Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/323830333a656135303a3a2f33322d3430203d3e20323733313833.roa
File:                     323830333a656135303a3a2f33322d3430203d3e20323733313833.roa (raw, json)
Hash identifier:          ZN4rnQllCCp/aKHPcPlT2i0nnP3jYau6S/orZEeJIJ0=
Subject key identifier:   CD:0B:A0:82:EB:36:2B:32:5E:62:A8:FA:5B:09:AA:FF:70:19:B5:D0
Certificate issuer:       /CN=E532CAAF79743E5E1859108F8273F0C99F24B003
Certificate serial:       286FACEECF97D6D10F11D00E1A1799D74CDFE406
Authority key identifier: E5:32:CA:AF:79:74:3E:5E:18:59:10:8F:82:73:F0:C9:9F:24:B0:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E532CAAF79743E5E1859108F8273F0C99F24B003.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/323830333a656135303a3a2f33322d3430203d3e20323733313833.roa
Signing time:             Fri 30 Oct 2026 22:06:25 +0000
ROA not before:           Fri 30 Oct 2026 22:01:25 +0000
ROA not after:            Fri 29 Oct 2027 22:06:25 +0000
asID:                     273183
IP address blocks:        2803:ea50::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/E532CAAF79743E5E1859108F8273F0C99F24B003.crl
                          rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/E532CAAF79743E5E1859108F8273F0C99F24B003.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E532CAAF79743E5E1859108F8273F0C99F24B003.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 13:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6f:ac:ee:cf:97:d6:d1:0f:11:d0:0e:1a:17:99:d7:4c:df:e4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E532CAAF79743E5E1859108F8273F0C99F24B003
        Validity
            Not Before: Oct 30 22:01:25 2026 GMT
            Not After : Oct 29 22:06:25 2027 GMT
        Subject: CN=CD0BA082EB362B325E62A8FA5B09AAFF7019B5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:7c:b4:38:af:87:a4:79:52:b7:65:85:88:
                    41:ee:03:b1:cf:3d:35:dd:5d:2f:8d:1d:aa:58:ba:
                    9a:b7:94:54:39:d2:86:ec:0e:8d:0e:5b:b0:b5:c0:
                    fe:f6:49:d4:77:a7:b1:2c:a7:e7:8d:b7:0b:2f:e1:
                    43:2b:28:d0:85:a2:a7:fb:df:71:f1:16:65:d7:7d:
                    0d:f4:76:bd:4e:a8:b4:04:71:5e:ae:ec:8e:cc:a8:
                    2a:05:d5:1f:ff:8a:d0:e0:f1:69:88:8d:e8:04:79:
                    a6:c1:08:5d:e9:ad:95:4c:69:07:78:66:cf:24:10:
                    77:1e:d9:d3:3e:ae:d6:af:fe:07:17:8b:05:71:bc:
                    40:16:d4:c3:7b:af:a0:f3:ea:08:8a:9f:b4:bd:64:
                    9d:54:cc:f8:ea:b5:82:41:25:d4:47:d4:71:f5:1e:
                    e6:7d:5b:26:bc:39:3c:ea:0a:aa:7c:13:e6:24:74:
                    78:a0:d1:84:86:44:b7:9d:db:a3:8f:97:48:23:e9:
                    15:ea:9b:8c:42:a6:09:c3:2a:31:58:bf:0f:cd:6c:
                    df:2a:88:79:cf:45:78:91:c0:eb:58:9b:32:62:95:
                    b6:ee:2d:ae:34:68:bd:ee:27:84:71:39:ef:1b:ed:
                    24:94:48:64:a1:75:de:49:3a:e0:42:e5:36:db:a9:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0B:A0:82:EB:36:2B:32:5E:62:A8:FA:5B:09:AA:FF:70:19:B5:D0
            X509v3 Authority Key Identifier:
                keyid:E5:32:CA:AF:79:74:3E:5E:18:59:10:8F:82:73:F0:C9:9F:24:B0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/E532CAAF79743E5E1859108F8273F0C99F24B003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E532CAAF79743E5E1859108F8273F0C99F24B003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/304E73145B40888E2771A38573C29EF7676B0B83F3DDC1D5AF89739EBEE953B0/0/323830333a656135303a3a2f33322d3430203d3e20323733313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea50::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:fe:7d:f0:e6:a5:d9:48:e1:35:ee:a2:58:82:a6:b9:1a:
         ee:d2:f9:2f:01:58:67:36:86:d6:75:1c:11:e6:c0:25:13:4e:
         e0:7b:08:57:68:9d:3b:0a:48:2f:ce:b3:b9:a8:9e:7d:27:e0:
         fa:ae:ed:46:cc:56:38:82:0b:b5:b1:f3:63:1e:57:e4:a8:b2:
         5c:e2:0b:a8:3d:b4:d5:10:16:c0:63:17:c5:b2:65:9f:97:3d:
         63:d2:e1:d3:be:ec:6a:d1:a2:7c:13:f0:d6:60:1c:68:d9:8b:
         9b:2d:6e:f4:05:8c:1a:be:0e:b8:1e:ca:81:66:8b:ae:28:b0:
         1f:86:8b:07:35:8e:d5:46:77:4c:6a:53:15:ea:27:d4:37:a0:
         65:e0:96:74:db:25:52:3e:73:9b:4e:f3:85:04:c9:e0:76:74:
         0d:7e:3e:4a:10:fd:98:48:46:64:58:1f:a6:6b:e5:2f:1b:91:
         ff:e4:ca:8c:38:a9:b0:b4:50:4e:c8:59:15:c5:55:d3:bb:19:
         42:6b:39:a9:32:aa:dd:ff:43:f3:85:51:f6:49:0d:31:ff:8c:
         39:fa:f3:a4:dc:71:41:ce:4c:0c:da:58:35:93:da:de:0e:54:
         69:8d:4d:9a:6b:a8:1a:f0:8c:5a:20:59:23:ea:56:1b:24:1d:
         ba:9a:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:42:39 2026 by rpki-client