Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33372d3337203d3e20323634373834.roa
File:                     323830333a613932303a323030303a3a2f33372d3337203d3e20323634373834.roa (raw, json)
Hash identifier:          U2RivxiHKS3o5uULergnsX8M6vuSIssMQj47UeJd/p0=
Subject key identifier:   3E:64:F5:54:ED:04:C9:E8:00:34:9E:F4:B2:CC:BF:03:0B:3B:10:64
Certificate issuer:       /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial:       2E923194BB9BD5C4F654751003DCC414F76EAF5B
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33372d3337203d3e20323634373834.roa
Signing time:             Fri 15 May 2026 19:20:01 +0000
ROA not before:           Fri 15 May 2026 19:15:01 +0000
ROA not after:            Fri 14 May 2027 19:20:01 +0000
asID:                     264784
IP address blocks:        2803:a920:2000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 03:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:92:31:94:bb:9b:d5:c4:f6:54:75:10:03:dc:c4:14:f7:6e:af:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
        Validity
            Not Before: May 15 19:15:01 2026 GMT
            Not After : May 14 19:20:01 2027 GMT
        Subject: CN=3E64F554ED04C9E800349EF4B2CCBF030B3B1064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ba:69:21:16:7f:d7:a3:85:96:2c:3e:1d:54:
                    5c:b6:5a:02:e4:ec:87:19:97:a7:df:0b:82:e1:80:
                    c8:14:b7:24:38:df:fa:fc:bb:7b:5b:a1:8b:61:81:
                    56:51:a2:22:93:b0:68:81:ad:61:b1:9d:3a:9d:4b:
                    98:88:26:a0:fd:ac:aa:62:7d:b3:72:4e:f2:7b:a6:
                    17:a5:20:cf:3d:87:a7:fa:f5:16:1d:14:c0:62:db:
                    71:3d:b3:a7:53:de:33:ce:44:4e:62:26:bc:32:ed:
                    73:22:80:42:f2:4f:6b:21:d4:13:ff:63:bd:74:a6:
                    7d:a2:6f:85:5f:8a:f9:df:7f:2c:45:8b:c6:6f:cd:
                    b6:4f:3c:96:eb:26:29:5e:47:c8:39:2c:78:33:e9:
                    45:e6:44:a4:2a:aa:25:b3:f5:1f:d0:79:e5:8b:70:
                    bb:7e:14:c0:0f:d0:3c:e3:ce:ac:99:e5:24:28:56:
                    e8:de:42:1f:b2:ff:1d:ec:f5:4f:a4:3c:9b:ea:1c:
                    bd:d2:96:27:7b:f8:7a:89:ec:af:af:81:e5:32:19:
                    a4:ff:17:ab:a7:c0:3b:2a:ae:84:7e:f2:2e:ff:a4:
                    f6:35:d6:bf:1e:30:a0:0d:f9:d2:a2:9e:2b:f6:c4:
                    9a:92:f4:f6:81:b2:7a:37:51:9f:05:4f:ab:c5:e5:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:64:F5:54:ED:04:C9:E8:00:34:9E:F4:B2:CC:BF:03:0B:3B:10:64
            X509v3 Authority Key Identifier:
                keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33372d3337203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a920:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         6b:48:f1:6e:d7:e2:15:e6:03:0f:1e:f7:17:9e:09:ca:02:32:
         49:b6:ad:a0:07:df:52:62:6d:0b:85:9c:c7:82:43:e3:42:04:
         53:36:75:c1:f1:b4:d7:0b:60:9c:c2:3e:b3:a9:34:55:28:cb:
         47:b2:de:1c:87:a4:d8:24:6b:56:0e:3a:b2:dc:5a:49:ab:e8:
         46:8a:34:f8:8d:b5:95:51:df:80:00:20:02:3e:7f:ba:b3:90:
         41:03:39:8d:cc:2d:b5:77:84:41:27:77:ac:c0:ff:9e:6e:80:
         e6:54:3f:64:9b:72:b0:ef:79:12:4e:61:28:40:05:64:0c:6b:
         e7:c5:0c:b9:af:53:57:81:f3:14:b0:1d:f7:af:8d:af:bd:ad:
         80:91:c1:a5:10:34:65:fa:04:0b:76:3d:62:bb:69:fe:87:d7:
         ca:5b:9a:9a:14:15:62:5d:48:dd:ef:b5:eb:74:b1:62:18:02:
         66:ce:46:a8:4a:01:c5:ae:04:89:4c:e8:7c:65:e2:b5:91:69:
         77:56:1d:28:67:cc:75:48:c5:0d:e0:5c:87:84:92:f9:3c:15:
         f8:e5:8f:fd:3b:61:e2:50:dd:29:ee:c5:71:8b:66:12:f2:38:
         1b:d2:26:c1:f4:15:c2:15:3e:fa:23:2e:67:85:cb:a2:19:3e:
         64:38:89:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:26:45 2026 by rpki-client