Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3438203d3e20323732393931.roa
File:                     323830333a323536303a3a2f33322d3438203d3e20323732393931.roa (raw, json)
Hash identifier:          dexu8DodcrxB4FQSZ/TV8CZTU1KQ+lIgGgbVGxZzDTA=
Subject key identifier:   21:14:45:8E:01:4F:7E:AA:99:20:9E:96:A0:15:AB:75:92:89:B5:A8
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       0F8A6E3D55BB529F33E3D9B566CD85A06D5C7CD8
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3438203d3e20323732393931.roa
Signing time:             Tue 30 Jun 2026 18:50:23 +0000
ROA not before:           Tue 30 Jun 2026 18:45:23 +0000
ROA not after:            Tue 29 Jun 2027 18:50:23 +0000
asID:                     272991
IP address blocks:        2803:2560::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8a:6e:3d:55:bb:52:9f:33:e3:d9:b5:66:cd:85:a0:6d:5c:7c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Jun 30 18:45:23 2026 GMT
            Not After : Jun 29 18:50:23 2027 GMT
        Subject: CN=2114458E014F7EAA99209E96A015AB759289B5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:1b:77:96:07:58:0c:73:49:d2:4a:e4:6b:
                    c2:b4:3c:1b:1c:91:99:d8:96:08:be:ab:b8:51:af:
                    d6:eb:01:fd:4e:68:c2:6b:2e:72:85:61:71:a8:ab:
                    2a:c2:80:1b:18:f7:7a:20:e9:3a:d1:1d:24:d6:7f:
                    89:24:8e:80:f9:ec:06:c6:df:ff:3b:ee:dc:fe:55:
                    e1:5a:66:22:10:e7:71:83:8a:61:72:1b:2c:a6:9c:
                    93:4f:db:0f:ba:20:b9:86:61:e8:98:73:e1:c9:c5:
                    ad:ba:75:3a:b4:e1:0d:e4:05:2c:1e:4b:d1:f0:0a:
                    73:44:ac:8e:b1:85:e6:28:1b:9f:9a:92:54:13:2f:
                    6e:9a:b2:37:c5:21:01:f7:53:a5:dd:b1:86:fa:ad:
                    ef:27:02:8a:e3:4a:55:20:64:1d:00:c5:e9:7e:c8:
                    77:df:de:d9:fd:2d:1f:c5:a9:a6:2e:84:f2:8e:5c:
                    00:3a:d3:6c:ef:17:91:4e:03:cf:d0:21:e8:65:83:
                    91:42:1e:d7:68:bd:59:df:6a:1a:64:4b:ef:da:79:
                    4c:d1:98:99:3c:d5:ac:ea:24:96:34:47:9c:96:2b:
                    28:99:9f:e9:fc:fb:f0:a7:da:4a:4b:4e:0d:99:b7:
                    20:f9:34:33:c1:7e:53:26:27:e7:58:47:df:94:cd:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:14:45:8E:01:4F:7E:AA:99:20:9E:96:A0:15:AB:75:92:89:B5:A8
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3438203d3e20323732393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2560::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:fc:be:5b:64:8c:36:a9:fd:4c:4a:1b:87:73:cc:47:0a:
         40:61:4a:7e:c3:4e:c6:a4:50:31:09:2d:9d:d0:5d:b5:e9:9d:
         2b:b2:09:09:6d:6a:f7:33:1b:6f:63:5e:5e:49:f3:ab:c8:d1:
         82:56:29:da:c2:64:2e:f2:88:48:24:0a:1b:de:cd:78:c0:e3:
         29:72:ed:bc:a9:fc:1b:cc:11:bd:db:31:aa:34:70:ff:93:46:
         3f:d3:55:63:eb:67:02:5f:2a:ff:55:5e:69:95:d1:58:63:6f:
         9a:8c:1b:00:ea:64:7a:44:54:46:76:34:1b:6d:f3:70:9e:c8:
         b1:36:6d:eb:08:95:08:99:6c:18:80:63:b4:2e:6f:17:e2:e9:
         0e:0c:8b:5c:e0:03:34:da:49:1e:e1:f8:d4:ca:a6:d1:6e:9e:
         03:46:2a:da:c2:f6:e7:8f:ac:fb:35:53:f0:b3:06:5d:a7:27:
         d8:bc:a8:3b:b0:4b:ef:2c:66:12:9e:92:ab:ad:04:1d:c3:b1:
         f0:c2:a9:05:e8:ac:43:08:3e:ff:17:41:9f:78:68:79:f9:b9:
         27:ef:ba:04:b2:ef:8b:a8:41:c5:86:32:18:93:ec:bd:cf:57:
         22:7c:5c:8e:91:1d:85:da:8f:67:9c:84:63:49:61:ba:a9:bb:
         ae:04:b2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:23:36 2026 by rpki-client