Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/323830333a366333303a3a2f33322d3332203d3e20323734333235.roa
File:                     323830333a366333303a3a2f33322d3332203d3e20323734333235.roa (raw, json)
Hash identifier:          MnVJZPxqVKRmCk5IPaa1vX/ANxdG6vI3RbZmLqaY0kE=
Subject key identifier:   36:7E:FE:7F:C2:DE:6D:0A:D3:4C:0E:65:46:45:41:21:E8:3C:E7:97
Certificate issuer:       /CN=D98287006D2FBD07F5FE58AB71F813860B063D05
Certificate serial:       1CEBAFD4E35CE2A1C0492DEA361C9B4E5C0016E7
Authority key identifier: D9:82:87:00:6D:2F:BD:07:F5:FE:58:AB:71:F8:13:86:0B:06:3D:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D98287006D2FBD07F5FE58AB71F813860B063D05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/323830333a366333303a3a2f33322d3332203d3e20323734333235.roa
Signing time:             Fri 06 Mar 2026 14:45:00 +0000
ROA not before:           Fri 06 Mar 2026 14:40:00 +0000
ROA not after:            Fri 05 Mar 2027 14:45:00 +0000
asID:                     274325
IP address blocks:        2803:6c30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/D98287006D2FBD07F5FE58AB71F813860B063D05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/D98287006D2FBD07F5FE58AB71F813860B063D05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D98287006D2FBD07F5FE58AB71F813860B063D05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:eb:af:d4:e3:5c:e2:a1:c0:49:2d:ea:36:1c:9b:4e:5c:00:16:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98287006D2FBD07F5FE58AB71F813860B063D05
        Validity
            Not Before: Mar  6 14:40:00 2026 GMT
            Not After : Mar  5 14:45:00 2027 GMT
        Subject: CN=367EFE7FC2DE6D0AD34C0E6546454121E83CE797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:96:5f:2e:8a:a0:ea:13:b8:02:f3:aa:7e:
                    00:66:63:9a:ae:12:6b:13:06:e2:ac:27:a6:16:9a:
                    61:0d:2e:84:57:73:1a:c7:a6:04:1f:09:04:3a:98:
                    02:83:a4:d4:1f:d4:46:eb:dd:58:bf:29:55:45:69:
                    98:2f:41:59:92:d9:a2:78:ca:5f:16:0f:20:13:f4:
                    e2:f2:cc:18:dd:b2:fd:74:fc:9d:f6:cd:59:e5:fb:
                    6b:d8:12:24:a5:2d:7d:e0:4f:1f:4e:bb:59:12:5f:
                    9c:87:2a:09:97:b0:03:6b:31:30:7c:6f:9f:b9:54:
                    70:a7:50:f9:2a:7d:6f:e9:74:90:0a:38:79:ed:ba:
                    19:4a:48:71:43:12:72:10:fa:42:15:5b:46:a5:07:
                    6b:0d:df:7b:4d:98:05:06:8a:0c:d7:f9:2b:88:a6:
                    52:78:c7:d4:f7:56:63:75:dc:e6:c6:2d:0e:ff:e6:
                    a6:13:1d:2a:4a:e8:9c:45:fe:82:28:9e:73:4a:1a:
                    a6:f1:c8:d1:87:cf:0d:7f:e2:80:63:1b:cb:b3:73:
                    4f:b5:77:b8:8a:16:2d:3e:2f:86:47:91:17:b4:f7:
                    f2:20:4d:d2:d4:6c:15:f7:51:bb:78:ae:b7:77:94:
                    95:0e:ae:b5:09:11:b1:a5:3f:78:11:ac:b2:40:25:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7E:FE:7F:C2:DE:6D:0A:D3:4C:0E:65:46:45:41:21:E8:3C:E7:97
            X509v3 Authority Key Identifier:
                keyid:D9:82:87:00:6D:2F:BD:07:F5:FE:58:AB:71:F8:13:86:0B:06:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/D98287006D2FBD07F5FE58AB71F813860B063D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D98287006D2FBD07F5FE58AB71F813860B063D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/323830333a366333303a3a2f33322d3332203d3e20323734333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:58:d8:7a:95:4e:07:90:65:c1:fa:0d:9d:8c:d9:0a:f6:d3:
         75:a9:63:30:9d:62:8c:9a:be:f8:bb:7c:6a:c9:21:be:58:5e:
         1c:81:18:54:10:6e:04:dc:33:68:d0:ee:b9:31:a7:04:91:0f:
         f3:5f:bb:05:88:58:80:32:03:3c:d1:ad:15:eb:3b:99:96:86:
         52:d4:db:73:d2:be:35:51:b8:24:20:0d:a3:be:44:00:e9:b8:
         f5:8a:7c:b6:59:c3:76:c0:6b:fd:05:a9:e1:5d:01:ef:b8:9a:
         72:09:f6:19:19:d1:d4:4a:ef:6d:e2:e5:51:80:1d:8a:0e:0b:
         99:0d:7d:7e:ee:0f:51:e1:61:5f:ab:f1:41:b5:9e:f4:44:90:
         97:a1:3c:7a:d4:b5:9e:0a:de:d9:b0:1a:a7:18:9d:7b:a4:c1:
         0e:20:c0:4a:44:70:b7:82:05:b4:cc:1c:ab:11:db:c4:b5:bb:
         d0:20:20:02:0a:fb:5e:a6:eb:32:59:ad:30:5b:55:c0:ab:d5:
         a7:78:dc:18:93:5f:18:d0:9d:d4:27:14:92:36:97:b0:c9:1e:
         f8:13:65:bc:ff:1d:75:ea:7c:2e:73:52:1e:fb:9f:cf:d9:6a:
         cd:a3:5b:09:21:93:08:39:a6:56:59:ea:a6:f7:3a:6d:84:d6:
         00:42:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:01:24 2026 by rpki-client