Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBBDE6D6D3AE5AB8DA2A33621DCD9DAE2AB90A28CD709B89CA371039839817C/0/323830333a353539303a3a2f33322d3332203d3e20323732393736.roa
File:                     323830333a353539303a3a2f33322d3332203d3e20323732393736.roa (raw, json)
Hash identifier:          kmqgDdN10tcQoQsWu3zNC40TZqrQZW9c1/3VTX223o0=
Subject key identifier:   C6:C0:0F:C2:60:2E:D2:78:E0:ED:AA:BC:C3:79:3B:B8:88:8E:7A:F2
Certificate issuer:       /CN=F800960BD77676E661125681F217F3B62D851F49
Certificate serial:       096DF84DE3642B573A4AB175EFEB979EA9106E51
Authority key identifier: F8:00:96:0B:D7:76:76:E6:61:12:56:81:F2:17:F3:B6:2D:85:1F:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F800960BD77676E661125681F217F3B62D851F49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBBDE6D6D3AE5AB8DA2A33621DCD9DAE2AB90A28CD709B89CA371039839817C/0/323830333a353539303a3a2f33322d3332203d3e20323732393736.roa
Signing time:             Wed 17 Jun 2026 03:20:00 +0000
ROA not before:           Wed 17 Jun 2026 03:15:00 +0000
ROA not after:            Wed 16 Jun 2027 03:20:00 +0000
asID:                     272976
IP address blocks:        2803:5590::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBBDE6D6D3AE5AB8DA2A33621DCD9DAE2AB90A28CD709B89CA371039839817C/0/F800960BD77676E661125681F217F3B62D851F49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBBDE6D6D3AE5AB8DA2A33621DCD9DAE2AB90A28CD709B89CA371039839817C/0/F800960BD77676E661125681F217F3B62D851F49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F800960BD77676E661125681F217F3B62D851F49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6d:f8:4d:e3:64:2b:57:3a:4a:b1:75:ef:eb:97:9e:a9:10:6e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F800960BD77676E661125681F217F3B62D851F49
        Validity
            Not Before: Jun 17 03:15:00 2026 GMT
            Not After : Jun 16 03:20:00 2027 GMT
        Subject: CN=C6C00FC2602ED278E0EDAABCC3793BB8888E7AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:51:3a:52:8c:72:07:e2:5c:90:bf:29:b1:
                    6e:84:d6:7d:22:de:ef:68:0d:57:7d:cc:28:f1:a9:
                    1f:8e:69:d2:67:de:51:f1:1d:39:49:96:69:eb:37:
                    40:33:95:8f:45:cf:07:bd:01:3e:bc:15:e0:b3:8c:
                    4d:83:93:ae:04:f3:43:f5:41:e2:12:83:b8:36:35:
                    61:c7:cf:61:b1:83:43:1a:4d:4e:29:ca:0c:c4:78:
                    75:a4:eb:c5:bf:31:a0:98:84:a0:b8:d2:22:ea:69:
                    ee:fb:ad:28:61:15:6c:9a:f0:80:a0:f0:49:56:c2:
                    09:94:87:66:0c:86:2c:0b:8d:1f:bf:56:95:61:bc:
                    75:da:4b:f9:75:21:8c:dc:c1:9f:c0:76:c4:60:45:
                    bd:2a:da:80:e1:5a:09:f7:31:5b:59:32:5c:92:87:
                    e7:c4:68:73:35:f5:f1:28:61:4a:ba:f7:8b:c3:a3:
                    9e:bb:17:62:53:35:30:59:8e:b6:cd:e4:8c:63:01:
                    c5:3c:aa:a4:28:f7:d6:8b:47:56:ef:7f:ed:66:41:
                    50:88:fb:22:15:00:09:22:dd:78:da:35:1f:52:46:
                    c8:81:ab:80:b4:0a:87:c9:9c:e8:cb:d8:81:66:ce:
                    7d:7b:f2:6b:80:a3:f7:89:8c:c6:82:7a:04:b2:bb:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:0F:C2:60:2E:D2:78:E0:ED:AA:BC:C3:79:3B:B8:88:8E:7A:F2
            X509v3 Authority Key Identifier:
                keyid:F8:00:96:0B:D7:76:76:E6:61:12:56:81:F2:17:F3:B6:2D:85:1F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBBDE6D6D3AE5AB8DA2A33621DCD9DAE2AB90A28CD709B89CA371039839817C/0/F800960BD77676E661125681F217F3B62D851F49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F800960BD77676E661125681F217F3B62D851F49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBBDE6D6D3AE5AB8DA2A33621DCD9DAE2AB90A28CD709B89CA371039839817C/0/323830333a353539303a3a2f33322d3332203d3e20323732393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5590::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:86:d6:e5:ad:e4:5c:b8:f8:64:c6:a9:9d:d3:19:5c:0d:df:
         ee:a9:84:4c:53:91:4c:93:3b:e2:37:39:96:df:5e:38:33:68:
         1f:4f:86:49:19:4b:c4:da:31:f2:52:a9:a2:2b:c7:87:50:18:
         a3:af:91:fc:72:d1:30:04:05:5d:43:37:87:d0:97:04:60:ec:
         82:96:2b:82:74:d1:dd:fa:1a:e7:e2:c6:9f:fe:e8:d7:62:d7:
         b5:e7:f1:c6:30:7e:3b:a2:c5:7c:31:c1:af:1d:ee:c5:e8:e1:
         19:14:06:26:33:e5:7b:02:0d:17:c3:04:d2:c6:35:1c:73:8a:
         00:1a:1e:27:4a:90:b2:69:23:cb:70:a2:6c:c9:03:af:48:74:
         36:bf:f0:a3:81:5e:6b:b3:2d:6d:ea:07:9e:51:65:b3:75:88:
         bc:90:d1:d9:6b:51:d1:be:59:8d:3e:94:a0:a1:db:c8:a4:5f:
         01:db:de:cf:16:41:d4:d3:20:d4:3f:95:4d:c3:ba:27:bd:2a:
         30:cc:69:97:fd:73:62:8a:34:36:5f:8f:64:f3:61:ba:5f:0e:
         92:c4:b7:d6:5a:1a:5d:d2:f4:bd:66:a0:58:b4:6b:1f:79:c3:
         91:1e:38:fe:ab:09:7e:30:ce:28:d3:db:5a:47:14:34:00:13:
         ba:3b:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:49:06 2026 by rpki-client