Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/323830333a316465303a3a2f33362d3336203d3e20323730303538.roa
File:                     323830333a316465303a3a2f33362d3336203d3e20323730303538.roa (raw, json)
Hash identifier:          pZ9Xdj9LHSIpDccVy2HqSP2TPOv8x01QLAGrfpOdi6c=
Subject key identifier:   3F:DB:D4:6C:26:F4:80:DB:CF:32:F7:37:C2:6A:02:F5:C3:01:9E:36
Certificate issuer:       /CN=822238317AA58BF50F02E72654D92F5AAF15F921
Certificate serial:       618CA76B8364EE3B9EF9A1DFFA7F65D6CA7ED619
Authority key identifier: 82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/323830333a316465303a3a2f33362d3336203d3e20323730303538.roa
Signing time:             Mon 18 May 2026 15:00:00 +0000
ROA not before:           Mon 18 May 2026 14:55:00 +0000
ROA not after:            Mon 17 May 2027 15:00:00 +0000
asID:                     270058
IP address blocks:        2803:1de0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jun 2026 22:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8c:a7:6b:83:64:ee:3b:9e:f9:a1:df:fa:7f:65:d6:ca:7e:d6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822238317AA58BF50F02E72654D92F5AAF15F921
        Validity
            Not Before: May 18 14:55:00 2026 GMT
            Not After : May 17 15:00:00 2027 GMT
        Subject: CN=3FDBD46C26F480DBCF32F737C26A02F5C3019E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:c0:fc:86:e5:20:d4:bc:c9:df:01:33:f1:
                    20:b1:60:ec:47:1c:b8:c1:c5:be:a3:76:a3:b1:a1:
                    e2:e1:0a:d7:8d:53:a6:03:e2:b6:05:26:5a:af:43:
                    1a:aa:d2:5a:d1:9e:2b:d5:fe:06:64:b5:0c:c5:a0:
                    e8:90:48:ee:4d:fc:ee:7f:84:35:92:86:94:1c:40:
                    fa:20:ab:03:58:4c:2f:77:09:22:c7:05:9c:2a:89:
                    d9:b6:0b:e1:f7:73:50:59:25:2a:e5:a9:a6:9a:a2:
                    e0:f4:e8:a2:c0:d7:f5:e4:3d:08:13:62:20:c5:06:
                    67:09:36:72:f8:e0:32:d0:9a:38:b7:49:c3:05:6f:
                    64:aa:ef:72:e1:7e:70:83:d0:ef:88:57:77:36:3a:
                    29:73:08:0b:da:f0:21:30:2b:b6:0b:e9:cf:6b:b0:
                    05:4e:ee:fd:1d:a7:db:15:34:98:18:2a:21:c8:96:
                    86:50:c0:63:84:7d:6c:aa:22:c9:9e:3e:83:c4:73:
                    27:a1:f7:e9:6f:74:98:5f:43:91:23:82:0d:fd:4f:
                    f7:6c:2d:0f:f8:18:98:03:ec:9b:ad:17:59:1a:46:
                    ef:7a:22:5f:26:12:b5:59:03:ca:bc:04:a5:6d:1b:
                    72:67:76:e5:38:84:b4:aa:90:3f:05:d2:c3:7d:52:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DB:D4:6C:26:F4:80:DB:CF:32:F7:37:C2:6A:02:F5:C3:01:9E:36
            X509v3 Authority Key Identifier:
                keyid:82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/323830333a316465303a3a2f33362d3336203d3e20323730303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1de0::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:20:b7:85:66:6e:4b:58:a6:70:4e:a2:d9:93:61:fa:3c:59:
         9b:cb:b6:36:f2:27:bf:b1:9a:6d:16:e5:02:cf:69:78:6e:bb:
         91:12:94:12:05:6f:52:57:49:4e:ef:c2:fa:f3:05:45:35:04:
         7c:6f:87:ae:90:86:b5:f4:b6:a4:56:44:7c:9a:cb:0f:e5:fd:
         f7:67:a7:82:75:a9:e2:fa:b4:af:f0:71:0b:f7:dd:87:5c:47:
         1e:7d:e4:96:a8:03:de:0b:eb:b3:24:6d:e3:f5:51:92:a6:90:
         1c:01:3c:83:9f:f0:4f:56:df:dc:33:09:9b:6f:5e:96:f4:0e:
         5c:c8:b6:ea:ad:8a:c3:2d:f3:5e:fb:07:2e:fd:a5:55:15:06:
         7f:e0:5e:a2:02:ac:df:cd:03:b0:b0:10:07:8c:8f:b5:40:00:
         51:32:a4:61:28:65:0f:0b:ed:49:44:bb:f6:5e:5b:14:ae:bd:
         3f:02:43:6b:0c:98:d6:5b:2f:7f:9b:87:8b:e5:6f:41:9f:31:
         66:67:91:c8:81:94:bb:d7:82:3b:d8:70:ae:c1:40:74:4f:86:
         f4:70:b8:6b:db:7a:c3:2a:43:82:1e:0b:41:72:11:7f:10:32:
         f0:7d:55:51:58:e5:ad:c1:02:0f:55:9a:9e:5e:e1:1d:14:70:
         55:a6:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:36 2026 by rpki-client