759C9B4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8776E8B1A5813C081A863AE02599752D6CDCC9171622E11BC186B2BCA8F6BE13/0/323830333a363864303a3a2f33322d3332203d3e20323733393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:68d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:42:a6:9a:51:25:63:9b:f3:0e:da:6a:42:ec:e6:e7:09:38:
         a4:c8:35:9d:82:4a:dc:37:61:38:1b:7a:a7:ea:2a:08:4a:74:
         a1:81:83:4f:71:5e:26:8a:2b:d0:83:cb:c2:9c:4a:67:29:44:
         84:c1:2f:bf:05:ab:76:1a:28:fe:e8:0d:bf:37:77:e2:11:ad:
         59:3b:75:e4:f3:78:46:3b:28:2f:e6:f6:1d:36:34:23:36:ed:
         c2:ac:f9:38:2a:1c:1f:ac:fd:0a:73:6e:b3:a1:a6:63:8f:8e:
         de:82:00:22:85:94:94:fb:78:3c:67:39:95:69:ec:56:d2:ab:
         4d:c1:91:f2:2c:ae:bb:a1:b9:1b:97:61:7a:28:8c:99:80:4e:
         82:33:a0:04:f8:d2:da:da:aa:8a:b0:4b:94:a6:4b:88:08:b1:
         e4:db:67:a9:16:80:7c:c1:53:bf:c2:2d:44:96:b5:75:1a:0f:
         e9:94:df:8f:00:fc:5a:6e:a9:1b:ac:2c:e3:a5:50:17:cd:b0:
         28:0e:5a:f8:6f:3f:ef:a4:65:89:5a:6c:0f:64:a3:08:02:3c:
         28:25:26:3d:c9:6c:8f:b8:be:65:2c:82:e6:c9:54:6f:fd:fa:
         87:b0:10:a4:cf:a6:10:14:c7:c0:47:74:1e:91:de:18:28:cd:
         91:17:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:02:34 2026 by rpki-client