Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          WrLj4QdhLAA6PbaxLaAEraM3LS2gGVXayi2DqyF05sc=
Subject key identifier:   1E:67:80:9D:9A:65:B9:56:54:0C:56:E2:AF:83:97:9C:95:6B:52:63
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       74E6E3EEBE8A29F0739956FEE6EB79CB4EA8BC27
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 13 Mar 2026 16:33:44 +0000
ROA not before:           Fri 13 Mar 2026 16:28:44 +0000
ROA not after:            Fri 12 Mar 2027 16:33:44 +0000
asID:                     263242
IP address blocks:        2803:1180:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:e3:ee:be:8a:29:f0:73:99:56:fe:e6:eb:79:cb:4e:a8:bc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 13 16:28:44 2026 GMT
            Not After : Mar 12 16:33:44 2027 GMT
        Subject: CN=1E67809D9A65B956540C56E2AF83979C956B5263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:1f:c7:cf:99:87:f4:3b:75:fc:14:82:49:
                    5c:a2:f1:8f:f4:2f:49:49:0f:c2:eb:80:31:0c:84:
                    09:f6:d0:77:81:ef:db:f5:41:a5:e8:a7:62:5b:90:
                    05:27:23:53:45:43:cf:54:15:4a:d2:bc:66:81:0b:
                    01:3c:51:3e:6b:09:a7:69:d8:53:05:b1:2e:ca:bf:
                    8b:ac:81:ac:07:65:c1:a2:69:0a:47:bb:e3:b2:42:
                    87:64:a2:0c:30:a7:17:79:16:5b:6c:64:48:e1:44:
                    c1:46:6c:5d:55:a8:16:9d:24:9a:14:7b:e9:6a:66:
                    cc:51:7c:3b:ea:00:4a:ec:e8:e0:bc:16:14:72:2b:
                    02:66:ab:0f:ea:6d:38:7c:4c:ae:f7:b9:bd:0d:b9:
                    51:63:26:15:cd:3d:e8:43:07:60:a5:22:9d:a0:d5:
                    71:0d:96:5b:99:b5:3e:38:a1:87:7c:49:71:c7:c7:
                    d1:15:3b:94:3b:1b:99:09:95:bc:50:6a:ff:06:e3:
                    c7:b9:35:91:f1:67:5d:d3:bf:a2:b2:e5:7e:aa:16:
                    32:a3:16:b6:f5:3c:d6:00:f6:a7:cd:6e:24:87:ce:
                    3d:ee:d9:56:6d:28:26:68:f4:16:71:a6:f9:f5:f3:
                    c9:c2:98:d1:55:d0:6d:4d:0d:5d:6f:68:47:6c:04:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:67:80:9D:9A:65:B9:56:54:0C:56:E2:AF:83:97:9C:95:6B:52:63
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:be:bd:49:7d:59:6d:5b:d5:31:25:97:06:93:67:4d:db:
         99:47:14:b5:c4:28:c2:b0:1b:74:f2:5d:c3:49:7d:94:11:64:
         2b:a5:b2:97:6e:00:7e:d0:9a:14:4b:41:5d:37:84:e2:a1:84:
         9d:fb:7b:0f:03:ee:57:9f:bc:f3:12:3b:91:90:69:18:c2:50:
         83:e1:38:a5:9e:39:eb:e0:8a:ff:20:d1:91:36:0f:25:b3:72:
         44:dc:c1:d0:f2:47:5b:e1:f4:c5:38:ba:53:1b:6a:b8:0b:fb:
         34:06:a4:a9:89:a7:8e:11:66:fa:ce:e1:f5:2c:e8:5c:e0:4b:
         1f:80:de:e8:94:38:ed:55:40:67:fd:8c:c3:a3:16:ac:1f:7c:
         7b:68:93:d1:d9:1d:ce:cf:ad:d8:cc:65:d3:2d:69:7e:e2:18:
         92:70:ae:8b:be:c7:fa:25:48:4a:68:c2:5c:c0:67:ae:c7:67:
         bc:a3:c9:70:74:c5:b8:e5:97:de:f1:71:6a:87:1e:56:ad:db:
         da:e4:93:4c:62:98:7a:02:80:78:80:79:39:b4:9a:c9:9c:0d:
         28:93:de:d8:4d:1e:25:19:a0:e4:07:4c:29:22:85:7c:32:15:
         cc:b7:38:e7:a7:19:06:58:6b:99:58:1a:7a:17:18:a0:60:c9:
         40:d3:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:31 2026 by rpki-client