Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa
File:                     323830333a6138303a3a2f33322d3438203d3e20323731373733.roa (raw, json)
Hash identifier:          6BAHNgXuqHsV1CVYXDkw6madHTKigDMx5MLlsu2Rg4E=
Subject key identifier:   B6:DA:60:97:2D:C2:BB:71:35:BE:5E:34:2B:4E:35:9A:2D:1F:26:82
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       6B09A8CB5C133AEAE9B3A7C812F742FF0F78A79D
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa
Signing time:             Fri 15 May 2026 16:42:42 +0000
ROA not before:           Fri 15 May 2026 16:37:42 +0000
ROA not after:            Fri 14 May 2027 16:42:42 +0000
asID:                     271773
IP address blocks:        2803:a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 02:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:09:a8:cb:5c:13:3a:ea:e9:b3:a7:c8:12:f7:42:ff:0f:78:a7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: May 15 16:37:42 2026 GMT
            Not After : May 14 16:42:42 2027 GMT
        Subject: CN=B6DA60972DC2BB7135BE5E342B4E359A2D1F2682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:38:f9:9b:da:2f:69:67:2b:e4:d0:dc:e3:
                    ea:42:4e:2b:04:c7:a9:e7:b5:a0:74:6d:53:7f:a0:
                    9a:9d:72:8f:f8:a9:99:70:00:d1:a2:23:a0:11:28:
                    8e:a4:62:50:55:2a:29:58:f3:ae:a0:75:56:e7:69:
                    fb:81:f3:18:cf:51:fd:57:2f:8f:9a:9d:e2:8b:09:
                    46:a7:39:72:1d:a1:cf:d4:18:fb:5f:99:8f:54:1d:
                    7e:f8:35:88:0b:44:ff:83:26:3f:33:93:6a:d7:35:
                    38:ce:28:6f:23:98:77:a0:03:84:e3:cf:0f:39:81:
                    8e:de:19:70:7d:c4:4c:af:28:0e:9d:28:b3:9c:7e:
                    00:b6:03:de:5b:f8:2c:25:93:25:ce:62:91:fc:9d:
                    c2:8b:e1:e8:f6:33:a5:24:8f:0a:94:cc:60:69:74:
                    d1:dc:dc:48:b7:f7:94:23:09:7b:2e:9b:f1:2f:ef:
                    0f:90:98:0c:10:9f:cf:b0:bc:5a:62:a1:09:ab:85:
                    cf:69:6c:42:8a:10:c3:fa:03:a7:80:9a:ab:cb:8e:
                    7a:c0:61:9b:8d:7c:95:f1:bb:2e:01:8e:fb:72:f6:
                    d2:eb:48:84:10:57:9a:73:cf:c2:49:89:6b:1e:2d:
                    ec:7d:a4:ef:c8:77:fa:0f:3d:8e:0d:69:95:4f:90:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DA:60:97:2D:C2:BB:71:35:BE:5E:34:2B:4E:35:9A:2D:1F:26:82
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:df:0b:2d:30:2c:1e:36:44:00:84:90:ac:b2:7a:17:be:
         25:a3:98:d2:65:09:82:16:05:9d:a8:ec:a2:ed:35:1f:63:0f:
         1d:6e:5e:0a:96:f1:66:87:b9:7e:30:f5:9c:97:d1:79:2c:88:
         99:53:93:9a:89:1b:35:6e:97:a3:a9:9d:3d:8a:b3:85:7d:20:
         32:97:9e:4b:3a:32:68:7d:b1:18:ee:b6:be:63:97:20:88:42:
         b0:3a:5b:b3:d7:4a:ef:80:c4:2e:a8:f4:d2:e5:06:3a:cb:fb:
         1a:93:df:89:c4:29:f2:79:4d:2d:15:7c:a7:8b:66:d3:49:c9:
         78:d4:0b:a8:43:54:a2:c4:4a:27:d4:4e:c2:76:fb:bf:78:79:
         ac:f4:ef:49:e3:7c:01:5d:87:cb:2d:15:4f:f6:da:44:fa:60:
         94:29:15:5f:14:05:98:2f:6c:b0:24:62:49:d2:79:4e:ce:2e:
         45:1b:24:f5:42:f3:ea:9e:ca:64:4a:78:ef:67:be:a3:68:76:
         d0:62:e3:bc:76:30:8b:92:fe:46:c8:78:6e:c6:be:19:92:c8:
         03:80:f5:d5:0a:da:d0:01:54:1e:3b:f6:b5:d6:ae:15:82:fa:
         ce:75:98:a0:fc:b5:ee:2f:1a:a5:b2:3b:88:7c:e6:b7:80:3f:
         13:22:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:06:04 2026 by rpki-client