Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/323830333a336134303a3a2f33322d3438203d3e20323633383236.roa
File:                     323830333a336134303a3a2f33322d3438203d3e20323633383236.roa (raw, json)
Hash identifier:          VjN5g2c/yALLdE0VOlmG7RZ7JghHYSMEaAkpMy2odCM=
Subject key identifier:   69:C8:B2:85:64:50:AD:DC:40:69:4C:9C:9D:EE:42:E8:6E:1D:A4:55
Certificate issuer:       /CN=4E3267FAB0006558F96FC153AC65738471EF0825
Certificate serial:       476E724EFF550F1545D7F76DF6D7FFA14911EFA9
Authority key identifier: 4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/323830333a336134303a3a2f33322d3438203d3e20323633383236.roa
Signing time:             Mon 27 Jul 2026 22:51:09 +0000
ROA not before:           Mon 27 Jul 2026 22:46:09 +0000
ROA not after:            Mon 26 Jul 2027 22:51:09 +0000
asID:                     263826
IP address blocks:        2803:3a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6e:72:4e:ff:55:0f:15:45:d7:f7:6d:f6:d7:ff:a1:49:11:ef:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E3267FAB0006558F96FC153AC65738471EF0825
        Validity
            Not Before: Jul 27 22:46:09 2026 GMT
            Not After : Jul 26 22:51:09 2027 GMT
        Subject: CN=69C8B2856450ADDC40694C9C9DEE42E86E1DA455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:4f:a8:1b:df:29:a8:2b:ca:9a:1e:f1:c9:
                    f9:a6:60:de:70:ae:be:49:bb:6f:37:33:20:3e:1a:
                    f4:99:d9:d9:a0:10:9f:45:cd:b8:2b:04:27:4a:9a:
                    c9:9d:8d:4f:bf:c7:d4:08:07:b5:1b:9e:39:aa:0d:
                    03:0e:96:ed:6a:ba:da:be:65:ef:4f:87:84:06:eb:
                    fa:7c:36:21:68:de:b2:f9:e0:08:b9:d3:f2:82:5a:
                    fe:80:81:ad:31:5a:61:bd:9d:1e:fc:fd:5e:c6:f4:
                    75:18:25:f6:e6:5f:c2:db:de:8d:b3:01:09:8d:30:
                    73:68:f4:69:09:37:c8:58:22:b8:db:43:20:ad:f3:
                    ed:58:57:15:ae:ac:62:ea:bc:9b:fc:bb:6b:ac:4d:
                    76:eb:a8:5f:f5:5b:bb:07:0e:5f:eb:6c:f9:5d:bb:
                    ad:f4:ee:34:0e:7d:f3:ca:df:3d:98:50:96:e8:e2:
                    96:cd:39:01:7c:9c:c4:77:86:2c:88:60:6b:63:a1:
                    b9:76:2a:35:c5:e4:41:c3:7b:4c:85:04:fa:bb:61:
                    1a:9f:86:73:b5:01:68:29:10:fc:ac:50:16:c9:75:
                    13:ae:77:67:75:69:2a:8b:a0:e8:1f:2b:13:7d:84:
                    cb:8f:63:4a:dd:40:3e:b7:c2:a8:4e:d8:ee:a2:fb:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:B2:85:64:50:AD:DC:40:69:4C:9C:9D:EE:42:E8:6E:1D:A4:55
            X509v3 Authority Key Identifier:
                keyid:4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/323830333a336134303a3a2f33322d3438203d3e20323633383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:19:17:b0:0f:14:a2:ba:cc:76:ec:d2:c0:15:d1:8a:42:a2:
         fe:19:e5:48:99:1e:d7:68:9d:c7:7f:cc:d4:74:bf:8a:b8:27:
         e9:f4:fa:87:be:a2:95:4b:8e:bf:a3:78:a8:e8:53:e5:71:68:
         f5:5e:8d:24:68:9f:82:32:fa:4e:48:d6:ee:e0:e1:3f:62:43:
         87:7a:c1:a1:b9:ca:74:b7:48:51:d3:7e:26:c8:c3:76:86:1c:
         e4:47:92:30:8b:8e:88:7a:b3:8d:6d:5e:f3:9c:fe:c5:f1:a7:
         a4:93:10:6d:e3:e3:47:91:d5:63:0a:c2:2f:52:1a:43:f6:e4:
         5e:a8:e4:36:12:d6:b1:18:84:51:4e:23:ec:af:b4:c9:45:b6:
         66:36:27:1a:88:13:4f:17:3f:56:04:5b:51:b2:6e:fb:af:47:
         ad:76:52:60:19:d0:80:27:ea:1f:c6:db:8c:4e:aa:32:be:45:
         a4:60:5f:fc:c8:32:8e:e9:0d:ce:2e:21:bb:52:1d:5f:6e:46:
         a2:f8:64:fd:1b:38:87:e9:3a:3a:18:0b:2a:3e:58:24:c0:52:
         35:20:35:8e:4d:00:3d:28:a5:57:1d:6e:40:c7:1b:43:34:83:
         c5:1c:07:c8:b4:f3:c8:0f:17:09:bc:b8:c7:86:42:50:f0:3c:
         c2:da:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:21:13 2026 by rpki-client