Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa
File:                     323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa (raw, json)
Hash identifier:          /5GApFdsvG4GQi7HBbKpM7CSYrUPQEhp5XEtfKuJe0g=
Subject key identifier:   DB:B8:BB:53:44:FD:0D:44:80:CB:D4:79:25:BB:B3:BC:DE:7E:4B:16
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       035551A0CC940B792886A1A65F1F36DC35955BB6
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa
Signing time:             Wed 01 Jul 2026 20:50:28 +0000
ROA not before:           Wed 01 Jul 2026 20:45:28 +0000
ROA not after:            Wed 30 Jun 2027 20:50:28 +0000
asID:                     267914
IP address blocks:        2803:8e60:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:55:51:a0:cc:94:0b:79:28:86:a1:a6:5f:1f:36:dc:35:95:5b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul  1 20:45:28 2026 GMT
            Not After : Jun 30 20:50:28 2027 GMT
        Subject: CN=DBB8BB5344FD0D4480CBD47925BBB3BCDE7E4B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:48:e3:c8:62:c3:87:b3:b6:22:5a:7f:d8:
                    3f:50:71:e2:8b:f4:29:1d:e9:18:29:a1:70:0a:f3:
                    ca:50:f8:29:20:5b:19:dd:0c:9d:27:f1:86:98:9d:
                    02:fb:ed:94:bf:67:b1:3c:95:73:45:2f:21:a8:46:
                    7d:3e:b1:93:82:42:34:99:e3:90:75:e7:38:8b:c2:
                    f3:8b:a9:21:ca:c0:74:5f:b1:0b:56:31:a1:5f:25:
                    c7:ad:6a:36:f3:ff:57:47:a3:e5:1e:17:8a:74:48:
                    47:f9:cc:ec:f4:b5:65:ff:09:d2:ef:c0:0f:e0:7e:
                    2d:dc:75:31:15:23:f2:ce:d5:9d:13:4e:cf:37:d5:
                    0b:be:3a:55:05:11:91:c8:2c:94:29:02:26:8b:e4:
                    bb:89:18:8a:3a:29:c1:b1:1a:81:f6:71:87:6f:ce:
                    fe:91:49:60:25:7d:7c:88:f6:67:3c:bb:64:4a:9b:
                    52:9d:d1:44:c3:d9:26:2c:0e:14:f7:bf:38:8a:a3:
                    c6:61:69:65:3b:9a:13:ee:e9:ee:97:aa:3c:5d:d9:
                    10:a4:22:1c:4c:a7:10:22:a7:96:55:cd:3e:28:89:
                    ea:05:81:79:0c:b7:b8:92:03:47:3f:eb:a9:c3:3a:
                    13:e5:71:c8:82:4d:ee:19:bb:55:af:00:94:99:6a:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B8:BB:53:44:FD:0D:44:80:CB:D4:79:25:BB:B3:BC:DE:7E:4B:16
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:90:89:64:ad:7d:cf:0e:a0:bb:2f:9c:c8:af:62:3d:21:86:
         a7:b1:f8:44:b2:a1:49:e8:d7:04:62:37:1c:e4:29:90:74:fe:
         22:92:0c:00:6a:75:3a:f0:80:da:e2:3a:51:b7:ea:e5:13:b0:
         e2:f2:92:4d:e3:75:67:cc:dc:74:85:39:49:e9:14:07:20:2a:
         81:19:07:f8:65:3f:8e:7a:1e:93:91:8f:51:0d:8b:56:3d:0a:
         dc:8f:67:ed:1b:e8:2b:82:a6:4f:fe:48:75:41:6f:d8:e9:e7:
         bd:97:59:4c:13:df:ab:30:ae:0c:2d:a6:e5:6d:b0:6e:a7:29:
         d0:50:1a:1f:10:1f:0a:dc:39:d0:99:53:b0:2f:f7:2d:9b:55:
         b7:ae:89:92:2d:cf:84:14:54:0d:fe:c7:7e:0e:b1:a0:e8:79:
         91:0b:1e:bf:0b:63:fd:e6:e2:24:18:35:66:ff:38:b7:68:7e:
         7d:6b:5a:f8:1e:52:f6:ca:05:00:d8:53:b3:9f:13:a0:02:fd:
         e1:f0:19:90:35:f4:50:ca:f3:19:fc:91:ed:06:04:00:4a:c0:
         bd:53:95:fa:57:4f:2f:9f:f6:d4:5b:09:f6:47:61:61:91:6a:
         73:64:a9:10:26:8f:e0:d0:b9:c2:4d:a3:40:a0:96:77:95:da:
         a0:2e:1f:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:17:43 2026 by rpki-client