Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          AwVqxD+9ct48P+4sRrwrYVyWcDitip4L2QITbtV9siI=
Subject key identifier:   4F:84:D5:CD:69:00:97:D7:81:D4:D0:D9:B5:94:05:DC:F7:8D:8D:98
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       238F73B26A29CFBE96262046EDA99FAEB79D816E
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 07 May 2026 20:41:38 +0000
ROA not before:           Thu 07 May 2026 20:36:38 +0000
ROA not after:            Thu 06 May 2027 20:41:38 +0000
asID:                     273068
IP address blocks:        2803:b790:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 12:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:73:b2:6a:29:cf:be:96:26:20:46:ed:a9:9f:ae:b7:9d:81:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: May  7 20:36:38 2026 GMT
            Not After : May  6 20:41:38 2027 GMT
        Subject: CN=4F84D5CD690097D781D4D0D9B59405DCF78D8D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:98:34:35:81:44:b0:f6:88:7d:d1:f2:1a:
                    f7:bb:08:26:9d:08:21:aa:91:ea:61:63:16:ff:51:
                    01:69:e6:4f:92:87:02:fe:f7:3f:4d:f7:82:91:14:
                    f5:c3:a5:28:3c:06:80:7e:da:c2:e7:40:e9:88:13:
                    87:a7:cd:50:cf:ec:fe:cb:c7:31:1b:f5:48:46:5a:
                    ca:5a:13:a7:d5:50:c4:15:be:0d:35:54:1c:03:0a:
                    ee:f6:36:64:03:05:7e:17:77:5a:f6:7b:05:fa:7d:
                    57:3e:97:91:e6:b2:18:46:1c:d3:d2:f7:f3:cf:3b:
                    3e:1a:4d:36:b7:f9:55:72:43:03:5b:2a:89:02:2f:
                    69:57:f2:8a:03:76:1c:4d:95:f8:96:d8:fc:67:3d:
                    0e:a2:ac:71:60:37:bb:d0:8f:19:84:3b:30:d7:27:
                    1e:44:1d:04:e0:bb:4f:05:ee:cb:5f:3a:ed:73:41:
                    b8:58:5c:cc:a7:60:2e:2a:c8:99:89:16:a0:1f:27:
                    9e:a8:86:08:01:57:85:8a:5f:e0:fe:d4:19:03:d0:
                    64:91:82:c5:ff:d4:3d:91:a2:e5:8c:33:35:92:fb:
                    12:47:33:79:30:51:8c:87:c6:0c:d6:16:1f:4d:95:
                    8a:1e:b9:5b:c5:a5:40:23:33:dd:7f:b5:9e:d7:8c:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:D5:CD:69:00:97:D7:81:D4:D0:D9:B5:94:05:DC:F7:8D:8D:98
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:0c:89:d1:ef:2a:58:28:44:33:0e:0d:d1:16:fe:fd:50:90:
         8d:c4:f9:6a:93:ec:7f:d9:b9:35:65:7d:9e:0c:f6:c6:b2:88:
         d8:ff:26:64:67:52:3b:a2:a2:e1:0b:14:2e:75:1f:81:d4:ae:
         6e:ec:37:53:fa:36:54:4f:8e:5b:f0:58:4c:9b:76:fc:d9:9e:
         73:6e:05:21:b5:e3:7c:ec:18:57:06:56:3e:7d:5d:83:3b:2a:
         d1:a0:de:bf:e8:6a:00:d1:b0:dc:7f:e5:df:f0:42:25:c7:57:
         83:f2:49:88:72:75:d0:b9:85:c9:11:e1:c5:1d:0a:73:f9:c0:
         4c:55:1c:b7:b8:77:1b:23:79:5a:6f:6d:d2:8b:87:e1:99:6b:
         61:7b:15:97:78:d8:c8:85:be:5a:0d:f2:df:8e:37:b0:71:7d:
         eb:c9:90:f5:24:10:bf:9e:5f:de:84:17:7c:0f:b8:40:82:16:
         7c:7d:4d:f9:ee:1d:be:21:40:8f:a8:ad:c1:8a:4d:8f:84:3e:
         2f:6b:fe:f3:50:79:6b:76:97:22:5d:88:68:8a:18:97:a2:dc:
         d9:e3:79:96:85:3b:30:53:85:c3:71:3f:f5:43:b6:97:43:cc:
         88:92:eb:7f:4f:64:27:8c:f2:a9:51:fc:d3:21:e2:3d:5c:13:
         b2:05:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:51 2026 by rpki-client