Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/323830333a623835303a3a2f33322d313238203d3e20323733313230.roa
File:                     323830333a623835303a3a2f33322d313238203d3e20323733313230.roa (raw, json)
Hash identifier:          GjcRh4KpABCanocLZ2946lh2wN0j53+E5EHLnwOSQks=
Subject key identifier:   BF:DB:DC:87:48:58:28:64:D5:F3:77:73:10:F8:27:4F:EE:FC:A0:14
Certificate issuer:       /CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC
Certificate serial:       778EB7647E8170118293B9035E4700A60EBACA66
Authority key identifier: F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/323830333a623835303a3a2f33322d313238203d3e20323733313230.roa
Signing time:             Fri 06 Mar 2026 15:33:11 +0000
ROA not before:           Fri 06 Mar 2026 15:28:11 +0000
ROA not after:            Fri 05 Mar 2027 15:33:11 +0000
asID:                     273120
IP address blocks:        2803:b850::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 07:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8e:b7:64:7e:81:70:11:82:93:b9:03:5e:47:00:a6:0e:ba:ca:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC
        Validity
            Not Before: Mar  6 15:28:11 2026 GMT
            Not After : Mar  5 15:33:11 2027 GMT
        Subject: CN=BFDBDC8748582864D5F3777310F8274FEEFCA014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:22:d8:0a:25:8d:c5:9d:67:b8:ef:0c:8f:
                    fe:7f:75:59:12:ab:e3:ec:9b:10:a8:eb:d4:56:29:
                    80:61:74:75:8b:5c:1c:ac:ac:f4:2f:ed:c4:b5:f8:
                    b9:b5:22:eb:92:ac:27:39:87:09:f3:11:04:8b:fe:
                    a3:b9:e5:71:9f:9e:d8:4e:01:16:45:ce:17:43:1b:
                    dd:28:c9:d4:5b:30:1c:d8:3a:8b:17:07:a1:7d:fa:
                    3a:6a:a4:8f:b1:f6:e0:af:29:95:03:d2:f6:3a:12:
                    5a:13:29:17:e8:c7:82:e8:6d:b7:61:50:94:29:53:
                    c9:53:6e:d2:6f:27:d8:24:3a:0d:05:a5:ff:b4:3a:
                    87:c4:ba:d7:24:af:96:a2:18:57:a3:4f:50:27:72:
                    28:dd:8f:6c:39:81:be:2c:8e:89:3a:17:4e:3f:90:
                    c8:af:85:9f:92:28:ca:82:eb:8d:5c:b0:7f:f2:7f:
                    bb:2e:a8:08:5c:a0:d5:94:51:6a:95:d5:3f:ae:59:
                    be:74:88:22:53:c8:f1:ba:b8:4e:d4:ab:22:8b:03:
                    87:60:75:c1:dc:b8:37:6e:d6:34:38:fd:f7:b5:e4:
                    91:51:a1:ff:a9:7e:ac:b6:b3:b3:08:cc:0d:5f:98:
                    51:c7:15:d9:0a:ba:a7:37:1f:82:88:6e:f1:a3:2a:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DB:DC:87:48:58:28:64:D5:F3:77:73:10:F8:27:4F:EE:FC:A0:14
            X509v3 Authority Key Identifier:
                keyid:F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/323830333a623835303a3a2f33322d313238203d3e20323733313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b850::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:a0:c6:8d:b5:d0:a8:f8:37:55:e1:dc:68:84:07:54:bb:
         46:d7:89:37:0c:29:54:98:3d:90:08:3a:bd:5f:ba:d3:1e:59:
         08:f4:22:22:c8:2b:05:3f:82:88:37:ad:c5:1a:9a:4a:96:c0:
         ea:79:02:71:d4:3d:60:70:ab:9a:7d:91:39:ba:f8:d2:57:1d:
         e8:ef:0a:63:e7:25:5a:d8:ef:79:de:90:65:af:9b:28:0b:31:
         9c:87:b0:95:8f:37:96:66:da:f7:80:a0:df:3d:e3:31:c3:e3:
         da:2f:5a:c9:a3:f5:eb:b2:cb:ec:26:91:47:bc:eb:83:d1:f3:
         df:cd:ef:b8:97:d7:df:64:82:de:98:12:6f:1c:ed:62:d5:f8:
         4a:c3:db:59:60:36:f4:c0:e7:4f:4a:ff:c9:df:5c:d9:25:87:
         d9:00:37:39:2a:2c:da:1d:50:dd:45:32:cd:46:bb:df:38:b6:
         8d:e3:e6:9b:c7:80:f2:af:85:24:d6:fc:31:ce:d7:f5:0b:c3:
         f4:f5:ed:62:c9:61:14:6b:5b:f2:10:d4:8c:84:42:40:4c:f3:
         06:ea:be:05:45:72:f5:ca:45:d1:38:7a:bf:43:9f:f5:5a:07:
         5c:91:71:7f:06:48:ad:81:6e:05:74:2b:1d:6d:4d:cd:45:00:
         c1:3e:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:35:16 2026 by rpki-client