Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/442F44C9F8B7117A41FBEABFBA650D1AB32599536F447913DCB03DA567277D30/0/323830333a313633303a3a2f33322d3438203d3e20323734383839.roa
File:                     323830333a313633303a3a2f33322d3438203d3e20323734383839.roa (raw, json)
Hash identifier:          sIxI51/GorYB6DLDp5Am5/28F7Lsxe9UmhWs0smbXgo=
Subject key identifier:   11:85:63:21:8F:77:EF:C7:5B:D2:E2:CD:E1:A9:89:AE:74:A5:6D:FF
Certificate issuer:       /CN=8A215851A2B132F847E0088C28CE66C60C454D45
Certificate serial:       6E3B969C45A6DF4B68855508F0B6E1C9D0066D4E
Authority key identifier: 8A:21:58:51:A2:B1:32:F8:47:E0:08:8C:28:CE:66:C6:0C:45:4D:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A215851A2B132F847E0088C28CE66C60C454D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/442F44C9F8B7117A41FBEABFBA650D1AB32599536F447913DCB03DA567277D30/0/323830333a313633303a3a2f33322d3438203d3e20323734383839.roa
Signing time:             Sat 18 Apr 2026 15:15:00 +0000
ROA not before:           Sat 18 Apr 2026 15:10:00 +0000
ROA not after:            Sat 17 Apr 2027 15:15:00 +0000
asID:                     274889
IP address blocks:        2803:1630::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/442F44C9F8B7117A41FBEABFBA650D1AB32599536F447913DCB03DA567277D30/0/8A215851A2B132F847E0088C28CE66C60C454D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/442F44C9F8B7117A41FBEABFBA650D1AB32599536F447913DCB03DA567277D30/0/8A215851A2B132F847E0088C28CE66C60C454D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A215851A2B132F847E0088C28CE66C60C454D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3b:96:9c:45:a6:df:4b:68:85:55:08:f0:b6:e1:c9:d0:06:6d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A215851A2B132F847E0088C28CE66C60C454D45
        Validity
            Not Before: Apr 18 15:10:00 2026 GMT
            Not After : Apr 17 15:15:00 2027 GMT
        Subject: CN=118563218F77EFC75BD2E2CDE1A989AE74A56DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:9d:93:cf:50:58:fe:84:f4:80:56:cd:7a:
                    45:0b:ca:82:3f:cf:4f:c6:8c:97:2c:5c:2d:c0:91:
                    ed:39:8a:1c:ba:22:37:a9:4d:f5:a3:b6:29:d2:fc:
                    75:f7:9c:ba:aa:1a:15:47:bb:4a:cc:55:5a:3f:13:
                    d7:60:0f:39:76:b8:fb:08:70:97:7a:9d:fe:cf:4e:
                    28:c9:4c:6a:41:d7:ae:5d:98:2d:ba:33:02:40:c2:
                    9e:2d:23:d9:72:11:84:86:cc:4c:d1:df:ec:07:53:
                    b0:a0:19:06:70:37:7d:4a:60:6c:19:90:61:d6:23:
                    73:b3:e9:c0:5a:2b:b3:4a:7d:da:cc:14:05:26:e2:
                    68:8d:76:89:b1:45:ac:4a:fc:a4:00:3f:d2:7c:bf:
                    73:2a:61:a9:98:c5:fe:86:7b:2c:30:da:6b:30:e4:
                    72:da:3c:62:e4:ff:29:6b:0d:ed:d9:ae:77:f1:8d:
                    f7:eb:09:d4:81:7a:4d:e6:1f:d0:05:96:8f:e2:df:
                    c7:96:42:3f:f2:d1:e9:dc:71:6e:82:f7:b0:c7:88:
                    d1:b6:95:70:38:41:a8:e5:2f:8f:d9:37:f8:12:7f:
                    d2:88:a2:bd:bb:48:42:d8:46:1b:8f:18:28:80:b5:
                    0d:ff:62:ae:eb:0e:c8:2c:af:5f:f9:5c:0d:42:ca:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:85:63:21:8F:77:EF:C7:5B:D2:E2:CD:E1:A9:89:AE:74:A5:6D:FF
            X509v3 Authority Key Identifier:
                keyid:8A:21:58:51:A2:B1:32:F8:47:E0:08:8C:28:CE:66:C6:0C:45:4D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/442F44C9F8B7117A41FBEABFBA650D1AB32599536F447913DCB03DA567277D30/0/8A215851A2B132F847E0088C28CE66C60C454D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A215851A2B132F847E0088C28CE66C60C454D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/442F44C9F8B7117A41FBEABFBA650D1AB32599536F447913DCB03DA567277D30/0/323830333a313633303a3a2f33322d3438203d3e20323734383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1630::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:22:5d:cf:da:78:d5:9a:f9:60:8a:7c:cf:c8:99:5e:c4:
         04:17:71:ed:d6:43:21:24:4b:6e:dc:bc:e1:6b:9c:8c:83:cc:
         20:92:aa:48:42:39:9d:17:c2:57:70:89:06:4d:e3:b3:be:9b:
         4a:a2:a0:1f:70:1c:ec:ad:8a:2a:98:31:7c:30:a8:69:f5:c4:
         57:e9:ea:11:99:fb:81:36:d5:4c:b8:4f:d2:bc:06:8f:c4:5f:
         ed:f0:53:4d:6c:1c:81:3b:94:38:95:5b:cf:1f:14:5f:0e:72:
         cc:71:b4:51:21:1f:5d:32:4d:f6:69:06:1b:24:43:26:84:64:
         28:c1:d0:47:4c:30:39:d5:dd:64:f2:39:c4:d7:8e:3a:7c:d7:
         ba:e1:44:18:08:70:bd:da:e6:fb:c8:34:51:1a:a4:5f:14:93:
         5a:bd:4e:b8:e5:54:af:b8:2b:37:78:68:6e:9f:a5:fc:c4:56:
         08:90:ef:99:0d:19:fd:19:29:41:43:e7:dc:c5:94:00:23:e0:
         0f:bf:af:d9:92:c1:ad:c2:ca:0e:a9:dd:56:ff:f7:de:8a:71:
         40:17:33:68:b6:51:2e:d0:7d:c9:24:8f:c8:25:54:ee:72:63:
         bd:38:62:20:8b:dd:b2:6f:51:a7:f2:4c:7f:74:2c:0e:a7:5b:
         9f:8d:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:30:55 2026 by rpki-client