Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33322d3430203d3e20323633373332.roa
File:                     323830333a616638303a3a2f33322d3430203d3e20323633373332.roa (raw, json)
Hash identifier:          lDgisEn3JEF78b0ypbGR8u5kmFvBIydKX28vOyNmEKA=
Subject key identifier:   E5:A1:9E:72:2D:DB:28:FD:33:E9:48:68:54:40:A4:94:D7:44:E5:E1
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       4D27C6BB4DEC02A5381146D9630D02923FE11330
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33322d3430203d3e20323633373332.roa
Signing time:             Fri 28 Aug 2026 20:32:54 +0000
ROA not before:           Fri 28 Aug 2026 20:27:54 +0000
ROA not after:            Fri 27 Aug 2027 20:32:54 +0000
asID:                     263732
IP address blocks:        2803:af80::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Sep 2026 07:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:27:c6:bb:4d:ec:02:a5:38:11:46:d9:63:0d:02:92:3f:e1:13:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Aug 28 20:27:54 2026 GMT
            Not After : Aug 27 20:32:54 2027 GMT
        Subject: CN=E5A19E722DDB28FD33E948685440A494D744E5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:f9:b1:62:fe:db:fe:f4:8c:ad:bf:5e:04:
                    1a:26:d0:75:59:b1:d0:df:ff:fc:8e:47:19:69:c8:
                    6d:00:dc:1a:1a:ee:f2:fc:f1:b3:01:e1:83:a7:07:
                    33:fa:dd:80:01:cf:1f:61:8b:a4:31:fb:0e:a5:f6:
                    a6:9a:6e:51:e8:80:5c:97:2d:17:09:15:16:9d:0f:
                    5e:d3:2d:3f:4c:93:1e:60:6d:5f:87:ca:29:b9:69:
                    29:9f:a0:22:c6:f3:23:63:8b:a0:85:9a:b4:08:89:
                    ee:d6:8b:00:20:e3:b5:c1:10:19:99:01:51:be:93:
                    30:b3:32:40:52:6d:91:af:8a:c9:d5:18:1c:57:13:
                    b6:ea:92:72:88:9b:54:b7:c0:3b:f2:64:bd:71:b8:
                    0e:51:fd:bc:cf:fe:e2:f8:fa:08:4f:d1:17:24:24:
                    08:2b:05:8f:dc:51:e7:b0:39:af:39:74:a5:b4:0c:
                    8e:50:e3:5d:51:52:07:23:8a:18:59:70:6f:78:a9:
                    b4:eb:b1:4f:6f:00:42:64:9a:a5:25:a3:87:4f:65:
                    82:45:ed:17:61:57:32:7f:1f:42:5f:b3:50:a4:1b:
                    87:b7:f5:9a:54:ad:69:07:28:91:2d:89:82:2f:42:
                    fc:73:32:70:2c:ae:61:23:12:bb:66:15:98:1d:c9:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A1:9E:72:2D:DB:28:FD:33:E9:48:68:54:40:A4:94:D7:44:E5:E1
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33322d3430203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af80::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:c5:6f:e6:2c:a3:9d:8d:28:e3:e5:af:03:e3:8a:16:68:e6:
         8f:01:ff:5a:7e:18:ba:85:c9:e5:f6:4f:f6:d9:4f:cc:d8:8f:
         af:69:3a:37:bb:8e:06:37:96:cc:dd:a4:13:4c:91:de:da:ef:
         de:bf:fd:a3:b0:7a:36:0f:64:82:6d:12:56:3f:95:7a:86:c4:
         0e:b5:04:60:05:c6:d7:f0:4a:76:9d:15:8a:84:28:ca:f8:c2:
         ec:ae:d4:c8:11:00:bb:ba:c4:71:13:6e:57:49:c3:e6:4b:da:
         ad:31:53:50:96:fa:15:9b:65:3d:b9:79:87:39:a7:9e:71:61:
         c1:c5:1c:33:c4:a4:bf:70:d9:a8:fb:56:16:bd:e1:8a:dd:49:
         ba:c9:b6:df:0c:9d:59:ad:1f:fe:2f:6c:dd:02:1b:42:eb:58:
         94:5b:77:8b:bf:b6:12:1e:e9:53:d1:c2:79:b0:99:b9:eb:79:
         93:06:b4:e5:02:de:59:c2:bb:59:df:19:8e:48:5f:f3:7b:0f:
         fd:d7:fe:8f:1f:9b:c1:e9:cc:a2:31:ec:ef:e6:aa:6c:16:e6:
         b9:ba:20:84:23:71:1f:a4:a3:81:76:a4:50:e3:e9:3b:18:de:
         33:d5:3d:b4:1a:b5:ce:c0:e8:3c:09:3d:ce:c6:26:89:0a:12:
         76:f5:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:05:57 2026 by rpki-client