Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a323230303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a323230303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          D3Wp5kducE486fof/biptAStCxFSHstfvWDCPiyFze0=
Subject key identifier:   C1:B4:03:75:60:60:D4:30:FB:CE:9B:1A:FC:92:D4:EE:F4:77:68:08
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       4E7037D631C6BEC287D0AFA58CE1ECCE5CC09DE7
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a323230303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Fri 15 May 2026 22:42:45 +0000
ROA not before:           Fri 15 May 2026 22:37:45 +0000
ROA not after:            Fri 14 May 2027 22:42:45 +0000
asID:                     266894
IP address blocks:        2803:56a0:2200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:70:37:d6:31:c6:be:c2:87:d0:af:a5:8c:e1:ec:ce:5c:c0:9d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: May 15 22:37:45 2026 GMT
            Not After : May 14 22:42:45 2027 GMT
        Subject: CN=C1B403756060D430FBCE9B1AFC92D4EEF4776808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:5d:bd:1c:ae:e7:27:06:88:b1:8a:18:2d:
                    cd:9f:57:f7:cc:a7:bd:57:8e:31:df:df:2d:3d:58:
                    ac:69:a1:df:b7:16:62:c1:d6:ef:84:53:bf:89:2a:
                    32:9a:0e:ef:34:16:89:66:d9:de:82:26:2d:d9:95:
                    c4:c1:9a:06:4a:06:7f:ec:de:f8:c0:ed:e7:03:5f:
                    77:db:0f:f9:f7:ac:bd:d9:bf:50:a9:f0:32:e3:5e:
                    2d:7b:71:9b:f3:8f:98:a7:2a:a9:2e:dd:a2:44:1a:
                    29:1b:9a:f9:00:86:e9:1d:d8:ed:09:cb:4f:50:26:
                    ca:99:90:b6:b5:4d:42:60:19:4e:72:c8:40:46:3f:
                    74:eb:55:2a:b8:a2:bb:47:00:3f:be:b0:78:f8:0f:
                    ab:4a:89:fc:b5:5c:57:ff:75:31:cf:8c:60:37:0c:
                    65:32:74:ea:15:6b:3a:d1:ff:9b:f0:3f:d3:83:cf:
                    e3:cd:e1:5a:ab:3a:d5:f4:5f:60:5c:d7:3b:b4:da:
                    9c:aa:01:9a:67:a3:cd:59:65:40:bc:c5:02:90:a7:
                    50:d2:c9:51:3b:6f:2a:b4:5c:a2:0d:fa:19:5c:33:
                    1d:2c:d1:61:54:91:ae:1a:da:f1:1e:76:48:d6:68:
                    5f:27:e7:bd:4b:8c:fb:28:dd:74:f5:86:d7:0f:50:
                    fb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:03:75:60:60:D4:30:FB:CE:9B:1A:FC:92:D4:EE:F4:77:68:08
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a323230303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:be:26:b5:64:d2:36:ec:9e:12:3b:39:9a:de:aa:df:f3:
         35:d1:79:76:17:8f:4e:56:3e:ac:f3:38:15:5b:82:e4:23:56:
         6d:c9:42:eb:05:da:54:ed:7c:a5:0b:7b:46:a1:0e:b1:dc:41:
         d0:45:59:89:32:6c:3a:40:73:f7:86:79:14:3e:a3:51:13:16:
         3b:b9:c4:98:d8:71:ee:a7:ea:ca:db:5b:a9:fb:dc:2d:fc:40:
         1a:54:8d:d9:12:2e:80:7f:3e:20:41:b3:33:2a:89:e8:49:13:
         e0:1f:a7:d7:82:67:30:7a:76:5a:a2:54:f1:20:7f:4d:23:5c:
         de:f5:16:b0:e7:8c:01:26:c6:b3:f1:74:1b:a2:78:f9:e8:64:
         0c:98:93:37:2f:5c:b1:a3:76:2e:e5:c7:1e:7e:06:21:58:06:
         0c:76:d8:33:6b:c2:58:11:69:52:ac:3e:b1:f1:38:63:16:48:
         18:6d:c8:5a:cd:84:b5:9c:18:ae:24:03:d8:7f:0f:24:09:a8:
         d9:36:bf:24:91:19:fa:da:6a:47:25:e3:94:25:7e:5a:b5:89:
         be:80:51:68:e8:d9:fa:83:be:2c:74:20:6a:fd:9a:a8:3d:90:
         75:f3:f7:f6:b4:a0:31:8b:93:9a:28:bf:c8:ad:a4:12:5f:70:
         15:d1:d6:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:29:20 2026 by rpki-client