Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa
File:                     323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa (raw, json)
Hash identifier:          MHFSFhzMwWYijSgB8KpOqvK1xLp6gW9sBOPrDdHPxpE=
Subject key identifier:   5C:2A:34:3A:02:40:68:A8:6E:24:69:01:58:80:E1:F8:85:87:87:3A
Certificate issuer:       /CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
Certificate serial:       2F9C86CF4DA6AA2BB73B5D8CD3C43EC151CE13A8
Authority key identifier: C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa
Signing time:             Wed 08 Jul 2026 15:51:28 +0000
ROA not before:           Wed 08 Jul 2026 15:46:28 +0000
ROA not after:            Wed 07 Jul 2027 15:51:28 +0000
asID:                     273944
IP address blocks:        2803:cf50:200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Jul 2026 14:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9c:86:cf:4d:a6:aa:2b:b7:3b:5d:8c:d3:c4:3e:c1:51:ce:13:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536
        Validity
            Not Before: Jul  8 15:46:28 2026 GMT
            Not After : Jul  7 15:51:28 2027 GMT
        Subject: CN=5C2A343A024068A86E2469015880E1F88587873A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:1f:be:21:3f:fb:80:dd:65:d2:a4:da:01:
                    5a:8a:cf:eb:0b:b4:67:38:9f:e1:48:54:2d:94:63:
                    c1:14:98:2a:8a:07:c8:b5:45:7b:ae:7c:cb:cc:25:
                    d5:94:75:a9:1c:99:2d:e6:08:34:e2:e6:02:4c:77:
                    4f:d7:d5:3d:87:31:33:c2:a1:1d:16:8e:a5:14:d6:
                    c5:b8:2d:c6:2e:b2:2d:54:5b:5a:26:e4:66:7c:06:
                    23:6b:0c:f3:46:d1:96:30:a7:17:a1:fc:df:42:52:
                    fe:f7:74:0b:ac:d3:96:a1:42:70:5c:9d:c8:2f:29:
                    d1:14:51:cd:8a:a4:a2:84:fb:2f:bc:67:9b:1b:4f:
                    92:47:93:70:2a:1e:04:fa:47:91:c1:67:7f:37:04:
                    10:fa:b7:99:16:cd:e0:04:ca:86:31:0d:9c:4f:56:
                    69:57:2b:4f:65:55:92:72:2f:4f:93:d5:d6:70:4e:
                    78:59:46:7a:fd:52:e9:1d:f7:d3:d2:03:73:1b:91:
                    61:ef:e8:b8:f9:00:14:6a:5b:f0:07:04:dc:bc:72:
                    2c:62:da:d7:65:91:08:2e:13:70:76:1d:87:93:f8:
                    f4:32:96:f8:3e:b4:ab:59:19:5a:96:87:46:45:72:
                    df:a8:fb:9d:13:26:cc:b0:be:5a:22:c4:55:43:3c:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2A:34:3A:02:40:68:A8:6E:24:69:01:58:80:E1:F8:85:87:87:3A
            X509v3 Authority Key Identifier:
                keyid:C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/323830333a636635303a3230303a3a2f34302d3634203d3e20323733393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf50:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:90:1f:e5:a6:dc:4f:af:1c:79:bc:c8:50:37:63:ca:02:de:
         ed:a2:c0:8e:43:5a:a3:86:68:15:96:1d:24:23:b1:ad:cc:68:
         d2:ff:24:72:d8:03:1f:85:ca:a4:a0:63:26:66:bf:7f:00:c7:
         3a:47:52:b8:b5:c5:84:35:0e:dd:cd:3f:b9:c4:87:e2:54:0c:
         14:c0:7a:ad:1c:ce:55:2d:3d:dc:c8:b5:13:76:33:8b:b4:ef:
         57:5c:0b:33:bb:0d:ac:e7:7e:de:e4:46:a6:57:7e:a3:ed:55:
         7e:ee:89:82:12:31:5d:08:76:e7:0a:4a:cf:1b:92:d7:f4:f0:
         77:0f:1d:53:c9:1f:ed:fc:3d:9d:d7:7e:fc:d8:7e:15:e3:45:
         26:75:0b:d5:2e:08:04:da:0f:83:0b:ec:39:c9:b4:6b:0a:ad:
         68:65:e3:b2:52:05:8a:54:08:1d:d4:1b:2e:22:0b:34:e4:93:
         04:9d:88:3d:e8:c0:3c:49:32:cc:88:2e:1e:08:19:8a:9b:b9:
         31:1b:d2:58:4a:4d:67:8f:88:c4:8e:54:88:e7:91:d1:ef:8b:
         a5:bc:d5:03:9e:af:2c:61:80:dc:bd:50:74:6d:b1:48:ee:da:
         7f:a8:3d:fd:19:13:ed:67:33:0f:ce:ab:94:4e:26:a0:52:a0:
         55:1f:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:46:42 2026 by rpki-client