Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa
File:                     323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa (raw, json)
Hash identifier:          jPvb/7P/lBoUSX2FaVZ7gZXz9nGbC98wCPkNfzE5GzU=
Subject key identifier:   13:0C:A9:02:E7:53:2D:CA:F3:43:6C:8E:29:84:CE:5B:2B:B2:43:55
Certificate issuer:       /CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
Certificate serial:       6606353C4792C552247EFD47D986B3D6066509E4
Authority key identifier: 1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa
Signing time:             Mon 17 Aug 2026 22:25:45 +0000
ROA not before:           Mon 17 Aug 2026 22:20:45 +0000
ROA not after:            Mon 16 Aug 2027 22:25:45 +0000
asID:                     272816
IP address blocks:        2803:7f90:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 07:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:06:35:3c:47:92:c5:52:24:7e:fd:47:d9:86:b3:d6:06:65:09:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6
        Validity
            Not Before: Aug 17 22:20:45 2026 GMT
            Not After : Aug 16 22:25:45 2027 GMT
        Subject: CN=130CA902E7532DCAF3436C8E2984CE5B2BB24355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d7:c6:23:23:a3:5e:2b:4c:e0:d6:58:94:d5:
                    b8:70:6d:50:c0:06:2d:9c:a5:11:2f:3d:32:9f:34:
                    87:33:9a:1d:14:47:06:bd:6a:c0:bc:4a:9c:81:6b:
                    28:ef:75:09:5c:f8:09:a5:32:50:1b:a1:b1:b4:5c:
                    e1:e6:07:28:c4:7d:3f:ee:68:c4:85:47:7a:19:aa:
                    22:b8:84:75:86:f6:80:b3:50:89:85:a3:17:5d:32:
                    ab:d3:22:a9:60:a2:a2:25:1a:c2:79:f0:20:2a:ae:
                    07:8e:cf:e7:2c:8d:95:2e:45:31:2e:d8:09:88:cd:
                    32:3e:96:ce:c2:ea:3c:f0:49:c4:95:76:bc:41:c2:
                    da:bc:5d:c5:68:cd:92:9a:47:e4:dd:6f:a2:3d:69:
                    e8:61:8d:d0:46:7c:8d:d6:6a:23:c3:00:e3:47:1a:
                    ef:ce:93:fb:87:29:59:29:df:1f:1e:0a:6a:21:a9:
                    50:ef:8b:7b:3b:4e:d9:ed:74:43:00:88:82:e6:2a:
                    f6:e7:74:95:47:ea:d0:71:6a:13:0c:9e:07:32:d6:
                    00:5b:ad:a1:3e:58:f5:23:2b:0d:eb:c9:22:be:4b:
                    bd:1f:a0:f1:ad:11:24:23:eb:f9:14:69:6b:2d:cc:
                    29:f6:14:b2:8f:c9:e2:2c:bb:3a:9a:7c:3d:66:1d:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:A9:02:E7:53:2D:CA:F3:43:6C:8E:29:84:CE:5B:2B:B2:43:55
            X509v3 Authority Key Identifier:
                keyid:1E:8E:43:C3:3D:3E:9E:4C:57:69:92:4F:F3:E8:4B:A9:90:6A:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E8E43C33D3E9E4C5769924FF3E84BA9906AB6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A363C420889E0458830DB27589C70707B31D36366B405C0DE2215E3C58D49A1/0/323830333a376639303a353030303a3a2f34302d3430203d3e20323732383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f90:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:76:04:e1:16:bb:8f:c8:df:dc:e4:57:11:5a:70:19:8a:e5:
         f9:d5:e9:87:10:f9:0c:ab:04:50:e3:68:6b:7a:30:5f:5a:22:
         43:7f:28:df:5f:eb:68:b2:b1:b7:4d:e1:12:94:87:56:12:be:
         a1:5a:10:48:e7:ff:f1:f0:07:ee:c7:26:3a:85:90:71:d1:dd:
         88:11:d7:83:01:d2:50:04:93:dc:5a:42:7b:5a:a6:6e:49:4c:
         e8:56:70:aa:80:f6:92:59:c4:30:45:d7:07:d8:c1:0c:84:1a:
         1f:d7:ec:3f:36:cf:35:6e:61:f7:5b:48:08:86:f0:36:26:eb:
         78:94:dc:66:1b:b6:ec:3a:8d:d9:db:9e:c8:e5:b8:7d:97:67:
         34:02:71:ae:fc:42:93:80:45:19:1f:6f:19:c5:cc:78:db:c7:
         0c:6f:55:96:0d:a2:85:7c:5b:ab:52:ef:c9:66:3f:45:3d:11:
         c3:e8:3a:dd:b9:7b:4b:c1:e4:e4:a5:95:1d:c0:02:d4:a6:32:
         22:13:db:d9:2d:0d:df:3d:bf:06:aa:8f:a5:e5:2d:85:5b:13:
         75:f8:5c:96:d9:05:0b:cb:03:fb:33:0d:c4:6e:eb:f7:79:c0:
         ec:da:95:75:00:b7:28:09:65:8f:8f:df:f4:49:cf:fa:43:dd:
         99:72:99:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:24:06 2026 by rpki-client