Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a3a2f33322d3438203d3e20323636383737.roa
File:                     323830333a646538303a3a2f33322d3438203d3e20323636383737.roa (raw, json)
Hash identifier:          sNUWsa9vMLObhoG2UsgHnOjWNtPLO3SraGd6kJfz3Uk=
Subject key identifier:   9B:4A:B0:63:97:7D:DC:A8:F4:54:75:27:F0:94:08:45:55:92:A3:8C
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       596149564396086758B70A3446B2E6796C9ACD9E
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a3a2f33322d3438203d3e20323636383737.roa
Signing time:             Thu 14 May 2026 21:42:36 +0000
ROA not before:           Thu 14 May 2026 21:37:36 +0000
ROA not after:            Thu 13 May 2027 21:42:36 +0000
asID:                     266877
IP address blocks:        2803:de80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 07:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:61:49:56:43:96:08:67:58:b7:0a:34:46:b2:e6:79:6c:9a:cd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: May 14 21:37:36 2026 GMT
            Not After : May 13 21:42:36 2027 GMT
        Subject: CN=9B4AB063977DDCA8F4547527F09408455592A38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:ad:ed:cd:52:bd:e3:c0:55:31:29:e8:93:
                    53:66:c0:3a:0d:4c:c4:00:84:41:99:84:a1:4a:cb:
                    5c:b0:e8:84:b8:72:67:cf:4a:2b:b3:b9:da:b7:0d:
                    29:7a:98:7b:b6:14:a9:97:e7:0d:56:0e:15:80:fc:
                    27:07:e7:49:17:c5:41:c9:fe:09:de:4a:e7:c5:c0:
                    c1:dc:f0:ea:50:dd:02:bf:d6:a4:63:cf:da:ea:8b:
                    32:da:b6:ca:dc:5d:ef:b5:00:3e:34:97:bb:c5:5b:
                    d4:72:0c:a8:74:4c:b2:d3:8a:c1:c1:8b:3f:e7:ae:
                    fe:76:88:7b:a1:25:6b:f1:73:52:71:0a:42:60:98:
                    05:56:78:d6:12:85:c8:95:2a:59:4f:24:c6:b6:5b:
                    0e:28:89:81:1b:67:a2:02:97:e4:d1:0d:86:19:83:
                    48:da:98:77:d6:66:cb:2f:56:b7:4e:70:d0:d7:77:
                    ca:cb:8b:91:6c:9c:6c:7d:35:4c:6b:7d:d1:07:82:
                    3e:ce:cf:4c:fd:42:8c:1e:83:96:ac:72:2d:29:6d:
                    e5:ec:e5:8b:c3:e0:7c:39:67:b9:07:4c:21:3f:c4:
                    fc:b5:fd:15:34:cf:7d:d2:22:f4:d1:21:e0:12:6a:
                    ab:42:42:a2:cc:ed:ea:b5:53:01:24:8c:fb:fd:38:
                    cb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:B0:63:97:7D:DC:A8:F4:54:75:27:F0:94:08:45:55:92:A3:8C
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a3a2f33322d3438203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:62:02:0b:04:5c:ca:ef:44:3d:81:6f:45:0d:c8:36:f2:20:
         82:41:24:9b:98:dd:57:88:8d:b1:03:46:2b:8c:d4:74:0c:46:
         69:98:92:af:fc:c7:70:9f:6d:ed:40:f5:2f:00:39:56:70:f1:
         ff:34:63:af:e5:04:05:53:5a:e5:3b:96:b2:b7:47:55:6c:f9:
         e0:42:49:4f:ed:59:d1:5e:b8:1b:1b:bc:74:70:d2:7f:ff:9e:
         ed:7d:84:e8:24:84:4b:f3:e4:b3:4a:42:fe:12:fb:bd:f3:34:
         71:a2:26:16:0a:48:12:41:2f:15:2e:d0:08:c9:26:11:4e:95:
         ae:16:48:ca:85:54:72:ec:73:81:3f:12:c0:8b:bb:4c:1b:9a:
         18:8d:ca:35:2e:cf:91:87:7f:8a:df:1d:42:0c:fd:5a:43:2c:
         6a:4b:e8:23:a4:62:0d:08:7a:47:c0:ad:d5:d8:03:67:6c:a5:
         6c:42:9f:bc:9c:b9:12:49:16:76:9d:65:d6:ae:1d:76:7a:9c:
         15:5a:ad:59:79:44:a3:30:a2:37:8f:f2:60:ba:bd:c1:5c:8e:
         a3:d5:1d:92:4c:fc:32:6c:16:94:3e:8a:a6:20:65:5e:1e:ff:
         7d:90:4b:d6:b2:e1:6e:df:2e:66:28:46:ec:48:d5:02:75:25:
         f8:db:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:07:55 2026 by rpki-client