Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/323830333a623630303a3a2f33322d313234203d3e203237373531.roa
File:                     323830333a623630303a3a2f33322d313234203d3e203237373531.roa (raw, json)
Hash identifier:          ji9QviBBUjlT4wooPPlSPC8PKPlx4RF6U43j01IEdKw=
Subject key identifier:   BB:D1:10:0C:60:D3:37:C8:C9:77:D3:99:D8:CC:F6:9A:0E:1F:F3:F3
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       6DCE0BE0A8D1F448CE321B527F3EEDC21BF7504D
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/323830333a623630303a3a2f33322d313234203d3e203237373531.roa
Signing time:             Mon 29 Sep 2025 16:49:09 +0000
ROA not before:           Mon 29 Sep 2025 16:44:09 +0000
ROA not after:            Mon 28 Sep 2026 16:49:09 +0000
asID:                     27751
IP address blocks:        2803:b600::/32 maxlen: 124
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 01:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ce:0b:e0:a8:d1:f4:48:ce:32:1b:52:7f:3e:ed:c2:1b:f7:50:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Sep 29 16:44:09 2025 GMT
            Not After : Sep 28 16:49:09 2026 GMT
        Subject: CN=BBD1100C60D337C8C977D399D8CCF69A0E1FF3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e6:0f:a9:c5:73:9e:c3:f9:bb:8a:24:fe:63:
                    4d:fa:11:d8:7e:9e:00:86:25:cb:19:5a:64:c0:be:
                    56:a6:ee:36:60:d3:01:6a:95:f4:f9:26:5c:5f:3b:
                    9c:d4:9b:c7:5c:5e:b9:34:dc:dc:05:0f:44:2a:8a:
                    ba:27:a2:71:63:75:6d:f0:84:d9:7b:d9:dd:65:14:
                    05:08:82:b1:96:03:c7:ae:e0:cf:f9:09:35:6a:27:
                    6f:0f:77:c0:17:bc:23:c8:f7:c7:5f:9e:bf:1e:19:
                    9e:8a:48:c6:64:45:8c:bb:c9:08:45:83:94:41:2a:
                    a7:5d:9a:7a:82:8c:5c:d3:aa:23:95:a0:b8:d3:a9:
                    2a:53:fb:58:7a:27:68:a0:20:0b:b3:e8:8e:25:f9:
                    74:85:2d:39:45:4c:3b:e2:37:7d:1e:f8:80:d1:f2:
                    da:2d:23:d9:7c:10:bf:79:3a:14:a0:c3:c0:42:3b:
                    0f:90:72:f9:c1:b4:f3:a3:98:e9:26:be:c9:b8:7b:
                    62:a4:ec:6f:87:15:d0:38:d2:eb:67:5e:aa:c2:fe:
                    cd:4d:e1:e5:81:70:b6:45:98:17:74:85:bb:c1:cd:
                    c2:69:40:46:82:3a:9e:9a:b0:81:72:ee:3e:27:fd:
                    dc:11:a9:5d:f7:fb:33:e1:e0:5a:5b:7d:c2:c5:04:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D1:10:0C:60:D3:37:C8:C9:77:D3:99:D8:CC:F6:9A:0E:1F:F3:F3
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/323830333a623630303a3a2f33322d313234203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b600::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:ad:20:cf:e2:47:86:9b:dc:af:ff:36:0a:79:b8:e7:83:d3:
         97:df:83:ef:46:ed:f5:48:39:dd:c4:3a:c0:87:b5:f0:46:1b:
         b0:0e:12:52:aa:4a:95:f1:b9:ef:20:4c:df:63:da:60:ce:94:
         39:73:96:09:b8:4c:df:30:24:ba:d7:98:f5:ef:fd:4e:4b:01:
         c4:11:6d:c4:57:7b:e4:39:f1:52:c8:6c:b3:3a:75:eb:db:35:
         87:28:b1:7e:ab:56:a6:f8:1e:cf:ef:6c:1d:8c:09:3f:49:92:
         4b:e2:a1:54:f5:09:c2:85:7b:31:c5:55:55:61:e1:08:b8:68:
         5a:2c:85:62:f1:e2:ff:77:7b:f1:de:57:34:8a:a3:8e:33:e5:
         6f:b3:0b:84:f4:04:1b:84:b3:5e:98:91:e5:c7:22:23:92:27:
         a1:db:69:d5:45:de:f5:9e:2f:7a:1f:c7:5e:d4:d8:05:76:72:
         0f:be:e1:17:b9:7f:1a:8a:9a:27:8e:45:7d:f7:33:d5:72:04:
         c6:54:ad:0a:bd:fc:ee:df:6c:09:1c:62:90:ee:7e:8e:40:4a:
         ad:9f:b1:c2:9a:d6:f5:ed:4e:ae:f4:06:53:1e:5c:aa:94:b5:
         fe:2a:98:19:88:2f:7a:04:7d:02:4c:b0:40:bd:9c:81:25:56:
         9b:93:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:44:36 2025 by rpki-client