Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/323830333a3464303a3a2f33322d3634203d3e20323734303034.roa
File:                     323830333a3464303a3a2f33322d3634203d3e20323734303034.roa (raw, json)
Hash identifier:          YyHbF6Vp8bkP27aljKsXlkrszlaa+njdke09PfzaIAc=
Subject key identifier:   D7:64:E0:7D:13:3D:31:EA:FF:A1:B6:9D:54:7E:3B:9F:96:62:3F:3D
Certificate issuer:       /CN=6C3108686EF4694A93B0B8859FE26D608C715F8C
Certificate serial:       5362AEA5986CF3FE5DB69E995581D2CDD7D16474
Authority key identifier: 6C:31:08:68:6E:F4:69:4A:93:B0:B8:85:9F:E2:6D:60:8C:71:5F:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/323830333a3464303a3a2f33322d3634203d3e20323734303034.roa
Signing time:             Wed 13 May 2026 00:42:15 +0000
ROA not before:           Wed 13 May 2026 00:37:15 +0000
ROA not after:            Wed 12 May 2027 00:42:15 +0000
asID:                     274004
IP address blocks:        2803:4d0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:62:ae:a5:98:6c:f3:fe:5d:b6:9e:99:55:81:d2:cd:d7:d1:64:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C3108686EF4694A93B0B8859FE26D608C715F8C
        Validity
            Not Before: May 13 00:37:15 2026 GMT
            Not After : May 12 00:42:15 2027 GMT
        Subject: CN=D764E07D133D31EAFFA1B69D547E3B9F96623F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:28:41:e6:d0:cf:ab:cd:c2:3e:18:d7:a2:fd:
                    6f:cc:4b:b3:fa:5e:7f:cb:82:d0:4d:59:01:e8:45:
                    be:61:ca:7f:90:9c:d2:77:e9:77:0e:3d:95:1a:2f:
                    5d:f5:d2:2a:10:56:8d:6c:8b:58:9b:4d:fe:6b:d1:
                    13:ad:ce:f3:60:b7:f9:f2:ae:f2:75:d5:ac:6e:e7:
                    be:28:1c:35:33:03:19:78:ae:85:cf:9d:3a:14:9c:
                    47:74:80:07:bf:b4:19:a2:35:dd:59:13:5c:27:a7:
                    e2:c7:99:ff:94:31:38:ba:58:5b:f4:e8:0c:e6:29:
                    63:d5:60:5f:b1:22:4b:fc:29:8b:1c:21:1d:27:20:
                    66:b5:31:48:9b:47:9b:17:d9:8d:60:47:e4:a9:51:
                    37:75:58:39:5b:f5:96:fa:7e:49:8b:ce:37:d7:f7:
                    7a:fb:69:8a:f2:ac:63:dd:e0:29:99:9f:75:4d:05:
                    e0:f0:64:51:5e:d1:28:be:2f:b5:77:ca:8f:6d:15:
                    48:c7:14:dc:25:44:a0:42:c5:f7:2e:e3:1a:99:cf:
                    c6:38:9f:f8:af:49:98:05:b6:03:4d:85:30:72:b6:
                    09:8f:d8:92:09:56:20:1a:8b:54:c9:7c:83:ce:59:
                    dd:b9:f8:08:dc:b3:7e:a6:ac:38:7b:64:db:df:0c:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:64:E0:7D:13:3D:31:EA:FF:A1:B6:9D:54:7E:3B:9F:96:62:3F:3D
            X509v3 Authority Key Identifier:
                keyid:6C:31:08:68:6E:F4:69:4A:93:B0:B8:85:9F:E2:6D:60:8C:71:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/323830333a3464303a3a2f33322d3634203d3e20323734303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:a0:fe:61:53:07:59:82:2f:18:31:e9:22:59:ee:83:05:c1:
         13:c1:15:41:9e:19:9b:69:0d:36:ef:ed:be:0b:43:d3:9b:b2:
         7f:a4:ea:d5:13:07:16:b9:0b:ff:f9:6c:fa:1c:f2:96:3f:33:
         15:ba:37:2b:69:74:4f:ab:b4:34:dc:88:c0:40:15:d5:88:8e:
         8c:d5:05:dd:ff:6e:05:ef:fa:49:4d:55:c7:67:af:bd:66:38:
         eb:e0:97:ea:ac:67:38:10:3e:e7:ff:49:da:ac:ef:ba:ba:2a:
         e0:bc:ba:e0:18:83:c7:c7:e6:a4:3f:d6:04:e7:0f:9b:2d:ef:
         3d:9b:20:b6:86:ba:27:af:8c:e2:94:73:15:30:48:a0:35:8e:
         17:22:b6:08:9e:4e:d5:80:6f:e4:da:d1:47:bd:1d:7a:f0:17:
         86:1e:15:53:1d:93:94:de:db:ba:62:57:43:66:30:85:89:e9:
         9d:97:57:b8:42:18:58:1f:cc:f5:7e:0c:77:1e:78:2e:76:da:
         f6:23:32:8a:05:fe:09:53:9f:47:a1:6a:d5:dd:ed:7f:ce:ba:
         20:27:25:e3:90:2a:ab:dc:15:f6:1f:5c:ee:6f:ad:9d:32:34:
         aa:4d:1c:a2:1f:9b:de:c5:e0:c1:6a:ca:02:5c:ef:cc:c6:dd:
         8c:7a:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:32:04 2026 by rpki-client