Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/323830333a623564303a3a2f33322d3332203d3e20323734313830.roa
File:                     323830333a623564303a3a2f33322d3332203d3e20323734313830.roa (raw, json)
Hash identifier:          qJAx36exyuplKW+cpMeq94GU7HkVnLekL3jIbaK0gF0=
Subject key identifier:   99:29:36:63:4A:4E:7C:99:A8:F9:0A:B0:7E:96:A1:2A:82:B1:81:CA
Certificate issuer:       /CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
Certificate serial:       5F3443950B85F9D7FC6E58A812959AEB20EBF6E0
Authority key identifier: 9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/323830333a623564303a3a2f33322d3332203d3e20323734313830.roa
Signing time:             Tue 25 Aug 2026 20:26:29 +0000
ROA not before:           Tue 25 Aug 2026 20:21:29 +0000
ROA not after:            Tue 24 Aug 2027 20:26:29 +0000
asID:                     274180
IP address blocks:        2803:b5d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 17:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:34:43:95:0b:85:f9:d7:fc:6e:58:a8:12:95:9a:eb:20:eb:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
        Validity
            Not Before: Aug 25 20:21:29 2026 GMT
            Not After : Aug 24 20:26:29 2027 GMT
        Subject: CN=992936634A4E7C99A8F90AB07E96A12A82B181CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:47:17:e0:54:5f:a0:5a:48:cb:21:61:2e:
                    7a:60:41:1f:27:5a:09:6d:0c:06:af:28:36:e1:cc:
                    32:b1:7e:fb:30:55:43:6d:e6:34:f3:26:4f:79:7d:
                    d2:83:3d:b6:91:6d:2b:e3:5a:fe:b6:b7:fb:a2:8e:
                    19:0c:0a:96:92:6f:6a:3b:df:10:74:26:7d:04:a5:
                    7b:de:d1:97:e3:18:8f:5b:8c:f2:54:2c:f4:d5:c8:
                    43:24:fc:da:54:ed:ef:8b:3a:85:99:52:fa:9c:20:
                    1c:5f:bd:1c:34:fb:26:8c:a2:9e:d4:16:18:6a:86:
                    bb:60:ba:82:16:b1:6a:54:2b:17:c3:f3:6f:03:3d:
                    22:14:b9:2d:8b:18:fa:1a:0e:6c:40:a8:0d:a5:ed:
                    73:69:fd:6e:c5:99:92:86:53:60:e3:75:4d:f1:0c:
                    ad:73:bf:cd:d5:07:3f:9f:7f:2b:84:c4:d1:c4:56:
                    ff:a2:6f:c0:7a:a4:b3:05:a1:9d:b6:28:02:c9:40:
                    75:5e:3c:09:d8:f1:0e:54:52:c3:a0:cb:b7:21:03:
                    0a:14:3a:34:3a:35:6f:60:59:23:44:8b:34:67:40:
                    08:1a:0e:d3:37:60:a5:1f:d9:68:39:2e:6b:21:ab:
                    61:35:cf:0f:c7:ee:e4:1e:24:92:b4:e1:c3:1a:1f:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:29:36:63:4A:4E:7C:99:A8:F9:0A:B0:7E:96:A1:2A:82:B1:81:CA
            X509v3 Authority Key Identifier:
                keyid:9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/323830333a623564303a3a2f33322d3332203d3e20323734313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b5d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:30:1f:8c:d3:08:bb:e2:ea:54:3f:2e:9e:d8:e8:1d:91:4f:
         e1:73:f2:fc:8c:ad:68:d6:6f:17:f9:48:d8:e1:7b:69:7b:01:
         45:e6:32:69:5a:4b:0a:8d:fd:e8:08:fe:25:6a:59:4f:a0:9a:
         37:56:1f:ae:50:8a:bb:50:56:6a:b7:f1:c8:15:df:9b:db:53:
         0b:64:96:67:8d:05:99:a1:81:44:06:42:49:b6:e9:cd:e0:ec:
         06:96:bd:66:37:23:1d:d1:24:a6:8d:8b:56:92:84:5f:3e:11:
         b4:1d:d5:98:d7:35:e7:33:08:29:20:fe:07:51:10:02:a2:26:
         73:3b:7d:2d:f7:13:cb:f7:16:5e:70:e4:24:38:29:29:ca:56:
         aa:97:cc:36:df:0c:a7:0d:a9:16:78:e5:38:e1:0a:af:a7:88:
         30:ec:e7:8b:d4:cb:cb:33:6a:29:63:ad:d0:fc:21:f7:a4:17:
         69:31:af:b1:38:1c:fa:e5:70:02:11:09:3a:b2:c5:dd:9a:7f:
         48:a7:c8:a8:3c:ee:8e:e2:1f:24:0f:7b:47:37:12:55:2d:e9:
         7c:df:50:3c:95:d5:c5:3b:f1:fe:0c:41:52:92:5d:70:bf:4b:
         e1:d5:64:ec:f3:e4:2a:37:87:3f:78:76:11:82:47:71:76:af:
         3a:f2:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:21:10 2026 by rpki-client