Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/ED36D0C2AEC00D223F59276819293D580BC2DB67D6D7D00EB78846C52DFBA381/0/323830333a316633303a3a2f33322d3332203d3e20323735303630.roa
File:                     323830333a316633303a3a2f33322d3332203d3e20323735303630.roa (raw, json)
Hash identifier:          6qTGDCwkMsgFZigP4kwzXrMCrNT3yBRBhwjrYb5j2r4=
Subject key identifier:   75:FE:4D:6E:5B:74:89:DC:BE:3A:EA:C7:EE:74:1C:C5:87:D8:25:8D
Certificate issuer:       /CN=884C74BCC27DA6DF0864D2043FFBC8A1B0090C47
Certificate serial:       5E161D287B5C9385AD426131C37FAA6BD15B2347
Authority key identifier: 88:4C:74:BC:C2:7D:A6:DF:08:64:D2:04:3F:FB:C8:A1:B0:09:0C:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/884C74BCC27DA6DF0864D2043FFBC8A1B0090C47.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED36D0C2AEC00D223F59276819293D580BC2DB67D6D7D00EB78846C52DFBA381/0/323830333a316633303a3a2f33322d3332203d3e20323735303630.roa
Signing time:             Thu 24 Sep 2026 19:20:00 +0000
ROA not before:           Thu 24 Sep 2026 19:15:00 +0000
ROA not after:            Thu 23 Sep 2027 19:20:00 +0000
asID:                     275060
IP address blocks:        2803:1f30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED36D0C2AEC00D223F59276819293D580BC2DB67D6D7D00EB78846C52DFBA381/0/884C74BCC27DA6DF0864D2043FFBC8A1B0090C47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED36D0C2AEC00D223F59276819293D580BC2DB67D6D7D00EB78846C52DFBA381/0/884C74BCC27DA6DF0864D2043FFBC8A1B0090C47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/884C74BCC27DA6DF0864D2043FFBC8A1B0090C47.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 23:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:16:1d:28:7b:5c:93:85:ad:42:61:31:c3:7f:aa:6b:d1:5b:23:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884C74BCC27DA6DF0864D2043FFBC8A1B0090C47
        Validity
            Not Before: Sep 24 19:15:00 2026 GMT
            Not After : Sep 23 19:20:00 2027 GMT
        Subject: CN=75FE4D6E5B7489DCBE3AEAC7EE741CC587D8258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:b7:8d:4d:bd:ba:19:d1:ec:c0:fd:ad:4f:
                    c0:a0:a3:0c:db:af:6f:d5:d4:d3:53:be:37:68:0c:
                    a1:eb:95:50:c4:8d:b8:0d:d8:85:d2:61:63:59:4e:
                    e7:f0:c5:ef:ca:d4:dc:1f:f9:f1:75:a3:78:68:bb:
                    5a:14:bc:70:13:d9:2c:01:d2:35:e2:7c:10:ca:1b:
                    5f:50:14:d5:6f:a3:36:f2:2e:e1:c7:dd:98:72:ce:
                    a0:96:44:88:9a:89:f9:a8:b2:6e:d6:6f:43:10:5e:
                    37:b0:60:8d:3a:86:37:3c:3d:4f:7c:93:2c:c9:87:
                    c2:cd:77:21:13:be:70:1b:9d:61:b5:71:d3:63:ae:
                    e3:e3:fb:ab:56:d5:9e:fd:f2:46:36:3d:b3:04:42:
                    a1:87:3f:0e:2e:c9:c9:32:bf:c8:1d:2d:f1:db:f1:
                    69:30:8c:2c:14:a2:ed:e6:dc:95:16:3c:34:be:54:
                    e5:7d:bc:94:ef:84:a2:c3:42:0c:b3:80:07:e6:fc:
                    54:37:56:62:db:24:6f:8f:38:e8:8f:5a:2c:b9:60:
                    4b:ab:00:a7:3a:89:3f:ad:4b:ef:c9:ba:69:7a:7f:
                    4c:d1:8e:dc:28:f8:8f:66:7b:ef:90:61:3c:5b:29:
                    93:8e:ce:a0:00:39:60:f0:78:58:39:e5:e1:f2:1f:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:4D:6E:5B:74:89:DC:BE:3A:EA:C7:EE:74:1C:C5:87:D8:25:8D
            X509v3 Authority Key Identifier:
                keyid:88:4C:74:BC:C2:7D:A6:DF:08:64:D2:04:3F:FB:C8:A1:B0:09:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED36D0C2AEC00D223F59276819293D580BC2DB67D6D7D00EB78846C52DFBA381/0/884C74BCC27DA6DF0864D2043FFBC8A1B0090C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/884C74BCC27DA6DF0864D2043FFBC8A1B0090C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED36D0C2AEC00D223F59276819293D580BC2DB67D6D7D00EB78846C52DFBA381/0/323830333a316633303a3a2f33322d3332203d3e20323735303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:38:4f:8e:c8:51:39:e0:70:48:cf:9d:4e:b7:a3:ba:7b:
         d8:d8:a1:c9:47:68:3e:97:2c:cd:2f:f4:ee:f7:90:ac:99:f6:
         a9:0d:a4:3f:13:6f:f1:09:66:a9:c8:5f:c0:f0:71:13:33:9a:
         64:42:e6:95:a9:d5:81:70:e7:49:e6:af:00:97:b6:31:c3:3c:
         fe:df:9b:d0:94:03:4e:2f:6d:5e:9c:8b:06:9e:86:aa:0e:ac:
         c2:02:f4:7f:19:da:60:b5:4e:fb:a1:f5:97:25:c0:0b:8f:87:
         30:3b:5e:a9:71:1a:67:42:85:ad:2e:05:d0:97:59:8a:d9:e6:
         13:12:45:c8:2d:03:3e:3f:26:86:28:4e:d7:a4:fb:55:2f:a0:
         dc:43:0f:9e:33:6a:80:50:5e:ab:a0:bd:34:ed:24:b7:01:cb:
         8b:4a:9a:01:ad:3e:04:f1:24:26:40:8b:b6:37:23:41:f3:03:
         af:e0:97:81:4d:62:78:c3:e3:9f:c3:79:48:ca:2f:c2:c1:53:
         f2:03:a4:98:f3:71:c6:7d:f9:ec:92:d0:f5:a6:a6:ad:b5:ba:
         3a:0a:72:e2:e1:1d:5d:29:5b:4f:df:a1:87:bf:0c:f5:fc:7f:
         33:27:30:00:1a:38:32:8e:7d:56:3f:8b:4e:43:97:22:b8:f6:
         29:44:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:19:34 2026 by rpki-client