Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          jttKUok74pF8EGE1dOORXWThKLd6ekQRplReE7elmnQ=
Subject key identifier:   3A:E1:9C:B3:8D:F4:25:0E:26:82:37:3A:8B:FA:B1:F7:EA:42:0C:5E
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       089DBC8C17E12CAE5A69B1BF39D7712356CC64CA
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 13 Mar 2026 16:33:48 +0000
ROA not before:           Fri 13 Mar 2026 16:28:48 +0000
ROA not after:            Fri 12 Mar 2027 16:33:48 +0000
asID:                     263242
IP address blocks:        2803:1180:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9d:bc:8c:17:e1:2c:ae:5a:69:b1:bf:39:d7:71:23:56:cc:64:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 13 16:28:48 2026 GMT
            Not After : Mar 12 16:33:48 2027 GMT
        Subject: CN=3AE19CB38DF4250E2682373A8BFAB1F7EA420C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:f3:9c:91:94:39:3b:43:b6:6e:c5:f3:48:
                    54:32:9d:fa:62:d4:e9:7c:ef:07:d4:ef:03:4a:1f:
                    63:44:73:0e:1e:88:c6:20:6b:78:cf:f9:d9:ad:17:
                    f3:e8:cb:69:70:cf:33:4b:cb:0e:c8:e0:84:33:82:
                    49:dc:6d:70:7a:de:90:c7:4d:c3:71:8c:37:59:85:
                    08:36:bb:df:b9:73:c3:9a:b1:86:34:e8:8a:9f:28:
                    db:51:9c:5d:f7:16:2a:cf:bd:7a:d9:2b:b3:d8:d6:
                    23:3e:29:da:1f:81:52:3f:2f:dd:6d:3f:9b:32:1b:
                    d8:2e:34:ec:ab:0c:b1:5e:7d:31:21:62:f9:41:2e:
                    68:63:88:cd:a7:3d:38:2f:58:97:f5:dd:0a:ef:99:
                    bb:f4:7f:28:50:fb:e4:9f:b5:d4:38:b8:5c:03:c6:
                    e9:13:a5:a8:31:de:43:c4:fe:4c:bc:5b:61:b1:6d:
                    33:63:bc:b7:58:9c:46:7a:c9:9d:6d:23:25:cc:3f:
                    01:14:b8:80:b0:7e:c8:8a:7c:32:4b:db:12:c3:34:
                    09:50:d2:53:5d:f4:b0:36:b3:f8:38:54:06:63:4b:
                    b1:78:b7:e3:ca:c1:4c:00:d5:71:f9:ca:1a:a8:2f:
                    cc:30:ac:44:42:9d:5c:af:69:73:b3:98:6b:68:9b:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E1:9C:B3:8D:F4:25:0E:26:82:37:3A:8B:FA:B1:F7:EA:42:0C:5E
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a393a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:d3:c6:fe:09:9b:44:b4:ba:c1:52:94:b5:8e:04:4b:cd:
         c0:7b:0a:b6:1b:ad:56:d4:b8:11:d6:60:cb:26:1f:81:66:6c:
         a1:7c:3f:05:b7:15:d1:0a:ef:15:55:6c:f6:1a:57:3c:d4:2c:
         c1:31:35:c1:2d:1a:44:6e:9d:14:6a:ce:ac:57:62:a6:87:06:
         57:bf:19:4e:c2:5c:e2:e4:5c:a5:0c:98:0a:95:eb:a4:77:78:
         31:42:0f:ac:7b:5f:ea:ff:7d:60:a0:05:b1:b3:27:7c:bc:1e:
         ed:80:8e:63:c4:0b:2b:59:46:04:7b:b7:44:15:48:88:c8:f1:
         02:e9:68:a4:2c:32:28:f9:75:2d:74:c5:54:3d:ce:f3:05:0d:
         2b:ea:a2:6c:ec:bb:a7:aa:70:10:82:5b:f7:38:ff:23:3e:f0:
         5f:f7:89:2f:8d:07:e0:62:01:38:6b:ee:fa:cd:bd:43:15:a0:
         f1:18:2b:c1:39:fb:00:99:72:ea:81:50:58:83:5d:9a:1d:95:
         fc:6e:7b:d7:7e:32:e8:7b:b7:3d:15:f1:1c:66:67:a0:97:48:
         56:cb:14:f2:69:7a:ce:d5:03:c0:8b:b7:18:8d:5d:d5:b2:8e:
         45:7f:08:ab:fe:fb:d3:45:02:eb:d6:53:48:c6:df:0b:b2:b2:
         1d:4e:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:30 2026 by rpki-client