Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/323830333a386339303a3a2f33322d3332203d3e20323732383333.roa
File:                     323830333a386339303a3a2f33322d3332203d3e20323732383333.roa (raw, json)
Hash identifier:          l2zn1TjwtVeCmL/Vfwq1cSkPYaWnU9NGmlF43pEB3+0=
Subject key identifier:   98:A3:72:4F:42:D3:08:A0:05:D0:5E:F3:BF:32:A4:FB:E6:26:48:14
Certificate issuer:       /CN=37D2BF4A6385A93697DAC97A34405871B16810FB
Certificate serial:       68A9B800CBCF7A9D4DB5F91A3E085334C84CB8A6
Authority key identifier: 37:D2:BF:4A:63:85:A9:36:97:DA:C9:7A:34:40:58:71:B1:68:10:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2BF4A6385A93697DAC97A34405871B16810FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/323830333a386339303a3a2f33322d3332203d3e20323732383333.roa
Signing time:             Mon 25 May 2026 07:44:02 +0000
ROA not before:           Mon 25 May 2026 07:39:02 +0000
ROA not after:            Mon 24 May 2027 07:44:02 +0000
asID:                     272833
IP address blocks:        2803:8c90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/37D2BF4A6385A93697DAC97A34405871B16810FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/37D2BF4A6385A93697DAC97A34405871B16810FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2BF4A6385A93697DAC97A34405871B16810FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a9:b8:00:cb:cf:7a:9d:4d:b5:f9:1a:3e:08:53:34:c8:4c:b8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2BF4A6385A93697DAC97A34405871B16810FB
        Validity
            Not Before: May 25 07:39:02 2026 GMT
            Not After : May 24 07:44:02 2027 GMT
        Subject: CN=98A3724F42D308A005D05EF3BF32A4FBE6264814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:44:9c:3c:3e:9e:b3:9c:ab:37:a9:cd:a8:
                    f2:3b:70:a3:6a:05:d4:d6:b7:64:ca:91:be:6e:29:
                    e3:1e:14:5e:91:b1:d6:c7:7a:23:5e:0f:15:cb:07:
                    b9:6e:12:a5:38:75:88:b8:c1:b7:aa:48:9b:49:eb:
                    90:eb:bc:20:02:96:88:77:15:57:68:1d:6f:60:8d:
                    25:3e:e8:e0:b8:30:70:13:34:28:5b:47:c3:14:30:
                    2e:d9:40:d6:6b:b1:52:76:91:fb:93:be:fe:77:81:
                    e4:73:bf:49:66:74:80:5a:a7:2f:08:08:eb:34:bf:
                    cb:c6:49:69:2e:b0:dc:e8:8d:99:ab:1b:0f:df:b7:
                    c7:06:b1:4d:51:75:14:9c:b6:60:d5:2b:d0:a4:9d:
                    92:49:be:79:bd:3e:78:1b:d6:c0:b9:c4:bd:71:17:
                    0d:c6:67:40:ed:f0:e8:43:bb:bd:19:68:2f:56:c9:
                    32:74:1c:74:48:7f:c2:25:60:19:43:30:a9:a0:3e:
                    76:3d:82:ce:39:51:91:ed:d9:c1:be:a8:2a:ad:45:
                    53:57:e8:94:b4:24:f6:fd:52:e2:35:de:80:de:e3:
                    75:35:d2:c9:ce:68:75:c5:26:9b:e4:cf:fc:5d:58:
                    fd:95:6c:e0:15:b7:27:e2:22:4a:2a:93:60:a9:18:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:72:4F:42:D3:08:A0:05:D0:5E:F3:BF:32:A4:FB:E6:26:48:14
            X509v3 Authority Key Identifier:
                keyid:37:D2:BF:4A:63:85:A9:36:97:DA:C9:7A:34:40:58:71:B1:68:10:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/37D2BF4A6385A93697DAC97A34405871B16810FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2BF4A6385A93697DAC97A34405871B16810FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55DB13586713F0AE1B7CC9BC0E46708DB2AA6C046DB0E4DB76A1EBFB9117BD5C/0/323830333a386339303a3a2f33322d3332203d3e20323732383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:78:07:27:45:a1:87:b4:f8:47:b4:2b:0c:70:f0:b2:dd:23:
         70:3e:33:9b:ba:21:ea:5d:30:70:9c:2e:82:68:32:80:6b:f9:
         3d:f2:32:f0:e2:e4:29:7c:1b:b4:cd:48:8a:9f:20:46:8b:3a:
         f8:56:79:b4:94:34:bb:5e:97:6a:0f:a4:22:62:1f:d5:d9:42:
         62:2f:c4:77:00:15:d3:09:04:c6:d6:11:79:59:c5:d5:ef:e0:
         2c:01:10:8b:ea:b9:24:48:08:c1:3a:a8:d2:0e:9d:9e:dd:a5:
         c0:9c:47:d4:bd:94:f3:dd:69:87:e8:24:b3:6b:73:2b:d4:48:
         3f:7b:bf:62:0a:57:f8:55:49:b5:f3:9d:01:86:14:b2:64:22:
         e7:78:7d:e7:9c:66:4f:73:bd:13:cc:c3:63:ac:67:9a:d6:8b:
         f6:d1:3e:f6:84:ae:71:b8:8b:12:bc:b3:b2:6b:92:e8:b4:cc:
         3d:49:96:74:8a:ae:29:f8:de:62:b4:ac:69:02:4a:57:4b:73:
         62:ab:fe:c7:f4:7a:e6:a2:da:99:51:be:3d:68:ec:87:4d:c8:
         f9:19:83:4e:83:42:f2:02:61:12:3c:9c:51:f9:66:30:81:92:
         a1:e2:d1:0b:e7:d6:9a:fd:c5:f8:13:13:9d:50:98:30:03:78:
         63:3d:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:24:09 2026 by rpki-client