Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203237383933.roa
File:                     323830303a613033303a3a2f33322d3634203d3e203237383933.roa (raw, json)
Hash identifier:          FxGEZ/sXMhJwCIbqCEFp7CgQuALwx0aG16Se0qXyLgg=
Subject key identifier:   A1:01:0D:D4:C5:F2:6E:84:47:EF:A0:AA:D9:FE:F6:03:E4:DA:E9:6A
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       42A5A506192FAB853F2428E2C42E06390D66BDEC
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203237383933.roa
Signing time:             Fri 26 Jun 2026 23:50:09 +0000
ROA not before:           Fri 26 Jun 2026 23:45:09 +0000
ROA not after:            Fri 25 Jun 2027 23:50:09 +0000
asID:                     27893
IP address blocks:        2800:a030::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a5:a5:06:19:2f:ab:85:3f:24:28:e2:c4:2e:06:39:0d:66:bd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Jun 26 23:45:09 2026 GMT
            Not After : Jun 25 23:50:09 2027 GMT
        Subject: CN=A1010DD4C5F26E8447EFA0AAD9FEF603E4DAE96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:b7:3b:0b:e2:94:91:07:3c:06:30:98:b6:
                    45:1d:4b:9c:07:37:db:da:08:2d:49:18:85:94:40:
                    2e:b3:f3:9d:77:08:07:2a:06:b7:81:3b:b2:5c:19:
                    f8:83:98:f7:2a:b5:e5:bd:e7:51:92:c4:02:f3:14:
                    be:57:3c:ae:50:29:f2:a0:d2:d2:8e:6b:77:cd:3d:
                    af:a0:4a:44:34:ef:c7:8d:a0:0e:30:3f:89:1d:fc:
                    11:7a:2a:97:25:4e:95:ff:bc:ac:c7:73:a1:cc:cd:
                    82:a9:e0:f8:2c:9b:40:bc:9a:6e:81:8c:f2:3c:01:
                    ae:40:a2:d3:21:84:b0:be:27:68:10:8e:eb:4f:e2:
                    e4:30:7e:27:1b:ec:dd:72:13:7b:98:dd:55:7e:cf:
                    f2:71:8b:de:9c:10:39:ef:35:6a:49:8e:54:ab:c0:
                    aa:2a:f7:d7:31:4e:9f:69:09:ff:c5:15:34:06:61:
                    bb:0f:86:5b:52:13:bb:72:2c:ad:7a:ab:81:d4:09:
                    12:3f:fa:8d:26:54:43:80:24:f9:3b:be:39:24:51:
                    19:ea:97:f9:23:56:e2:21:fa:58:43:31:7e:69:51:
                    5d:36:46:6e:35:4a:6b:21:b3:e9:97:e9:ef:b0:4b:
                    c0:3b:8b:98:d7:92:d8:6c:65:dd:28:d4:84:4d:61:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:01:0D:D4:C5:F2:6E:84:47:EF:A0:AA:D9:FE:F6:03:E4:DA:E9:6A
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203237383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a030::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:ce:6c:68:68:ac:bd:d6:8c:ec:c4:fc:e4:4c:c2:4e:f7:da:
         51:bc:cf:02:0a:9d:89:64:f1:e6:e5:26:7e:73:87:a9:d4:72:
         fa:cf:be:83:b3:08:a9:9b:d7:48:8f:34:17:4e:23:db:1c:f8:
         ca:b2:18:a5:af:21:61:8a:b4:af:de:03:db:c1:99:1e:1f:71:
         65:c6:84:f5:85:1d:16:71:b1:0f:fe:c7:36:f5:d0:29:57:b9:
         98:b6:9d:27:16:ce:03:de:f9:c5:ad:6d:92:39:b3:ef:4e:b4:
         55:12:31:48:12:15:da:59:77:ef:ee:c3:3e:ee:35:37:41:21:
         ae:cb:37:71:02:77:ab:7d:c4:a0:be:b9:22:f5:ab:fe:61:21:
         f7:18:0c:ac:79:c7:67:7c:bd:c9:cb:21:b0:60:03:1f:4a:af:
         b2:25:40:f4:e8:6b:cd:2c:f3:e6:75:60:6f:e6:ae:03:02:34:
         d1:a4:ba:71:45:c0:0d:e5:ee:21:b1:a1:f8:12:0d:c6:98:c6:
         01:bd:1a:c0:23:8f:cd:5d:ad:1c:2f:95:5c:08:15:c0:e2:ec:
         e0:ae:36:ee:0b:5e:ad:3d:52:06:97:61:05:10:5e:a2:a4:e8:
         8d:10:86:88:43:45:0f:76:1d:ff:c8:af:e2:52:89:6e:34:c9:
         bb:40:10:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:49:28 2026 by rpki-client