Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/323830333a623733303a3a2f33322d3332203d3e20323634383539.roa
File:                     323830333a623733303a3a2f33322d3332203d3e20323634383539.roa (raw, json)
Hash identifier:          5GEvkZjDs9zYR6YQFH1HfEYhy3GsjtnOwjeSVr0PbJc=
Subject key identifier:   35:CF:03:D8:DE:D4:2F:C2:54:FF:A3:5D:F3:0D:58:75:91:DA:A0:84
Certificate issuer:       /CN=7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D
Certificate serial:       39038807CEFE258C457F5F7D3C1075BF940E5435
Authority key identifier: 7C:FC:C3:8D:B6:CF:C0:A7:E3:8D:EC:33:E7:BF:4E:4A:F1:8F:30:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/323830333a623733303a3a2f33322d3332203d3e20323634383539.roa
Signing time:             Thu 01 Oct 2026 15:45:00 +0000
ROA not before:           Thu 01 Oct 2026 15:40:00 +0000
ROA not after:            Thu 30 Sep 2027 15:45:00 +0000
asID:                     264859
IP address blocks:        2803:b730::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 18:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:03:88:07:ce:fe:25:8c:45:7f:5f:7d:3c:10:75:bf:94:0e:54:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D
        Validity
            Not Before: Oct  1 15:40:00 2026 GMT
            Not After : Sep 30 15:45:00 2027 GMT
        Subject: CN=35CF03D8DED42FC254FFA35DF30D587591DAA084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:14:07:17:2b:0e:a4:ea:32:08:20:0c:9b:
                    a4:54:8c:99:f3:08:07:9a:e0:d7:f1:07:0e:77:e9:
                    76:b9:55:39:b3:66:fa:f2:43:73:1a:97:4b:ba:31:
                    fa:a7:c9:ad:10:4a:2c:90:96:21:47:78:29:b2:60:
                    4b:ef:19:61:0e:af:fb:42:c0:cb:31:da:f1:02:58:
                    ba:ef:90:d2:23:e9:83:26:cf:b3:b7:a1:ed:90:44:
                    2a:10:f7:af:38:86:fa:0d:17:9c:73:9f:47:58:1b:
                    cb:5b:02:64:d3:0e:85:8b:da:23:22:2b:67:8d:df:
                    bf:e7:95:ed:0a:53:0f:b6:d3:16:b4:49:4d:48:71:
                    9f:06:a8:bf:e0:bf:44:f5:3a:d7:43:00:21:00:4d:
                    d1:cf:95:49:38:ac:8e:94:9f:41:75:42:3a:bd:c2:
                    1d:5c:1d:81:de:80:0f:ad:26:e4:d8:ce:aa:80:b3:
                    11:47:e8:6d:f6:8e:f2:3b:7a:3a:7e:f5:d6:e7:d5:
                    82:ac:e4:af:21:a6:f6:ac:a6:e1:35:aa:63:61:b0:
                    eb:d4:50:d0:8a:3d:09:4d:b0:b9:b1:4b:c8:48:df:
                    dc:8b:14:c9:37:c8:62:83:85:d0:ee:d8:fe:72:1a:
                    33:84:e0:c7:ad:c7:24:ef:ef:53:63:70:35:52:74:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CF:03:D8:DE:D4:2F:C2:54:FF:A3:5D:F3:0D:58:75:91:DA:A0:84
            X509v3 Authority Key Identifier:
                keyid:7C:FC:C3:8D:B6:CF:C0:A7:E3:8D:EC:33:E7:BF:4E:4A:F1:8F:30:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/323830333a623733303a3a2f33322d3332203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b730::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:75:ef:70:0a:b5:c5:52:4e:18:79:a9:2d:e5:c0:f9:b9:
         c3:7f:91:cd:6b:f2:8a:54:79:49:92:22:df:7f:fe:b8:57:51:
         f6:e0:09:89:76:95:4b:cd:93:1b:88:a1:9e:c2:1c:17:ef:cd:
         cc:43:99:01:25:cf:f1:3b:97:0c:96:e0:d9:22:34:dc:48:eb:
         20:cf:07:cf:53:03:33:ca:02:45:28:89:0a:77:aa:df:6b:6b:
         e3:96:88:35:22:05:15:26:e7:d1:23:e9:04:4c:b1:b2:1b:c4:
         72:f6:e0:5e:82:3f:64:8c:b6:c9:9c:b9:68:8b:99:08:e4:de:
         cd:7a:14:8a:4a:cd:0e:44:39:59:f8:2e:a3:14:a6:1c:0b:27:
         ca:8d:69:8b:00:19:0e:55:b1:b6:e8:fd:44:f7:b3:7d:60:9e:
         d5:9c:ec:1c:08:45:07:23:04:e9:5d:dd:af:77:f3:d8:5b:79:
         33:98:63:a2:37:40:fb:98:01:2a:c7:91:ab:3a:ba:51:98:ff:
         75:68:23:6d:58:71:42:17:24:76:3f:b0:03:f2:9f:9b:86:80:
         4e:f1:3a:92:78:1a:aa:cf:b0:f8:f2:4f:52:40:bb:a1:a9:53:
         69:bd:62:33:14:d2:56:da:1a:6e:82:c3:23:14:28:2d:f2:70:
         38:98:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:18:51 2026 by rpki-client