Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0372F731E228898F042CA4B72C2AD7D1FAFDEE58CB62F574BC5D1932E83B0CF0/0/323830333a626233303a3a2f33322d3438203d3e20323735303235.roa
File:                     323830333a626233303a3a2f33322d3438203d3e20323735303235.roa (raw, json)
Hash identifier:          AmarBhkjebhwdgbOflGoXJnAyfKIUHwkt8IAMTCK5HM=
Subject key identifier:   5A:B6:DF:F0:A1:77:E9:A3:4F:A3:68:6F:CF:A8:59:BF:B7:AB:BE:83
Certificate issuer:       /CN=518A98771E42A6FF34F59DE885F0B57572B5FBD6
Certificate serial:       4CD931186DBA777F834FBCC8389AD6965FF36264
Authority key identifier: 51:8A:98:77:1E:42:A6:FF:34:F5:9D:E8:85:F0:B5:75:72:B5:FB:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/518A98771E42A6FF34F59DE885F0B57572B5FBD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0372F731E228898F042CA4B72C2AD7D1FAFDEE58CB62F574BC5D1932E83B0CF0/0/323830333a626233303a3a2f33322d3438203d3e20323735303235.roa
Signing time:             Tue 25 Aug 2026 16:45:00 +0000
ROA not before:           Tue 25 Aug 2026 16:40:00 +0000
ROA not after:            Tue 24 Aug 2027 16:45:00 +0000
asID:                     275025
IP address blocks:        2803:bb30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0372F731E228898F042CA4B72C2AD7D1FAFDEE58CB62F574BC5D1932E83B0CF0/0/518A98771E42A6FF34F59DE885F0B57572B5FBD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0372F731E228898F042CA4B72C2AD7D1FAFDEE58CB62F574BC5D1932E83B0CF0/0/518A98771E42A6FF34F59DE885F0B57572B5FBD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/518A98771E42A6FF34F59DE885F0B57572B5FBD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 20:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d9:31:18:6d:ba:77:7f:83:4f:bc:c8:38:9a:d6:96:5f:f3:62:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518A98771E42A6FF34F59DE885F0B57572B5FBD6
        Validity
            Not Before: Aug 25 16:40:00 2026 GMT
            Not After : Aug 24 16:45:00 2027 GMT
        Subject: CN=5AB6DFF0A177E9A34FA3686FCFA859BFB7ABBE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:da:a4:84:ff:c6:60:ef:e4:ff:e8:15:b6:
                    3a:02:7b:64:e4:b6:03:83:bb:12:8f:5b:59:f9:ea:
                    65:3d:54:eb:80:1e:06:b8:0c:de:d7:a2:fe:8d:0c:
                    45:ed:b0:d0:ca:84:1b:b9:28:b9:85:08:2a:e1:4d:
                    59:a7:54:a1:76:9e:6a:79:a9:1c:a3:9d:8b:b4:80:
                    04:40:60:8c:13:08:4a:9c:e1:77:9a:40:b7:f0:a4:
                    47:bb:53:48:da:6e:71:19:c5:40:62:73:ca:8e:af:
                    93:33:da:b0:cf:f5:af:55:7e:ba:c4:31:73:ad:25:
                    4b:17:82:ce:01:a9:71:43:1e:43:22:c7:94:c7:d1:
                    e8:b8:0e:0e:2b:da:7c:84:79:b9:50:0c:ef:74:28:
                    9f:b5:4a:fa:ab:11:56:42:df:ce:a2:1b:7e:3d:4f:
                    00:4c:18:76:1d:63:c1:b1:7e:5a:0f:b8:89:76:c0:
                    5c:75:31:b0:fa:34:ee:e2:f6:5a:da:00:d5:d0:58:
                    5c:33:5d:b6:79:3d:a1:a2:20:5f:e1:f9:64:d7:87:
                    f8:86:10:ed:49:69:74:f4:ea:05:a7:e4:a9:c4:68:
                    3b:18:4b:27:78:1c:21:63:f9:ea:50:81:db:6d:13:
                    51:44:8a:32:8b:31:9b:7e:b9:9d:27:18:31:f1:ea:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B6:DF:F0:A1:77:E9:A3:4F:A3:68:6F:CF:A8:59:BF:B7:AB:BE:83
            X509v3 Authority Key Identifier:
                keyid:51:8A:98:77:1E:42:A6:FF:34:F5:9D:E8:85:F0:B5:75:72:B5:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0372F731E228898F042CA4B72C2AD7D1FAFDEE58CB62F574BC5D1932E83B0CF0/0/518A98771E42A6FF34F59DE885F0B57572B5FBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/518A98771E42A6FF34F59DE885F0B57572B5FBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0372F731E228898F042CA4B72C2AD7D1FAFDEE58CB62F574BC5D1932E83B0CF0/0/323830333a626233303a3a2f33322d3438203d3e20323735303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb30::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:69:6f:5a:c6:e8:4e:88:5e:7a:cf:4e:03:40:48:2d:05:44:
         43:58:09:1b:51:3b:36:fb:6d:1a:a9:ff:34:97:6e:e3:85:80:
         81:8e:24:76:e0:2b:8a:24:90:dc:e9:7e:1b:56:e1:2f:ff:48:
         9b:c0:13:97:ff:a0:1c:e3:90:35:08:9e:19:37:7f:c3:f8:42:
         ac:d8:e4:ad:e1:7a:ed:e9:c1:42:ba:fa:05:00:e2:31:3d:47:
         6d:a4:89:ef:34:45:64:a7:01:f4:33:06:92:dd:6d:71:0a:24:
         2a:64:bc:35:e5:e5:a5:75:85:25:b4:3a:9c:63:d5:ee:66:88:
         83:64:8b:f8:f3:5e:a7:5c:4b:c6:9f:36:fa:ba:00:0a:fb:9b:
         bc:9b:b8:bc:22:fd:8c:ca:54:b2:d7:34:98:28:3f:cc:5c:a8:
         e5:f2:ab:c0:64:95:5f:d5:b7:4d:30:39:f9:c2:9e:26:2c:49:
         a3:32:7b:ae:14:6d:37:95:7a:e4:4f:4b:08:c3:67:26:ac:4a:
         df:fe:ee:a8:3d:fc:b6:26:b8:9e:eb:4d:9f:c6:c9:a3:f1:50:
         09:58:32:4b:91:33:e8:d6:31:b2:96:94:39:95:ad:d7:8e:ef:
         59:cb:42:e6:2a:35:fb:ad:cf:77:65:8b:84:00:3d:a2:cc:30:
         c9:6a:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:50 2026 by rpki-client