Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/323830333a366364303a3a2f34382d3438203d3e20323734303237.roa
File:                     323830333a366364303a3a2f34382d3438203d3e20323734303237.roa (raw, json)
Hash identifier:          I4AA2mNpVGFcFEtwJv/wTYL0SBDyXxDhlIY4EiafTQs=
Subject key identifier:   CC:7A:16:0D:87:7F:C0:50:7C:F6:B2:1C:E4:F2:88:F3:5B:B8:C6:B1
Certificate issuer:       /CN=8240614AB3A858CB9FF1EFE6E451A4E573057276
Certificate serial:       6FF8419B91F6CB1AF07EE2B5EEAAE2F2864EF0FB
Authority key identifier: 82:40:61:4A:B3:A8:58:CB:9F:F1:EF:E6:E4:51:A4:E5:73:05:72:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/323830333a366364303a3a2f34382d3438203d3e20323734303237.roa
Signing time:             Sat 24 Oct 2026 01:55:00 +0000
ROA not before:           Sat 24 Oct 2026 01:50:00 +0000
ROA not after:            Sat 23 Oct 2027 01:55:00 +0000
asID:                     274027
IP address blocks:        2803:6cd0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f8:41:9b:91:f6:cb:1a:f0:7e:e2:b5:ee:aa:e2:f2:86:4e:f0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8240614AB3A858CB9FF1EFE6E451A4E573057276
        Validity
            Not Before: Oct 24 01:50:00 2026 GMT
            Not After : Oct 23 01:55:00 2027 GMT
        Subject: CN=CC7A160D877FC0507CF6B21CE4F288F35BB8C6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:77:33:ef:b9:d1:4e:0b:1e:48:93:40:4b:
                    cc:30:8e:34:9a:39:0f:8e:fc:1c:3e:26:46:97:19:
                    db:b9:ce:17:c8:8b:e9:4c:a9:96:f3:bb:78:6a:83:
                    31:12:0c:ce:87:54:26:ea:e2:10:5a:cd:81:a6:68:
                    89:21:67:af:de:d3:11:b6:65:0c:80:3f:f0:4e:eb:
                    80:a9:0d:7a:15:e4:56:c8:2d:d4:55:40:4f:0e:e2:
                    15:65:b5:b3:55:22:61:26:b0:9b:f9:d9:5b:47:d7:
                    01:24:7c:69:b9:75:49:63:d9:49:a6:5c:e2:9a:a3:
                    74:77:0f:41:b7:72:d0:14:5b:ec:31:d0:1f:74:fd:
                    9e:53:09:88:dd:fb:4d:bc:fe:6d:fa:51:86:62:d7:
                    9a:1b:02:ef:71:a4:c5:ff:d1:11:46:03:44:98:88:
                    a6:fb:c2:91:bc:35:87:a9:a8:fc:93:d9:7d:86:6a:
                    46:2b:15:c8:a6:b4:b3:d0:6f:b0:01:ac:3e:ba:5c:
                    34:88:6b:78:79:9e:7f:7c:44:7d:64:f2:70:3f:53:
                    41:a0:4b:be:44:a9:85:4e:e6:d9:75:a0:b6:30:d3:
                    a6:1c:21:b8:c5:31:85:76:7a:2b:10:33:1e:30:a3:
                    25:68:c0:cc:90:28:67:91:8c:50:66:53:2c:33:18:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:16:0D:87:7F:C0:50:7C:F6:B2:1C:E4:F2:88:F3:5B:B8:C6:B1
            X509v3 Authority Key Identifier:
                keyid:82:40:61:4A:B3:A8:58:CB:9F:F1:EF:E6:E4:51:A4:E5:73:05:72:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/323830333a366364303a3a2f34382d3438203d3e20323734303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6cd0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:75:69:56:d1:39:70:d4:4a:19:3a:89:75:54:1b:ba:e1:
         a9:99:d0:a4:38:33:44:1c:cd:eb:f7:3a:8f:e9:c6:7f:8b:5b:
         26:73:80:54:c4:f9:d8:52:43:76:74:b9:fa:a9:b3:54:e9:ca:
         b8:80:d6:61:c3:49:f7:2e:3c:ac:69:7f:2b:ab:38:3d:62:e4:
         5c:1a:7b:40:8d:94:0f:3a:ba:36:45:cb:9b:21:a7:c8:8e:62:
         d0:3a:82:b9:25:b0:f6:44:81:03:f9:74:a5:be:d8:fe:92:d5:
         70:7d:c1:4a:2f:a4:b6:24:18:42:6a:b0:7b:95:79:2a:12:cd:
         ed:fa:d6:69:d7:18:20:33:44:d7:ab:bf:d4:78:44:c4:4e:8e:
         7d:62:98:46:6c:37:5e:51:3b:27:a3:e0:d8:6f:0b:fb:90:bc:
         ce:06:7f:5b:4c:a3:3d:ef:51:b4:6b:78:17:54:15:4b:83:4d:
         ca:17:0a:0d:73:d0:5f:d2:99:a5:bc:0c:e3:b9:c1:dc:1d:dc:
         41:5f:eb:3d:06:36:d5:aa:d6:57:cd:ec:35:20:04:ff:a6:70:
         c7:e7:71:a4:f9:58:29:1d:5a:55:7e:20:a2:6b:59:7c:03:30:
         20:05:a0:ce:26:b4:3d:97:36:48:2a:e9:01:c6:7e:e7:5b:4d:
         12:3a:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:23 2026 by rpki-client