Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/323830333a643764303a3a2f33322d3634203d3e20323734323433.roa
File:                     323830333a643764303a3a2f33322d3634203d3e20323734323433.roa (raw, json)
Hash identifier:          zQnBCipNgKwqDPrQXmuO8IJ++ERGqxbmnWKShHZkkV4=
Subject key identifier:   FA:72:9B:D1:96:1F:78:7E:59:AD:F6:9A:DF:41:96:DA:08:77:5B:0C
Certificate issuer:       /CN=31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1
Certificate serial:       1E752A7409040894C88BFFABDF15E39ED65D2569
Authority key identifier: 31:E9:76:3A:09:C5:05:8D:27:D8:E5:0D:6E:9F:BD:7F:CC:F2:A5:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/323830333a643764303a3a2f33322d3634203d3e20323734323433.roa
Signing time:             Wed 13 May 2026 00:30:00 +0000
ROA not before:           Wed 13 May 2026 00:25:00 +0000
ROA not after:            Wed 12 May 2027 00:30:00 +0000
asID:                     274243
IP address blocks:        2803:d7d0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 11:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:75:2a:74:09:04:08:94:c8:8b:ff:ab:df:15:e3:9e:d6:5d:25:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1
        Validity
            Not Before: May 13 00:25:00 2026 GMT
            Not After : May 12 00:30:00 2027 GMT
        Subject: CN=FA729BD1961F787E59ADF69ADF4196DA08775B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:e6:fb:3e:81:a9:37:8e:94:17:d3:88:d5:
                    cd:71:42:92:39:63:38:1a:7c:f7:f9:c7:05:79:93:
                    de:82:38:36:10:6d:80:51:c3:01:33:e8:97:47:af:
                    35:01:38:0e:d7:40:28:2b:77:13:f0:76:45:e6:b4:
                    35:88:d8:7d:73:8d:e8:03:d5:ae:01:39:d1:57:94:
                    35:cd:c4:28:25:c7:f5:c0:60:f2:11:c0:40:82:40:
                    09:a9:76:09:ca:de:5a:be:43:60:f0:d3:aa:f5:3f:
                    f1:e0:ea:13:75:54:2b:70:8e:6f:8f:0a:7a:07:c2:
                    96:dc:5b:94:1e:1f:fa:3b:64:66:86:9d:25:8e:b0:
                    3a:39:b4:37:90:ac:23:27:27:83:7f:97:d9:96:92:
                    66:46:6e:e1:ee:5e:97:ca:5c:04:81:6f:1d:6f:c8:
                    60:88:a0:d7:55:5a:4d:3e:48:84:2a:e9:f7:1a:2f:
                    50:26:f6:dc:81:0a:08:a4:e3:e1:55:35:ac:78:b2:
                    71:cf:1e:9d:12:81:e1:eb:9c:1a:42:42:04:8a:9c:
                    ab:8f:32:9c:8b:61:78:5b:80:5d:17:93:32:0a:fc:
                    d3:c3:1c:0c:89:97:a4:38:86:00:37:77:53:b6:ae:
                    e2:e9:8a:74:df:df:70:d7:c0:a0:a9:83:6e:32:fe:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:72:9B:D1:96:1F:78:7E:59:AD:F6:9A:DF:41:96:DA:08:77:5B:0C
            X509v3 Authority Key Identifier:
                keyid:31:E9:76:3A:09:C5:05:8D:27:D8:E5:0D:6E:9F:BD:7F:CC:F2:A5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/323830333a643764303a3a2f33322d3634203d3e20323734323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:e9:61:f4:c1:33:9a:ee:bf:8a:1f:f2:a3:83:e7:a4:fe:
         38:24:5c:c8:33:4c:08:7c:52:f6:cb:c0:64:5a:05:44:e2:6d:
         a8:12:d1:62:47:20:27:03:6d:15:0b:fe:05:7e:c4:0a:4c:19:
         05:2b:48:b4:83:9f:1d:73:38:50:e8:e5:52:57:e5:24:8f:a5:
         1d:84:3a:b5:ef:1b:e9:0f:e7:b6:9d:95:21:fc:e1:bd:73:e6:
         00:b6:ea:15:2f:30:fe:8e:b8:18:ab:1f:eb:45:86:57:61:eb:
         32:58:16:fe:04:cb:a5:cb:cd:e4:90:69:50:f7:06:57:e3:dc:
         bd:58:c7:6a:02:fb:f1:8b:e5:1e:9a:53:c6:df:cf:86:9e:97:
         3c:85:c3:e5:a4:c2:dc:07:03:ef:95:9d:30:e6:26:fe:d4:3e:
         ef:61:cf:62:7b:da:10:aa:62:f3:5a:a6:ea:c5:bd:be:d6:6e:
         56:4b:2d:ab:e7:91:7b:2e:8a:2a:6c:e7:3c:93:58:d7:9b:b2:
         d7:8d:00:54:d6:f5:c1:32:8e:8c:a1:fd:3e:d7:64:23:66:89:
         ad:0d:ab:39:b3:91:f9:db:ef:65:e1:e4:67:58:22:ae:7c:2b:
         61:b5:3b:b1:bd:91:f1:17:f9:b3:59:e3:fb:63:9a:8c:4b:eb:
         2c:5e:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:12:14 2026 by rpki-client