Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa
File:                     323830333a393465303a3a2f33322d3438203d3e20323639383933.roa (raw, json)
Hash identifier:          sO6S7kCTe+RJGUKDOv9gvZf/qxQejPd/VFUgoXaFaAs=
Subject key identifier:   79:08:A8:99:28:37:F2:9A:15:C4:00:0B:4D:E6:4F:78:0B:0E:3E:07
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       4A8890DBFE7D5CB999ABEC013160B4C8EFA6F05D
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa
Signing time:             Fri 29 May 2026 17:44:44 +0000
ROA not before:           Fri 29 May 2026 17:39:44 +0000
ROA not after:            Fri 28 May 2027 17:44:44 +0000
asID:                     269893
IP address blocks:        2803:94e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:88:90:db:fe:7d:5c:b9:99:ab:ec:01:31:60:b4:c8:ef:a6:f0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: May 29 17:39:44 2026 GMT
            Not After : May 28 17:44:44 2027 GMT
        Subject: CN=7908A8992837F29A15C4000B4DE64F780B0E3E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:54:16:7b:57:0a:1b:44:51:ac:87:74:fb:
                    c3:d9:09:d2:7f:09:43:cf:96:c8:6e:c9:fb:37:dd:
                    37:e5:a6:5a:e0:e3:77:f2:96:15:27:b3:f4:85:2c:
                    4e:37:fa:8b:0a:63:88:74:ef:00:09:e1:27:49:4c:
                    6a:d3:25:77:45:f2:b9:a0:9f:82:90:c3:69:c2:1c:
                    77:08:a8:ee:fc:57:69:4a:33:61:9a:fc:19:3e:e1:
                    33:81:b5:4d:b2:d7:ec:6b:ee:2e:3d:e1:cf:e5:8c:
                    f5:ed:7f:5b:9a:05:f3:a9:21:fe:57:ad:9b:dd:14:
                    ba:21:a8:fd:ad:16:90:4c:55:89:c0:e6:85:e4:6b:
                    69:5d:e5:30:5f:97:29:b1:e7:fb:32:93:17:97:58:
                    8c:04:eb:28:22:2a:e2:97:20:73:42:db:97:a8:02:
                    32:12:79:ae:dc:b9:b5:8d:37:1e:f3:30:26:48:05:
                    96:bd:f6:b7:95:1a:5f:4c:1f:16:eb:6f:4c:62:43:
                    00:6b:bb:58:3f:05:29:78:96:b1:59:78:51:28:35:
                    84:d7:7f:35:cb:2f:59:08:60:1d:22:7d:8f:5d:2c:
                    ef:33:c6:a7:11:8d:c6:39:c5:b0:e7:d9:c5:a1:9f:
                    a9:fb:d9:19:ee:6e:e1:67:29:6d:87:e3:bb:b5:04:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:A8:99:28:37:F2:9A:15:C4:00:0B:4D:E6:4F:78:0B:0E:3E:07
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:66:8d:4e:e1:e5:9e:c8:ec:c3:b2:40:fb:a7:86:b4:5c:
         70:c4:c8:ee:02:ea:fe:ee:17:89:7f:91:37:43:0d:17:8f:73:
         bf:9a:10:0e:d1:eb:03:27:f5:27:88:ec:d8:1a:d7:09:8e:e8:
         4b:b6:b9:ad:8d:8b:3d:81:d2:1b:92:f0:94:c2:02:ae:6a:6b:
         60:6b:62:ad:fd:bd:ba:b1:85:27:8b:a6:ea:22:be:63:f9:6b:
         0c:de:5c:52:d8:b2:4f:46:ac:10:d7:53:2b:2a:60:88:09:2f:
         47:f8:2a:b2:df:4d:9b:4e:be:77:7e:90:05:c3:f6:67:b1:6b:
         c8:4d:e8:84:56:97:0a:61:63:88:a0:4e:51:1d:92:c7:fe:5d:
         c6:35:56:b6:6b:41:0b:3b:32:d4:d4:2f:77:25:3c:db:2d:77:
         c4:93:31:fe:7f:a8:42:1f:9f:57:93:10:a0:24:93:6c:30:cc:
         24:ab:14:07:65:43:99:1c:fa:58:3c:ad:d6:7c:ef:79:73:b6:
         e3:91:6d:5e:ad:ae:31:a5:33:64:70:c3:c5:05:37:28:9f:6d:
         ba:00:03:0f:e0:96:46:18:72:b7:4a:bf:8f:aa:d1:78:85:77:
         da:42:43:f2:5d:ef:6c:64:c5:e2:39:a8:2c:17:b0:fa:07:a7:
         9c:e4:ce:49
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSoiQ2/59XLmZq+wBMWC0yO+m8F0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc4OTlBNDg0OUY1NTFCQkMyRjRGODcwRjBFQ0VBNUE2
NkJCQjdGMTAeFw0yNjA1MjkxNzM5NDRaFw0yNzA1MjgxNzQ0NDRaMDMxMTAvBgNV
BAMTKDc5MDhBODk5MjgzN0YyOUExNUM0MDAwQjRERTY0Rjc4MEIwRTNFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWVQWe1cKG0RRrId0+8PZCdJ/
CUPPlshuyfs33Tflplrg43fylhUns/SFLE43+osKY4h07wAJ4SdJTGrTJXdF8rmg
n4KQw2nCHHcIqO78V2lKM2Ga/Bk+4TOBtU2y1+xr7i494c/ljPXtf1uaBfOpIf5X
rZvdFLohqP2tFpBMVYnA5oXka2ld5TBflymx5/sykxeXWIwE6ygiKuKXIHNC25eo
AjISea7cubWNNx7zMCZIBZa99reVGl9MHxbrb0xiQwBru1g/BSl4lrFZeFEoNYTX
fzXLL1kIYB0ifY9dLO8zxqcRjcY5xbDn2cWhn6n72RnubuFnKW2H47u1BJW/AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUeQiomSg38poVxAALTeZPeAsOPgcwHwYDVR0j
BBgwFoAUl4maSEn1UbvC9Phw8OzqWma7t/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUUwOEFBNzZFRjdBRTRFRjQ3QUI2Q0Y1NjkyNERGOTcw
QUJDMUI0MERGRTM3NEIwMzJEMDVGNkJFQTUwQ0ZCLzAvOTc4OTlBNDg0OUY1NTFC
QkMyRjRGODcwRjBFQ0VBNUE2NkJCQjdGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Nzg5OUE0ODQ5RjU1MUJCQzJG
NEY4NzBGMEVDRUE1QTY2QkJCN0YxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVFMDhBQTc2RUY3QUU0RUY0N0FCNkNGNTY5MjRERjk3MEFCQzFCNDBE
RkUzNzRCMDMyRDA1RjZCRUE1MENGQi8wLzMyMzgzMDMzM2EzOTM0NjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM4MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDlOAw
DQYJKoZIhvcNAQELBQADggEBAHW5Zo1O4eWeyOzDskD7p4a0XHDEyO4C6v7uF4l/
kTdDDRePc7+aEA7R6wMn9SeI7Nga1wmO6Eu2ua2Niz2B0huS8JTCAq5qa2BrYq39
vbqxhSeLpuoivmP5awzeXFLYsk9GrBDXUysqYIgJL0f4KrLfTZtOvnd+kAXD9mex
a8hN6IRWlwphY4igTlEdksf+XcY1VrZrQQs7MtTUL3clPNstd8STMf5/qEIfn1eT
EKAkk2wwzCSrFAdlQ5kc+lg8rdZ873lztuORbV6trjGlM2Rww8UFNyifbboAAw/g
lkYYcrdKv4+q0XiFd9pCQ/Jd72xkxeI5qCwXsPoHp5zkzkk=
-----END CERTIFICATE-----
Generated at Fri May 29 23:17:20 2026 by rpki-client