Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/323830333a653933303a3a2f33322d3438203d3e20323734393439.roa
File:                     323830333a653933303a3a2f33322d3438203d3e20323734393439.roa (raw, json)
Hash identifier:          GmKV00Kue1DSLeWWKUygjid4hE2VM50wIaqwbN7p/ws=
Subject key identifier:   83:0D:AD:E5:9E:E0:B9:7B:FF:69:59:53:83:67:31:18:37:86:4B:EA
Certificate issuer:       /CN=28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE
Certificate serial:       5CF64BB3B93BA049C68565C78F5D8723DDFF0B92
Authority key identifier: 28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/323830333a653933303a3a2f33322d3438203d3e20323734393439.roa
Signing time:             Sat 15 Aug 2026 03:10:00 +0000
ROA not before:           Sat 15 Aug 2026 03:05:00 +0000
ROA not after:            Sat 14 Aug 2027 03:10:00 +0000
asID:                     274949
IP address blocks:        2803:e930::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f6:4b:b3:b9:3b:a0:49:c6:85:65:c7:8f:5d:87:23:dd:ff:0b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE
        Validity
            Not Before: Aug 15 03:05:00 2026 GMT
            Not After : Aug 14 03:10:00 2027 GMT
        Subject: CN=830DADE59EE0B97BFF6959538367311837864BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:43:43:d3:de:ce:9c:d8:cd:37:0c:4f:0c:
                    78:8a:59:62:d6:c4:c9:a5:06:31:09:13:bc:23:03:
                    8c:69:0a:f2:3c:3b:64:83:2f:c7:e2:84:15:50:49:
                    a9:74:6b:8e:1f:5f:48:7b:fe:e0:e2:22:fd:a8:ff:
                    19:fb:19:f4:70:2c:ae:36:cf:fc:6a:13:72:b1:36:
                    27:68:08:57:4a:dc:2d:bc:f0:ce:59:39:11:36:29:
                    97:7a:2c:63:5c:61:d8:c1:8c:74:04:ee:2a:eb:8a:
                    6a:a2:ae:85:6a:37:8d:42:f3:5f:84:9d:a8:48:c4:
                    92:1f:4c:35:d8:f2:c8:31:57:d7:b5:dd:1d:5e:62:
                    57:41:af:1d:8d:bb:1d:8b:dd:58:6e:cc:33:11:7e:
                    2c:49:23:4c:3a:4d:55:a4:1c:1e:7e:0d:e5:2a:84:
                    54:d7:0e:33:ba:a0:7e:37:32:c9:24:d6:f0:59:db:
                    6f:6c:0a:2d:db:28:89:4c:af:a9:75:a4:c1:f6:23:
                    fb:58:fc:2f:ff:a1:d4:53:63:e4:f4:b3:e9:60:2d:
                    b7:be:3f:3c:9d:2d:d5:47:87:7f:76:5b:07:18:46:
                    5b:ce:94:d7:1f:fc:24:b7:d9:5a:a3:be:2a:db:ef:
                    f9:4f:aa:55:45:64:2c:9a:5a:74:37:20:55:6a:81:
                    ee:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0D:AD:E5:9E:E0:B9:7B:FF:69:59:53:83:67:31:18:37:86:4B:EA
            X509v3 Authority Key Identifier:
                keyid:28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/323830333a653933303a3a2f33322d3438203d3e20323734393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e930::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:d0:71:3f:e0:0f:45:f5:1e:1d:b4:a7:7c:fe:4a:8f:64:
         00:24:06:dc:46:c0:ec:7a:f7:3e:20:fe:1c:75:b6:fd:37:f4:
         bf:dd:73:25:4b:54:0b:a1:c4:ab:24:09:b3:54:e5:ae:a9:5f:
         fb:43:d5:a4:b6:31:a5:3d:e5:d2:12:dd:15:38:40:92:e0:f6:
         ee:47:31:d5:9a:92:e4:c5:2a:4c:00:90:48:06:97:33:99:db:
         01:24:6b:b7:1d:63:b4:65:2b:84:44:75:23:9f:93:ad:16:d6:
         8f:cd:7b:0e:60:19:cc:36:43:80:b1:f6:61:96:3a:2c:b8:01:
         14:18:ef:a8:5d:58:0a:26:97:73:a4:ed:b7:f9:8d:53:5c:b9:
         f5:d7:2a:43:5e:44:f7:f4:d2:5b:f9:df:05:91:49:5f:5f:ae:
         a4:16:55:37:b8:2b:4a:99:a6:bd:e6:e9:f0:da:0e:e2:87:2d:
         99:d0:e0:81:3a:20:11:fa:a7:5a:4f:9d:25:01:1e:9b:69:49:
         06:19:b7:cd:1b:41:7b:e4:08:24:d3:9d:e5:de:69:ee:3f:a4:
         6f:1e:b7:1f:be:aa:ce:a3:9a:81:21:df:be:10:42:0b:6c:54:
         42:49:d5:2d:f3:d6:2c:64:8e:3d:73:fc:a0:c0:19:50:73:7a:
         84:c6:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:17 2026 by rpki-client