Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/323830333a363135303a3a2f33322d3430203d3e20323733323434.roa
File:                     323830333a363135303a3a2f33322d3430203d3e20323733323434.roa (raw, json)
Hash identifier:          FurF30b9Wp7IYLzAzPX0uoLWtVz7q1OGodxpUhpjCo8=
Subject key identifier:   9D:B1:FD:6F:F4:9E:E4:94:34:AF:D5:34:E7:80:4E:37:6F:DE:9B:0A
Certificate issuer:       /CN=5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB
Certificate serial:       13C52A4DEA6D3CBFBD2BC7C96D20FECDF61C7021
Authority key identifier: 5F:5C:0D:FD:76:D6:DC:1D:85:0E:E2:15:7B:D0:F4:E5:F6:ED:2E:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/323830333a363135303a3a2f33322d3430203d3e20323733323434.roa
Signing time:             Sat 24 Oct 2026 16:43:13 +0000
ROA not before:           Sat 24 Oct 2026 16:38:13 +0000
ROA not after:            Sat 23 Oct 2027 16:43:13 +0000
asID:                     273244
IP address blocks:        2803:6150::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c5:2a:4d:ea:6d:3c:bf:bd:2b:c7:c9:6d:20:fe:cd:f6:1c:70:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB
        Validity
            Not Before: Oct 24 16:38:13 2026 GMT
            Not After : Oct 23 16:43:13 2027 GMT
        Subject: CN=9DB1FD6FF49EE49434AFD534E7804E376FDE9B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:45:fa:e3:f1:ac:52:9d:89:39:fc:ff:cb:
                    ef:f0:e5:70:b2:57:8d:c4:b8:45:f8:dd:b7:28:4e:
                    67:5b:9a:87:0f:e7:65:ca:89:b0:c9:fa:3d:1f:02:
                    3e:e9:e6:de:8d:77:74:12:6a:00:f6:87:e3:f3:f1:
                    96:7e:3b:92:f4:c1:10:90:04:20:e5:57:63:07:75:
                    60:2b:f7:c3:06:94:92:f1:32:7c:a3:0c:92:df:6d:
                    89:e3:6c:3d:dc:83:e8:2f:19:76:30:3e:aa:76:e6:
                    6f:21:6e:44:2a:6b:a5:64:8e:33:9c:79:9d:c3:e0:
                    d0:6c:fd:40:42:64:b9:78:70:de:7c:d9:82:a2:4b:
                    86:e6:2a:45:e3:ba:94:5d:e6:43:53:2a:ee:cc:6f:
                    f4:d7:9a:aa:92:50:51:3f:31:f2:e9:7c:63:34:ad:
                    10:ca:a2:d5:24:f5:d2:63:f5:5e:dd:c2:8d:43:ed:
                    bc:2c:cc:c8:de:73:eb:47:d4:69:75:c2:43:34:49:
                    72:67:4b:ca:56:37:9e:52:29:fd:54:65:05:6c:0c:
                    f3:2a:37:05:96:5e:4b:0e:db:0b:71:ef:b2:a0:3c:
                    11:05:6f:43:ab:06:e7:bd:1c:7d:85:15:1b:b4:e8:
                    92:2f:55:cc:ef:11:f1:ec:1e:29:ab:d4:2a:e1:60:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B1:FD:6F:F4:9E:E4:94:34:AF:D5:34:E7:80:4E:37:6F:DE:9B:0A
            X509v3 Authority Key Identifier:
                keyid:5F:5C:0D:FD:76:D6:DC:1D:85:0E:E2:15:7B:D0:F4:E5:F6:ED:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/323830333a363135303a3a2f33322d3430203d3e20323733323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6150::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:71:c1:b2:37:02:35:c8:b6:20:68:6d:dc:e4:88:42:b1:b2:
         1a:5c:e7:ba:a1:b4:9b:5d:8b:61:11:39:75:12:48:3e:a1:e5:
         72:49:ee:a9:be:2f:3f:70:a4:70:09:fa:f2:a9:b9:8e:d9:5b:
         b5:1c:14:97:8b:05:87:b0:54:0b:8d:4b:6f:77:b0:94:57:c8:
         43:e1:7f:31:b9:70:b4:57:a8:b8:9d:51:8c:bc:fa:92:64:4e:
         03:41:d4:27:3b:d9:bf:be:82:f5:26:09:22:0c:2c:aa:ec:ca:
         9d:a3:10:d4:78:00:0b:78:63:ac:25:bd:ac:e5:63:8b:9a:16:
         ca:58:d2:84:c5:51:95:36:47:10:26:11:4e:9f:ce:df:b6:12:
         11:96:c2:35:69:42:45:44:ed:d0:4e:48:33:72:88:b5:46:53:
         ee:6a:13:5c:3a:c8:93:30:d9:88:24:3e:c6:9e:92:ed:b9:17:
         2d:0e:db:7c:23:c8:00:0c:e8:0b:b1:cb:60:94:a2:34:5c:a6:
         87:9c:0a:ea:76:c9:86:65:c3:e4:23:ec:34:e6:48:df:b7:41:
         c9:fa:f7:af:35:f6:b4:4f:7b:64:0d:78:15:f8:e3:ae:78:8e:
         66:3e:ab:06:39:fc:cd:38:d9:10:51:0f:12:ae:0f:46:5e:d2:
         c4:57:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:11:12 2026 by rpki-client