Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C577C9F6D45BC11EAF0749536383EEE0221F38DF5D5410E57A8B17E91D4F9D6/0/323830333a346664303a3a2f33322d3332203d3e20323734323532.roa
File:                     323830333a346664303a3a2f33322d3332203d3e20323734323532.roa (raw, json)
Hash identifier:          g2unNeOaJVPZjQ6u2idp3tEwyNTUY12VBeRyFm1AGuA=
Subject key identifier:   2B:33:AA:47:61:94:A7:0D:6E:B1:12:C2:C7:38:94:62:8B:54:6A:3A
Certificate issuer:       /CN=BC7A04A3BF920F9B25CC5421F08422140110223B
Certificate serial:       629C5CDA359307308E21A5C0EF4F39CFAECC92B4
Authority key identifier: BC:7A:04:A3:BF:92:0F:9B:25:CC:54:21:F0:84:22:14:01:10:22:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC7A04A3BF920F9B25CC5421F08422140110223B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C577C9F6D45BC11EAF0749536383EEE0221F38DF5D5410E57A8B17E91D4F9D6/0/323830333a346664303a3a2f33322d3332203d3e20323734323532.roa
Signing time:             Fri 16 Oct 2026 14:40:44 +0000
ROA not before:           Fri 16 Oct 2026 14:35:44 +0000
ROA not after:            Fri 15 Oct 2027 14:40:44 +0000
asID:                     274252
IP address blocks:        2803:4fd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C577C9F6D45BC11EAF0749536383EEE0221F38DF5D5410E57A8B17E91D4F9D6/0/BC7A04A3BF920F9B25CC5421F08422140110223B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C577C9F6D45BC11EAF0749536383EEE0221F38DF5D5410E57A8B17E91D4F9D6/0/BC7A04A3BF920F9B25CC5421F08422140110223B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC7A04A3BF920F9B25CC5421F08422140110223B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9c:5c:da:35:93:07:30:8e:21:a5:c0:ef:4f:39:cf:ae:cc:92:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC7A04A3BF920F9B25CC5421F08422140110223B
        Validity
            Not Before: Oct 16 14:35:44 2026 GMT
            Not After : Oct 15 14:40:44 2027 GMT
        Subject: CN=2B33AA476194A70D6EB112C2C73894628B546A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:a7:39:6d:bf:f6:23:af:43:d4:fc:64:9b:
                    e7:20:46:39:56:33:3a:a1:a8:6d:ad:0c:a7:79:8f:
                    7c:39:24:39:e4:bc:c9:23:33:ec:3e:de:d5:ab:5f:
                    de:e8:d5:b4:bb:d0:0b:29:93:51:4a:dd:32:c1:3f:
                    3f:a9:fa:f0:c1:65:c6:65:d0:50:0d:e2:89:69:5f:
                    11:15:f4:ad:41:06:8d:5a:48:99:57:3d:ef:15:fd:
                    ce:8f:08:97:bd:f4:b8:b8:f2:12:9d:4f:20:d0:f7:
                    92:90:fb:d1:af:9b:9e:0a:bc:bf:c4:9d:e1:29:50:
                    78:35:bb:52:80:03:cf:24:bb:8d:d7:63:2e:da:8b:
                    e4:9a:f9:17:b8:3f:99:2f:9d:93:f7:b2:71:5d:b6:
                    ca:9b:ad:46:c6:91:26:4d:6d:d7:ca:f9:ff:fd:f7:
                    d8:8c:89:0a:d6:75:ca:5e:b1:d3:39:be:ad:bb:56:
                    49:de:98:36:ea:46:8d:d3:aa:33:1c:3c:a0:f4:c6:
                    fa:aa:cb:08:71:28:72:e0:ad:2a:0c:4e:d2:03:78:
                    31:1e:05:a4:58:83:fe:18:d2:0b:88:41:17:12:33:
                    ec:78:4a:6f:b6:97:d0:c6:dc:05:02:8d:8a:e8:26:
                    be:f0:3d:79:76:7e:45:b2:16:da:e0:e9:39:7a:a7:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:AA:47:61:94:A7:0D:6E:B1:12:C2:C7:38:94:62:8B:54:6A:3A
            X509v3 Authority Key Identifier:
                keyid:BC:7A:04:A3:BF:92:0F:9B:25:CC:54:21:F0:84:22:14:01:10:22:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C577C9F6D45BC11EAF0749536383EEE0221F38DF5D5410E57A8B17E91D4F9D6/0/BC7A04A3BF920F9B25CC5421F08422140110223B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC7A04A3BF920F9B25CC5421F08422140110223B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C577C9F6D45BC11EAF0749536383EEE0221F38DF5D5410E57A8B17E91D4F9D6/0/323830333a346664303a3a2f33322d3332203d3e20323734323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:30:79:01:1d:e4:78:94:a0:15:e9:89:5e:5a:94:17:90:c5:
         f7:bf:36:b9:56:db:77:22:fd:b9:8e:db:6a:ff:40:30:05:1c:
         0e:44:db:38:f9:10:f4:98:27:23:cf:67:ec:47:76:6e:be:a4:
         47:d8:e9:8b:e7:c3:aa:04:b1:b0:40:67:ba:7f:87:c4:86:4d:
         64:1d:02:28:ee:cf:1c:a1:2c:92:83:08:95:dd:55:96:b4:a7:
         36:ff:5c:a0:7e:5a:75:52:3a:b7:e0:cc:3f:01:4a:66:60:28:
         a7:9a:79:5c:63:42:c0:bd:1a:ec:d7:81:c8:04:cc:86:cf:c5:
         78:45:43:04:a4:12:0f:d3:8e:98:3a:1b:ce:08:52:54:ed:27:
         80:37:18:e5:88:48:2b:f5:8d:e6:60:ec:d1:a7:58:b8:fc:bd:
         a9:88:d1:5c:34:b2:0b:7c:0f:df:7b:6e:4a:68:2f:e3:3b:9c:
         47:d2:44:b2:9f:b1:63:44:cd:d8:e4:60:1d:b1:c3:ee:29:f7:
         cc:5c:fe:de:3d:ba:5c:23:77:b2:d8:27:f0:4a:ab:bd:e6:93:
         5c:3d:ce:96:a5:a4:bd:f8:e2:25:58:75:ba:94:bf:ac:14:9c:
         e4:e6:e8:d3:58:c8:9e:d6:9f:e9:b7:89:01:bb:53:1d:ef:a9:
         4f:46:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:34:11 2026 by rpki-client