Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1A9BB53D5581BC9FA05F06555FE703032B5468E356285AA48B865BCB6B61B538/0/323830363a3437393a3a2f33322d3332203d3e20323734343436.roa
File:                     323830363a3437393a3a2f33322d3332203d3e20323734343436.roa (raw, json)
Hash identifier:          z7nC0r9A77PiBr38L+ndLFzB8IVyzFkP+8QKkeaHNiU=
Subject key identifier:   64:9D:E1:88:7D:DB:A8:46:6C:18:B7:B5:5A:45:AE:7E:71:5C:61:66
Certificate issuer:       /CN=298B3167D09843E66FDC290D9C65F9B9D11F142B
Certificate serial:       2CCED89D266D6D9664FA5ECE130FC23A77311227
Authority key identifier: 29:8B:31:67:D0:98:43:E6:6F:DC:29:0D:9C:65:F9:B9:D1:1F:14:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298B3167D09843E66FDC290D9C65F9B9D11F142B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A9BB53D5581BC9FA05F06555FE703032B5468E356285AA48B865BCB6B61B538/0/323830363a3437393a3a2f33322d3332203d3e20323734343436.roa
Signing time:             Tue 01 Sep 2026 18:50:00 +0000
ROA not before:           Tue 01 Sep 2026 18:45:00 +0000
ROA not after:            Tue 31 Aug 2027 18:50:00 +0000
asID:                     274446
IP address blocks:        2806:479::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A9BB53D5581BC9FA05F06555FE703032B5468E356285AA48B865BCB6B61B538/0/298B3167D09843E66FDC290D9C65F9B9D11F142B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A9BB53D5581BC9FA05F06555FE703032B5468E356285AA48B865BCB6B61B538/0/298B3167D09843E66FDC290D9C65F9B9D11F142B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298B3167D09843E66FDC290D9C65F9B9D11F142B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 23:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ce:d8:9d:26:6d:6d:96:64:fa:5e:ce:13:0f:c2:3a:77:31:12:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298B3167D09843E66FDC290D9C65F9B9D11F142B
        Validity
            Not Before: Sep  1 18:45:00 2026 GMT
            Not After : Aug 31 18:50:00 2027 GMT
        Subject: CN=649DE1887DDBA8466C18B7B55A45AE7E715C6166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:d3:cb:bc:4d:4c:ee:b8:7d:c7:e9:72:f0:
                    a1:63:9c:71:75:23:cb:7a:85:98:81:64:b6:5d:f6:
                    b8:10:ff:22:34:e4:de:e6:af:0d:06:0a:d2:2e:f8:
                    b8:6f:5f:34:d4:cf:24:02:7e:a4:c8:62:80:fd:5b:
                    77:67:97:6d:96:d6:9e:40:63:81:00:3d:1b:01:ad:
                    22:8a:9a:ce:56:de:1b:3b:54:f1:79:bf:04:4d:32:
                    42:df:b3:02:7f:08:77:61:7f:2c:b4:7b:cb:7f:1e:
                    51:d3:b3:43:82:b4:cb:a2:ce:2f:29:f5:f1:0a:e3:
                    5b:69:88:c8:cb:d4:44:bc:75:ab:1f:f1:8c:67:1e:
                    6e:b4:c0:8b:7d:5a:d5:df:92:2a:36:98:1c:ef:90:
                    06:94:ae:ee:af:28:2b:2b:f3:b1:e4:6f:b6:ae:0c:
                    e6:f9:8f:cd:ff:9f:51:4a:7f:3a:03:32:87:d8:e5:
                    9f:51:85:6a:9e:cd:ab:27:c8:0c:9a:54:db:96:b4:
                    3e:fa:76:86:0e:6a:7f:b5:ca:c3:78:70:40:0c:82:
                    f7:61:d6:ae:3a:30:c7:24:4e:e1:5d:a0:8a:85:7c:
                    5c:25:00:44:24:49:de:1f:6d:bd:35:50:0d:35:3e:
                    71:bd:4f:b5:d6:76:49:94:85:c1:36:85:c3:35:65:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:E1:88:7D:DB:A8:46:6C:18:B7:B5:5A:45:AE:7E:71:5C:61:66
            X509v3 Authority Key Identifier:
                keyid:29:8B:31:67:D0:98:43:E6:6F:DC:29:0D:9C:65:F9:B9:D1:1F:14:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A9BB53D5581BC9FA05F06555FE703032B5468E356285AA48B865BCB6B61B538/0/298B3167D09843E66FDC290D9C65F9B9D11F142B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298B3167D09843E66FDC290D9C65F9B9D11F142B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A9BB53D5581BC9FA05F06555FE703032B5468E356285AA48B865BCB6B61B538/0/323830363a3437393a3a2f33322d3332203d3e20323734343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:479::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:90:05:2f:c1:b0:50:41:bd:b5:67:d6:b3:03:95:6c:ec:d7:
         e0:ac:97:04:55:89:fb:d1:0c:cd:23:ff:08:ec:55:ef:7c:7f:
         52:4e:c3:2b:b3:09:eb:38:61:98:da:b9:46:4f:f3:62:f3:62:
         69:68:65:91:80:e7:25:f5:f3:5f:07:bf:e1:8e:85:42:1d:57:
         24:56:7d:58:13:f6:de:a5:76:ed:6f:b5:d6:fc:e4:f7:08:81:
         c9:3e:f3:de:de:93:5b:d7:e1:98:0f:fa:07:53:84:16:cb:14:
         f5:3b:6d:52:90:cc:29:3b:75:32:45:ba:78:51:f6:27:f9:e5:
         bf:ff:11:4f:db:51:83:8c:64:75:32:82:07:6f:b3:fb:de:73:
         36:ff:8f:1b:92:7e:76:69:af:81:c7:4d:9d:54:22:1b:ab:d0:
         f7:b4:d7:9b:d6:8d:94:d3:b4:02:9d:2e:d6:66:34:83:1f:70:
         2b:fa:49:32:fe:2a:b3:40:e4:cb:b2:f6:07:de:50:f8:0e:87:
         c9:56:2d:28:ab:54:d3:93:d6:16:1d:74:d3:8f:ca:5c:2f:8e:
         2f:b6:cf:70:98:34:71:fd:fe:e8:29:d8:a7:76:52:00:9d:cf:
         04:59:ca:2d:ac:97:76:47:87:1f:e2:4f:6a:8c:3a:f9:7f:2c:
         73:d2:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:07:53 2026 by rpki-client