Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/323830333a666535303a3a2f33322d3438203d3e20323733323335.roa
File:                     323830333a666535303a3a2f33322d3438203d3e20323733323335.roa (raw, json)
Hash identifier:          CW9rS0EovLfUPQC0gb/W66ATthswBgz7nY+RoOkQ0rY=
Subject key identifier:   23:58:FA:D4:7E:8D:82:59:59:F3:C2:04:8E:5D:1B:FD:0C:6D:D1:7A
Certificate issuer:       /CN=DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B
Certificate serial:       095D9AE371D2F55426D077A64EBB02A7037B3575
Authority key identifier: DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/323830333a666535303a3a2f33322d3438203d3e20323733323335.roa
Signing time:             Wed 04 Mar 2026 05:32:43 +0000
ROA not before:           Wed 04 Mar 2026 05:27:43 +0000
ROA not after:            Wed 03 Mar 2027 05:32:43 +0000
asID:                     273235
IP address blocks:        2803:fe50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5d:9a:e3:71:d2:f5:54:26:d0:77:a6:4e:bb:02:a7:03:7b:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B
        Validity
            Not Before: Mar  4 05:27:43 2026 GMT
            Not After : Mar  3 05:32:43 2027 GMT
        Subject: CN=2358FAD47E8D825959F3C2048E5D1BFD0C6DD17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:1d:71:a2:b8:b1:cc:f7:9d:fd:79:cf:83:
                    8d:3c:0d:99:3e:37:ab:e0:9c:0a:72:11:0b:73:78:
                    fc:8d:d3:4c:f6:48:a2:49:30:4d:c2:bc:11:82:61:
                    77:54:b6:9e:c3:68:51:e4:a6:d9:d6:26:35:7c:ea:
                    c3:77:11:c1:5b:c2:88:08:84:6d:49:0d:50:56:4b:
                    08:97:68:2d:25:c2:16:bd:de:9c:d8:7d:80:31:1c:
                    46:c0:7d:17:39:d7:df:7e:b6:6d:cb:7c:1c:2c:4d:
                    ae:87:06:8c:35:c9:23:65:5c:0f:f4:f0:97:c1:5e:
                    4f:93:68:17:de:83:ba:fe:57:7e:b2:93:42:97:d8:
                    cd:55:2f:83:02:1d:54:93:f8:c9:eb:94:4d:b3:80:
                    4f:35:19:7e:f2:e6:4b:ac:84:26:db:cb:b4:2a:9c:
                    49:3c:75:23:24:78:81:e4:0f:41:0a:9d:fe:7c:5d:
                    62:1b:c8:2e:2b:ea:4e:fb:0a:c6:68:9c:4f:5d:f4:
                    0d:b5:99:4e:f8:22:a0:b4:39:47:47:27:be:22:4a:
                    c1:bd:23:df:d1:61:72:07:4b:b5:76:c6:ec:ed:98:
                    aa:43:38:82:b3:99:af:39:3e:12:1d:f0:7c:f3:68:
                    52:55:62:7f:86:32:31:34:d2:b8:07:20:6b:ee:cf:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:58:FA:D4:7E:8D:82:59:59:F3:C2:04:8E:5D:1B:FD:0C:6D:D1:7A
            X509v3 Authority Key Identifier:
                keyid:DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/323830333a666535303a3a2f33322d3438203d3e20323733323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fe50::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:b7:3b:0b:21:50:08:6b:d9:96:f8:fa:b9:8e:ca:39:f4:
         9c:75:ab:be:c1:42:76:db:60:a0:32:1e:b0:9d:a8:23:fe:7c:
         d0:3a:64:5a:36:c5:c3:fc:ff:cd:16:a0:78:60:45:09:90:5a:
         36:6b:c6:87:99:f2:f9:6f:51:b2:d6:c0:7d:0f:ee:54:d6:ea:
         e3:80:78:30:e0:a2:4c:e8:9c:23:a1:ac:bc:9b:2d:a3:3a:97:
         3c:7e:35:ee:74:ea:86:8d:a6:e8:fc:31:5a:60:c2:bd:45:ed:
         1e:8b:35:4c:d8:00:1e:c4:82:ce:6c:6c:5e:c6:43:d4:7a:2b:
         44:06:9e:2e:79:6d:2e:fc:99:25:a0:05:58:4e:a7:25:27:f6:
         0e:5b:2c:6b:9d:f8:b9:cf:e2:1e:90:da:ed:23:ed:f1:40:e5:
         80:3b:d4:d5:55:06:6d:b0:66:db:a9:f8:ca:59:5f:f3:1c:09:
         56:f1:ca:75:59:7d:fc:4a:00:23:36:ea:ac:bf:d5:60:b7:5f:
         85:79:92:25:74:73:7e:93:99:10:b7:8a:49:c3:24:38:8a:a4:
         32:3c:3e:3a:9f:e7:be:68:a0:0c:bb:69:7b:a0:fd:23:97:e7:
         50:4c:96:a3:ed:3f:39:51:61:ea:e1:00:1e:70:10:6f:28:aa:
         c5:4e:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:20:26 2026 by rpki-client