Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/585560B36EB2622C28F3637BF45486761C729906C2CAA3380207F5240B796BC3/0/323830333a656464303a3a2f33322d3438203d3e20323734313931.roa
File:                     323830333a656464303a3a2f33322d3438203d3e20323734313931.roa (raw, json)
Hash identifier:          HhIRLbUoGTuOKsB1pLPFx0/ISu6BcaP567t3TX4MXQg=
Subject key identifier:   BF:5C:88:0C:D0:8B:72:06:29:5C:00:5B:FB:80:8D:1E:14:65:9B:AD
Certificate issuer:       /CN=87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A
Certificate serial:       2F9703B55AD3EDCF43EC0129DF3BF305E37873B1
Authority key identifier: 87:F3:95:11:99:EB:9A:DD:65:AF:22:10:F6:0C:B8:AE:A5:C7:5E:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585560B36EB2622C28F3637BF45486761C729906C2CAA3380207F5240B796BC3/0/323830333a656464303a3a2f33322d3438203d3e20323734313931.roa
Signing time:             Fri 30 Oct 2026 11:06:19 +0000
ROA not before:           Fri 30 Oct 2026 11:01:19 +0000
ROA not after:            Fri 29 Oct 2027 11:06:19 +0000
asID:                     274191
IP address blocks:        2803:edd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585560B36EB2622C28F3637BF45486761C729906C2CAA3380207F5240B796BC3/0/87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585560B36EB2622C28F3637BF45486761C729906C2CAA3380207F5240B796BC3/0/87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:97:03:b5:5a:d3:ed:cf:43:ec:01:29:df:3b:f3:05:e3:78:73:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A
        Validity
            Not Before: Oct 30 11:01:19 2026 GMT
            Not After : Oct 29 11:06:19 2027 GMT
        Subject: CN=BF5C880CD08B7206295C005BFB808D1E14659BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:29:9e:92:b9:16:8f:97:80:f6:c3:7f:26:
                    b6:6f:9e:76:87:da:b7:c1:81:fd:f7:59:da:d6:22:
                    99:cb:8b:ff:e0:25:22:e3:ba:ef:5a:5e:9e:b4:13:
                    82:b4:65:f2:ed:d6:a3:2e:6e:11:77:6f:ac:a1:5a:
                    d7:0b:ae:45:27:fb:35:31:b5:3e:f5:02:f2:4a:5b:
                    95:1c:50:ff:84:20:95:df:df:b8:31:84:57:eb:9d:
                    d1:1d:22:27:d5:1e:6a:51:9a:e6:a3:bf:c0:16:bd:
                    af:2d:bb:04:9b:b8:72:f1:c1:06:a1:81:66:3a:4c:
                    87:29:b8:b4:8f:61:fd:51:e5:f3:99:5f:83:fb:d4:
                    48:87:b4:97:ba:3a:7b:69:bc:d0:82:f9:2c:24:a0:
                    de:4a:8b:36:73:76:34:4b:a2:6a:76:da:fe:ca:84:
                    d2:4e:d4:53:d5:54:29:96:67:d9:4d:12:61:16:94:
                    49:a5:08:76:92:8a:f7:a5:fe:b7:30:b0:7a:77:07:
                    92:36:35:fb:51:a3:d4:c3:db:ca:dd:55:f5:40:be:
                    b9:92:cc:08:0b:98:6e:cd:f5:db:2c:2f:32:dc:f3:
                    35:d5:70:3a:87:77:d3:21:1c:e0:32:3f:8d:03:13:
                    2a:52:6e:c4:98:b0:73:8d:e2:9d:c6:ef:be:e5:b9:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5C:88:0C:D0:8B:72:06:29:5C:00:5B:FB:80:8D:1E:14:65:9B:AD
            X509v3 Authority Key Identifier:
                keyid:87:F3:95:11:99:EB:9A:DD:65:AF:22:10:F6:0C:B8:AE:A5:C7:5E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585560B36EB2622C28F3637BF45486761C729906C2CAA3380207F5240B796BC3/0/87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87F3951199EB9ADD65AF2210F60CB8AEA5C75E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585560B36EB2622C28F3637BF45486761C729906C2CAA3380207F5240B796BC3/0/323830333a656464303a3a2f33322d3438203d3e20323734313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:edd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:2a:60:6a:7d:40:ca:56:b0:ea:3b:6e:d8:a9:06:bd:b6:
         7e:8e:ac:4a:a4:63:83:8b:e4:81:17:6b:f4:92:6a:4b:e3:1b:
         f9:41:8c:0c:94:2e:31:be:14:2e:ce:a8:a9:22:cf:4f:5c:cc:
         dc:07:ce:98:a6:30:19:26:a3:6b:6a:2b:2f:d1:8f:1c:71:8d:
         cf:2e:e2:ee:50:93:aa:87:d1:d0:4a:1e:5f:3e:64:6b:40:a9:
         d5:1c:ee:9b:cf:a4:08:b5:0d:b7:b5:18:7a:97:7c:c9:27:fb:
         89:93:26:4f:27:52:81:b6:f0:34:5a:f9:8a:5d:4b:e4:51:e8:
         bf:2f:8e:ee:74:fe:2b:65:6a:89:69:94:56:64:d5:53:79:33:
         af:01:9a:6d:88:8a:b6:a3:d8:ae:27:01:c9:3b:75:85:ab:89:
         ab:c1:5f:c5:ac:d4:f0:87:af:5e:76:e4:a6:73:b9:c4:b1:20:
         29:42:46:33:49:16:28:68:31:5b:ad:f6:88:4b:fa:0a:a7:27:
         82:79:06:36:ee:cc:89:8f:7b:3d:e2:af:d2:7e:41:17:6b:0d:
         3b:8d:b4:b3:39:5f:10:04:40:ef:8a:2f:2f:90:b6:0e:45:ea:
         c5:18:0c:9c:ef:17:12:d6:25:a6:80:67:c9:bc:b1:f2:9f:34:
         9c:76:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:48:47 2026 by rpki-client