Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/323830333a323735303a3a2f33322d3438203d3e20323733393236.roa
File:                     323830333a323735303a3a2f33322d3438203d3e20323733393236.roa (raw, json)
Hash identifier:          8rw8GZKCkU+igvGpmFaR4ZUz6IQSyMHtBY/Ed/mcHp0=
Subject key identifier:   C3:61:CE:DE:E2:FB:B5:9E:F8:AA:04:8D:DE:77:7C:1F:95:C9:11:40
Certificate issuer:       /CN=03018AF635561448E473E5A53283475675551075
Certificate serial:       36045227DF0E1B92BDE04E26B3D7DAC73C8E0F33
Authority key identifier: 03:01:8A:F6:35:56:14:48:E4:73:E5:A5:32:83:47:56:75:55:10:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03018AF635561448E473E5A53283475675551075.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/323830333a323735303a3a2f33322d3438203d3e20323733393236.roa
Signing time:             Thu 03 Sep 2026 19:33:43 +0000
ROA not before:           Thu 03 Sep 2026 19:28:43 +0000
ROA not after:            Thu 02 Sep 2027 19:33:43 +0000
asID:                     273926
IP address blocks:        2803:2750::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/03018AF635561448E473E5A53283475675551075.crl
                          rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/03018AF635561448E473E5A53283475675551075.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03018AF635561448E473E5A53283475675551075.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:04:52:27:df:0e:1b:92:bd:e0:4e:26:b3:d7:da:c7:3c:8e:0f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03018AF635561448E473E5A53283475675551075
        Validity
            Not Before: Sep  3 19:28:43 2026 GMT
            Not After : Sep  2 19:33:43 2027 GMT
        Subject: CN=C361CEDEE2FBB59EF8AA048DDE777C1F95C91140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:ae:28:db:fb:f3:f8:e1:6b:03:0e:f6:ac:
                    59:1c:65:72:98:41:00:de:fa:f7:55:53:e9:7e:f1:
                    9a:33:c1:e4:77:81:bc:52:ad:f6:a0:36:3c:6a:4c:
                    de:e7:a3:11:96:69:af:e8:32:30:3d:89:b6:44:bc:
                    ac:32:fd:6f:c5:d6:7f:c9:15:30:20:fe:74:c4:3b:
                    80:4f:94:d9:ae:b1:b4:a0:7d:50:42:f5:75:62:6b:
                    8b:11:ef:48:37:78:9c:5f:c3:35:98:91:ce:ba:d5:
                    06:08:ea:f4:6b:81:44:99:0d:c9:9d:c9:99:8e:87:
                    a7:84:b3:5f:8f:60:19:7b:93:db:73:a3:ea:a5:e6:
                    92:08:2e:9e:c0:52:5f:ff:e0:a4:2c:d7:09:12:90:
                    98:68:aa:30:d7:dd:6f:64:4b:13:2e:f0:dc:0e:57:
                    d3:40:2d:01:b3:11:04:a2:12:33:91:f3:f2:25:df:
                    bb:37:11:50:ae:6d:55:83:a5:97:57:fc:e9:65:98:
                    12:7d:b6:bc:b0:a0:aa:a7:c5:c8:86:1f:bd:99:f3:
                    a7:24:a9:49:0b:c2:eb:de:f6:ea:04:94:81:70:fc:
                    03:08:41:1b:a9:cc:c2:69:8e:3e:73:1a:74:c3:9c:
                    04:ce:7f:4b:a3:6d:9b:d9:e1:59:5b:a5:db:80:db:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:61:CE:DE:E2:FB:B5:9E:F8:AA:04:8D:DE:77:7C:1F:95:C9:11:40
            X509v3 Authority Key Identifier:
                keyid:03:01:8A:F6:35:56:14:48:E4:73:E5:A5:32:83:47:56:75:55:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/03018AF635561448E473E5A53283475675551075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03018AF635561448E473E5A53283475675551075.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/323830333a323735303a3a2f33322d3438203d3e20323733393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2750::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:f2:4b:44:00:a6:5f:1c:f3:8f:a2:e1:05:79:2b:f6:40:60:
         40:1b:62:28:2d:e2:35:f6:15:68:ab:1d:7a:2f:10:3f:79:bd:
         ff:47:1f:b3:0d:ea:f0:d3:b1:d5:57:99:54:87:6d:2f:63:db:
         25:8c:76:10:d5:46:67:0a:a0:33:98:c4:cb:cf:43:4f:2d:02:
         e8:a6:b2:28:fe:72:04:56:14:8d:cc:95:46:c5:98:42:a8:a6:
         af:97:50:cb:dd:57:44:00:80:e8:01:f8:f8:ec:77:a5:78:9f:
         a3:2a:81:9f:34:b3:57:05:85:68:70:f6:05:d9:6f:52:b8:7a:
         ba:6e:f6:55:56:48:f6:72:32:cb:33:56:0d:77:9a:1f:f0:54:
         94:43:00:ea:43:0d:53:f8:8a:2d:d7:e6:ad:44:83:eb:7b:8a:
         15:10:13:52:90:8b:fe:06:0d:39:af:84:c7:21:bd:a0:80:d6:
         5d:dc:10:e8:cd:c3:a5:3b:64:7e:38:23:bc:3b:19:54:d8:d0:
         e5:a0:97:d1:3b:ed:8f:b8:b0:f0:02:6e:b2:1e:15:0b:42:aa:
         c6:c7:b8:38:ef:17:81:b9:e5:32:d1:07:83:c7:f9:19:19:65:
         e6:00:03:d7:5b:4b:b8:44:ce:b8:f8:a4:20:e0:9d:53:4a:d7:
         ad:7d:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 18:56:40 2026 by rpki-client