Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          3tpwbDPMU3nrc8sw5r8K9gWUiq4tBP/ScCu8Dq8s1cA=
Subject key identifier:   6E:4B:EB:F7:5F:02:D8:9B:CD:A7:84:D2:5A:86:16:92:CE:DA:0D:8E
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       287FAF62AA3E7B40AAD8F7C4F57899AE97F3AD80
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 13 Mar 2026 16:33:45 +0000
ROA not before:           Fri 13 Mar 2026 16:28:45 +0000
ROA not after:            Fri 12 Mar 2027 16:33:45 +0000
asID:                     263242
IP address blocks:        2803:1180:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7f:af:62:aa:3e:7b:40:aa:d8:f7:c4:f5:78:99:ae:97:f3:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 13 16:28:45 2026 GMT
            Not After : Mar 12 16:33:45 2027 GMT
        Subject: CN=6E4BEBF75F02D89BCDA784D25A861692CEDA0D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:91:d7:67:9a:44:27:35:00:0f:65:82:68:
                    51:a2:0c:91:74:a9:aa:c4:4b:d3:5a:7c:8e:13:73:
                    12:08:c9:19:0d:94:6f:94:1b:28:6d:40:52:52:f2:
                    21:00:0d:14:69:e9:87:04:c2:08:51:b2:61:ea:64:
                    2f:a4:b7:39:18:2b:f3:e0:8e:bc:b7:ac:04:81:b4:
                    a7:f3:e4:58:67:cd:c0:72:14:b0:db:e5:3e:60:b7:
                    22:eb:ad:0b:e0:08:55:8d:01:e1:e3:0d:ab:81:65:
                    84:25:08:d7:99:f6:d1:f9:82:28:f9:22:7b:20:0e:
                    e8:93:b4:ed:d8:88:8c:6c:90:93:68:42:0c:2c:27:
                    9e:8c:d8:32:89:59:b1:79:cd:5e:ce:88:17:c2:48:
                    d1:a1:c9:1d:94:2f:7f:d9:d5:28:a8:1d:54:06:b8:
                    9b:5f:55:7d:fc:79:53:a3:d9:86:a6:99:42:1a:75:
                    55:56:c8:f3:57:ab:56:ab:cc:e7:c7:18:d0:98:33:
                    9d:4b:05:2a:2c:87:02:b6:31:ea:7b:d4:bd:4a:07:
                    3c:d5:c4:87:7b:8c:a5:e6:a6:fd:3a:a2:0f:cc:bc:
                    97:00:d4:4d:14:d8:61:ae:2f:50:65:03:61:c3:d1:
                    48:6e:aa:f4:03:05:c2:0d:fe:5b:da:dc:59:ab:d7:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:EB:F7:5F:02:D8:9B:CD:A7:84:D2:5A:86:16:92:CE:DA:0D:8E
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:2f:3e:db:6d:a0:e3:0b:f2:c0:ed:8a:4d:0f:9a:c9:3d:5b:
         e7:17:91:ac:82:7c:33:49:2a:48:36:a3:f7:93:91:84:14:66:
         73:4c:eb:2f:0a:02:1e:6d:12:bb:94:89:d6:d0:58:f2:71:1c:
         42:8b:97:a8:cc:6f:c1:87:0a:97:13:81:31:27:10:4f:63:37:
         10:36:47:e9:fc:04:95:69:65:0d:6a:25:98:2c:71:8d:bf:c2:
         b2:2e:7a:fe:ce:e1:92:ee:9a:24:a7:0d:4f:74:64:81:95:35:
         03:c0:2f:3c:ed:8d:08:30:f8:21:d1:12:8b:eb:92:1e:44:e0:
         75:0c:2c:8d:d3:75:38:75:bb:a0:49:46:4c:e6:37:31:d2:f1:
         b0:6b:e3:7b:65:29:83:33:eb:27:ad:f1:f9:ce:f5:6e:99:af:
         ff:63:fc:90:3a:13:0f:9e:ca:ab:ba:83:0c:b6:4f:0b:40:d0:
         e7:68:78:62:53:f3:b1:9c:9d:8a:7b:56:b1:53:d3:1c:39:88:
         59:6b:03:06:7d:9c:2e:01:0b:4d:1b:7a:ec:76:01:fe:b5:73:
         60:b5:a1:80:78:8e:53:ff:95:6d:31:e3:76:31:9e:33:a8:1e:
         98:06:d0:48:b5:31:81:a2:b6:fe:d3:0e:cb:83:5b:d1:18:31:
         2f:1a:fc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:30 2026 by rpki-client