Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2037303837.roa
File:                     323830333a343836303a3a2f33322d3332203d3e2037303837.roa (raw, json)
Hash identifier:          hUmbDlHk2ohk1u3eQpZtIW1EFbzzV+M/gVgKFhwRnJM=
Subject key identifier:   ED:5E:66:A1:F2:92:43:D4:8B:79:19:03:15:94:3B:04:DC:BA:C8:F1
Certificate issuer:       /CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Certificate serial:       24C40E206AFBACFD7D6B467ABCF18EBF559B368F
Authority key identifier: 29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2037303837.roa
Signing time:             Tue 03 Mar 2026 10:45:00 +0000
ROA not before:           Tue 03 Mar 2026 10:40:00 +0000
ROA not after:            Tue 02 Mar 2027 10:45:00 +0000
asID:                     7087
IP address blocks:        2803:4860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Mar 2026 20:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:0e:20:6a:fb:ac:fd:7d:6b:46:7a:bc:f1:8e:bf:55:9b:36:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
        Validity
            Not Before: Mar  3 10:40:00 2026 GMT
            Not After : Mar  2 10:45:00 2027 GMT
        Subject: CN=ED5E66A1F29243D48B79190315943B04DCBAC8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:21:92:b4:07:4a:df:e1:fe:9d:75:f4:11:
                    7e:9d:f9:1c:c2:b7:39:f6:22:9d:33:4e:eb:37:9b:
                    de:f6:65:43:d6:00:60:66:76:4f:a9:78:4c:84:37:
                    e9:cd:8c:20:ad:c2:b9:f5:ac:f0:56:de:b9:9f:24:
                    f8:da:cb:7b:9e:4f:30:97:87:79:de:a3:20:18:e3:
                    f4:c6:db:f1:df:84:48:5f:b5:a5:e2:f4:4d:41:9f:
                    66:f3:94:7d:7f:02:0c:4a:de:6d:fd:1e:b4:83:57:
                    e9:bd:3f:e5:b0:95:50:74:53:61:58:b6:fb:79:13:
                    d5:5a:be:74:bf:45:24:93:99:bc:5e:76:a9:8b:94:
                    57:3a:ac:91:80:6f:fb:19:1d:1d:38:c4:b2:a5:31:
                    b3:d9:d7:5b:2a:26:c1:6f:dd:9b:9e:4e:0c:9f:6d:
                    0b:be:9a:93:29:65:87:c0:a6:af:16:99:00:97:1a:
                    d9:e2:d5:91:cf:97:e6:d1:78:ca:f3:33:a4:76:94:
                    19:f2:52:db:fd:75:f4:1a:dd:52:91:be:49:a2:8b:
                    25:9e:57:a9:fe:cd:cd:86:51:72:dc:ad:2f:f0:66:
                    80:18:40:ea:08:82:64:79:34:1e:24:59:23:4b:44:
                    5b:29:42:4d:6a:fe:4b:68:fb:57:94:04:3b:86:19:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:66:A1:F2:92:43:D4:8B:79:19:03:15:94:3B:04:DC:BA:C8:F1
            X509v3 Authority Key Identifier:
                keyid:29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4860::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:69:4d:71:25:31:c6:41:b6:0b:38:cb:e3:31:09:4a:21:
         f5:f0:c9:97:ee:9d:5c:e4:0d:2e:81:98:f9:3a:07:cf:63:c5:
         a5:a1:42:4b:29:59:4a:b2:7f:b7:6c:a4:54:6b:a4:5f:b0:d1:
         e1:c0:90:b7:83:7d:81:e5:b8:9c:1b:60:ad:24:b4:66:98:a2:
         a7:43:3a:47:ba:df:fc:35:e5:f5:e2:0b:0c:c3:81:a1:a1:2f:
         a5:77:6c:a2:d4:2f:15:ce:c8:30:5f:6f:72:b2:01:b4:f2:ae:
         23:e6:75:38:09:da:c3:b2:1c:51:7d:ee:5a:ae:85:58:ae:0a:
         7e:50:e0:3f:3f:f7:a0:25:39:14:f0:5f:2c:66:91:0f:78:fc:
         d5:4e:dc:66:4b:25:f5:b6:d5:dd:e2:6c:0e:5e:23:a9:0c:38:
         fa:b8:7c:28:36:18:96:78:85:59:ea:f8:d9:be:db:74:a1:19:
         98:ac:b5:f6:a7:eb:9d:d8:28:e4:03:78:ba:fd:c2:8d:39:f5:
         fc:23:46:d2:f4:a0:f0:5e:25:59:1e:14:e5:f8:18:0e:84:e2:
         cb:cb:3b:38:6a:a8:cc:f0:fa:ff:d5:33:4a:0e:97:85:b5:24:
         3a:19:bf:1c:57:de:7c:d8:5b:fe:8b:d8:0c:ee:da:01:d2:2e:
         d5:b5:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 11:55:20 2026 by rpki-client