Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/323830333a363764303a3a2f33322d3438203d3e20323734323339.roa
File:                     323830333a363764303a3a2f33322d3438203d3e20323734323339.roa (raw, json)
Hash identifier:          yORuA/JKArUBMU0S9YwHyGULJDPwcrrJ8tWEbDqUOWo=
Subject key identifier:   85:BC:4B:48:7C:32:36:8E:E4:66:C5:08:C9:65:BB:4F:27:50:30:78
Certificate issuer:       /CN=3C090BDF425802CD5FF49ED123D80CC37753F75B
Certificate serial:       622C384E6D6CB15060D555B21D19C30494C9810C
Authority key identifier: 3C:09:0B:DF:42:58:02:CD:5F:F4:9E:D1:23:D8:0C:C3:77:53:F7:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/323830333a363764303a3a2f33322d3438203d3e20323734323339.roa
Signing time:             Wed 07 Oct 2026 16:39:00 +0000
ROA not before:           Wed 07 Oct 2026 16:34:00 +0000
ROA not after:            Wed 06 Oct 2027 16:39:00 +0000
asID:                     274239
IP address blocks:        2803:67d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 21:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2c:38:4e:6d:6c:b1:50:60:d5:55:b2:1d:19:c3:04:94:c9:81:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C090BDF425802CD5FF49ED123D80CC37753F75B
        Validity
            Not Before: Oct  7 16:34:00 2026 GMT
            Not After : Oct  6 16:39:00 2027 GMT
        Subject: CN=85BC4B487C32368EE466C508C965BB4F27503078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:b0:5f:66:71:12:bb:b3:6f:b6:f4:f5:7d:
                    de:16:e4:6d:1f:2a:62:d3:b7:9c:50:69:c2:a6:61:
                    02:1f:33:6a:f1:53:46:88:84:4e:eb:8a:e5:80:f5:
                    99:30:9e:71:c6:9c:8b:22:05:b8:57:0f:b9:47:4a:
                    71:26:8c:10:78:05:60:7c:88:de:db:5a:b3:50:d1:
                    a6:7f:fb:42:c0:57:e8:5d:3a:82:a1:35:0d:77:27:
                    d1:89:1f:7d:98:72:d6:f8:2d:2d:14:5a:ed:61:dd:
                    5b:0e:06:62:14:72:84:d7:4b:56:e1:b8:f6:1f:e9:
                    d9:e1:1a:ec:3b:2c:4a:c1:8c:10:67:aa:60:2a:73:
                    12:5b:36:e7:13:7a:af:87:eb:0c:10:87:91:ab:c8:
                    b9:05:35:f2:47:59:47:35:3f:61:ad:5d:20:18:76:
                    c4:a9:33:45:0a:be:74:d6:9b:8e:9e:bc:76:6a:80:
                    60:e0:f1:a1:2a:06:0f:0e:ec:15:3d:ee:0a:53:9f:
                    86:81:05:cc:9b:0a:81:be:30:cc:32:50:9b:d8:1e:
                    15:25:67:48:12:62:9a:01:34:a7:cd:35:50:6c:16:
                    ec:37:30:68:8c:a4:33:f2:13:98:85:3a:4c:7a:f1:
                    45:d6:fc:3e:19:55:ab:4f:d4:51:14:1e:54:a4:b2:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:4B:48:7C:32:36:8E:E4:66:C5:08:C9:65:BB:4F:27:50:30:78
            X509v3 Authority Key Identifier:
                keyid:3C:09:0B:DF:42:58:02:CD:5F:F4:9E:D1:23:D8:0C:C3:77:53:F7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C090BDF425802CD5FF49ED123D80CC37753F75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90DB373C7530F4AA92BFF5CC1F173784FC4CBAAC69C1014370EA52FDB7D55BE0/0/323830333a363764303a3a2f33322d3438203d3e20323734323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:67d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:c1:cf:3b:bd:55:1c:c9:51:50:5e:18:c2:b4:51:99:5f:be:
         0b:c6:a9:88:ad:5b:51:c4:b8:a5:0d:eb:87:d5:1d:57:7a:31:
         4f:75:09:e1:65:58:c9:71:ea:af:52:71:d1:3c:2c:fa:0a:c8:
         76:f8:a0:91:d9:15:6f:c4:ad:51:2a:db:41:48:cf:6b:63:75:
         6a:57:91:4e:85:b9:1c:f3:98:f2:71:ac:b6:b3:a9:64:7e:da:
         61:07:db:46:ee:79:15:6f:88:5a:ed:be:e1:87:55:f1:84:38:
         c7:7d:77:8d:90:67:41:1f:ab:7c:3e:00:05:ba:04:72:62:25:
         2c:db:c2:78:86:cf:2a:4b:e6:dd:49:64:e8:01:19:2a:66:0d:
         e2:9f:88:a1:c3:a2:b5:22:92:3c:8d:19:21:81:47:1f:ff:25:
         5c:a2:e7:9e:74:96:f8:4d:c3:32:cd:1b:9f:63:12:f1:25:46:
         36:3c:c7:11:6e:8a:56:5e:2b:f4:37:13:bb:5a:12:bc:91:df:
         d1:cf:e5:c5:2f:23:bc:86:be:9f:97:35:73:ce:e6:6b:73:af:
         f6:e4:55:5c:ce:c9:61:d9:37:ed:fc:84:18:27:f0:58:cb:0d:
         74:d4:11:0e:d4:0c:a8:39:f3:a3:30:d0:81:d8:e6:d6:22:47:
         bd:92:9a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:11:32 2026 by rpki-client