Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/323830333a313433303a3a2f33322d3430203d3e20323734333130.roa
File:                     323830333a313433303a3a2f33322d3430203d3e20323734333130.roa (raw, json)
Hash identifier:          OsykHC7+YrKVSXrhVT2ZWh86QAMlbAaEQd9jef9zaKo=
Subject key identifier:   64:D1:E7:8F:AF:72:D7:3B:B4:A6:85:2B:06:F7:B3:2B:7E:4B:4A:9F
Certificate issuer:       /CN=1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643
Certificate serial:       6B664EB62DCF79145C2786A9BDC29A60968ECE92
Authority key identifier: 1F:0C:11:DD:EE:5C:21:DA:13:ED:F2:12:E5:06:83:DC:6E:AA:56:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/323830333a313433303a3a2f33322d3430203d3e20323734333130.roa
Signing time:             Thu 07 May 2026 00:10:00 +0000
ROA not before:           Thu 07 May 2026 00:05:00 +0000
ROA not after:            Thu 06 May 2027 00:10:00 +0000
asID:                     274310
IP address blocks:        2803:1430::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 13:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:66:4e:b6:2d:cf:79:14:5c:27:86:a9:bd:c2:9a:60:96:8e:ce:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643
        Validity
            Not Before: May  7 00:05:00 2026 GMT
            Not After : May  6 00:10:00 2027 GMT
        Subject: CN=64D1E78FAF72D73BB4A6852B06F7B32B7E4B4A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:d3:03:b9:7e:d8:48:3a:91:94:90:c2:01:
                    16:34:0b:76:99:c2:f5:27:16:cf:7e:9a:23:65:0c:
                    c8:fa:62:23:d9:f5:23:e3:f2:33:da:cc:1f:56:ad:
                    d0:b6:e5:bd:bc:2e:8a:3e:13:70:9f:ef:d6:8e:ed:
                    2c:54:3a:8f:e9:57:a2:df:37:b2:98:da:86:d2:9a:
                    49:c6:f0:85:33:8d:0f:1c:2f:14:85:e1:5d:a8:64:
                    69:6a:df:b3:51:5c:f0:99:39:c4:6b:d8:5a:41:ce:
                    b0:6d:a0:db:9b:79:ed:91:55:3a:30:02:2d:0d:5d:
                    f8:77:1a:7f:cc:16:b3:02:d7:82:26:49:a7:80:79:
                    ae:89:38:b5:24:e5:85:9e:75:fb:1a:f3:cb:b4:0e:
                    52:81:66:86:29:8b:e4:22:da:48:01:e5:f3:6e:f9:
                    d9:66:2f:20:97:81:58:a1:3c:c2:b2:be:82:50:a2:
                    db:66:cc:7e:8b:57:3e:80:78:03:5e:9f:f9:07:37:
                    96:da:f7:09:fa:9e:2f:47:a0:55:c1:ac:78:ec:18:
                    57:23:51:55:1e:72:70:88:e1:31:cb:e6:8d:2e:b5:
                    43:12:3b:aa:5e:88:20:6e:d3:ea:db:4b:4a:79:de:
                    df:4d:fe:a9:2a:0e:4f:33:b4:0c:aa:59:91:94:30:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D1:E7:8F:AF:72:D7:3B:B4:A6:85:2B:06:F7:B3:2B:7E:4B:4A:9F
            X509v3 Authority Key Identifier:
                keyid:1F:0C:11:DD:EE:5C:21:DA:13:ED:F2:12:E5:06:83:DC:6E:AA:56:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/323830333a313433303a3a2f33322d3430203d3e20323734333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1430::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:69:06:db:58:08:7c:14:d6:85:cd:7c:fe:86:a6:d1:62:0f:
         d5:d9:46:bd:41:55:ae:d8:48:83:66:27:ab:af:53:74:2d:f1:
         74:3b:2e:c3:52:9a:3f:e7:83:b6:e5:05:f7:b2:04:dc:bf:ba:
         62:f4:4e:a6:fd:a3:cf:a5:7d:6b:59:52:74:d7:f1:8a:1b:02:
         83:5c:b1:ad:dc:5c:d3:0d:44:5e:98:f6:35:a9:55:04:0c:83:
         9b:b1:c5:c1:26:16:28:fe:8b:21:c2:9c:d0:7f:e3:66:bf:b0:
         4c:38:3d:73:fc:7b:d5:29:a6:a9:76:b2:cb:9a:63:51:90:1d:
         fb:e2:fb:78:b4:38:09:11:b3:04:b9:3c:95:b8:7b:23:40:de:
         10:2b:c9:0f:2a:a7:e2:e3:13:c4:e4:04:09:83:8d:a2:8d:c5:
         6a:9c:0e:b8:e9:92:e8:28:0f:c1:a7:8c:73:3f:64:6e:48:7c:
         29:58:54:7b:52:93:e3:91:4f:9c:72:94:3b:06:09:be:9a:1b:
         70:34:8f:d1:33:cb:95:c5:4b:52:a5:7d:63:9c:5d:56:00:e2:
         4c:53:c7:ad:84:52:d6:88:c2:59:ca:d9:bd:ef:90:22:f6:65:
         69:32:46:5c:cf:43:46:8c:bf:6a:ac:2f:92:c6:26:25:bd:ea:
         c5:a9:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:20:50 2026 by rpki-client