Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/323830333a323133303a3a2f33322d3332203d3e20323734393233.roa
File:                     323830333a323133303a3a2f33322d3332203d3e20323734393233.roa (raw, json)
Hash identifier:          hRDfVBRtP/e9dwQL4zT2+HxrVdPly6H9cJt+abN//jY=
Subject key identifier:   93:54:1F:9B:CD:D1:0F:C7:66:ED:45:67:37:5E:09:5E:74:DF:D1:D0
Certificate issuer:       /CN=A6EB6D9EC3209ED47407051C9C736B980904A8A3
Certificate serial:       347FFF94CD807B1D22B4E51F97984B230761B7C9
Authority key identifier: A6:EB:6D:9E:C3:20:9E:D4:74:07:05:1C:9C:73:6B:98:09:04:A8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/323830333a323133303a3a2f33322d3332203d3e20323734393233.roa
Signing time:             Wed 12 Aug 2026 13:50:00 +0000
ROA not before:           Wed 12 Aug 2026 13:45:00 +0000
ROA not after:            Wed 11 Aug 2027 13:50:00 +0000
asID:                     274923
IP address blocks:        2803:2130::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7f:ff:94:cd:80:7b:1d:22:b4:e5:1f:97:98:4b:23:07:61:b7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EB6D9EC3209ED47407051C9C736B980904A8A3
        Validity
            Not Before: Aug 12 13:45:00 2026 GMT
            Not After : Aug 11 13:50:00 2027 GMT
        Subject: CN=93541F9BCDD10FC766ED4567375E095E74DFD1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:7a:ff:ee:cf:68:d0:13:02:2c:7d:31:89:
                    67:cc:bc:f8:82:d8:d3:28:88:b5:b4:2f:c3:9a:83:
                    f9:18:a9:ab:9d:90:89:4b:33:7b:6c:f0:90:28:a7:
                    1a:dc:f7:5e:0a:ee:a0:21:6e:9e:b9:d3:f8:c2:2b:
                    9e:36:6e:24:d2:0f:24:66:7f:04:d0:66:3e:3c:d9:
                    91:5d:bb:ac:05:47:6a:29:cd:68:5f:4d:72:6e:88:
                    1b:23:ef:ff:15:54:91:e5:99:84:84:01:3b:f2:17:
                    49:2c:88:d7:7f:ee:84:2a:b7:f3:b0:2f:56:64:f4:
                    27:62:74:b1:e0:ce:27:ed:65:51:fb:9c:ce:b0:ae:
                    02:ea:1f:62:f8:a4:da:9e:40:e4:73:a9:24:8e:e1:
                    21:5c:33:5c:af:54:3b:e0:84:fe:cb:22:08:a4:98:
                    3c:3e:18:64:2b:32:ef:14:aa:7d:fe:e5:80:7a:80:
                    79:c7:cc:e8:5f:aa:b1:f1:df:a3:f1:59:81:bb:88:
                    8f:62:b0:54:bf:06:a9:b7:d5:5d:5f:53:04:f1:a1:
                    fe:a8:6d:cd:a8:ce:3e:86:5b:6a:65:00:48:9c:0d:
                    a8:7d:15:d1:50:60:63:b5:9f:a4:e8:f1:1f:d2:36:
                    11:5f:66:21:3c:fb:8e:b1:3a:bc:c0:7e:e3:ee:14:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:1F:9B:CD:D1:0F:C7:66:ED:45:67:37:5E:09:5E:74:DF:D1:D0
            X509v3 Authority Key Identifier:
                keyid:A6:EB:6D:9E:C3:20:9E:D4:74:07:05:1C:9C:73:6B:98:09:04:A8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EB6D9EC3209ED47407051C9C736B980904A8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/764DD1F59D8F65A00A5F675707B94E718E636E338FE33C9C37048913E79F1614/0/323830333a323133303a3a2f33322d3332203d3e20323734393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2130::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:75:ae:d6:83:26:35:60:d7:a5:55:b7:72:4c:5e:d7:82:
         78:50:6d:36:42:1c:08:96:c1:45:ef:27:10:8d:e3:7b:6c:15:
         9c:cd:58:dc:27:25:5e:4d:70:40:96:c7:1a:d7:cc:36:ae:55:
         8f:98:44:1f:3d:12:f4:25:4f:0a:12:4f:cf:73:86:bf:34:fa:
         63:54:e1:d1:c3:06:b2:67:32:9c:c9:95:8c:b9:52:09:5c:de:
         16:e3:79:ac:20:15:cb:88:52:b1:d1:c9:fe:32:f7:99:1e:ee:
         cc:cb:6c:8f:41:3b:c6:ef:d4:e1:9c:82:61:c4:c1:17:46:f9:
         31:09:d2:9a:d4:76:f5:b4:51:49:ca:75:96:d7:f0:df:5c:3f:
         b9:02:8f:78:9d:0a:db:75:cd:24:77:01:0a:33:d7:a1:5e:22:
         9e:36:71:44:6b:dc:6a:1e:81:3a:8e:e8:53:02:f4:da:45:8e:
         70:88:76:1a:12:5b:d7:e0:8d:8c:60:b0:27:24:c5:2e:5b:96:
         da:6b:de:83:3a:92:4b:8a:7d:ab:cf:01:a2:64:f6:fe:d7:53:
         46:be:20:86:89:be:5a:94:d9:c5:fb:1d:1b:d1:4f:5b:60:3a:
         99:4f:ae:b3:21:07:b9:35:82:cc:59:ee:4f:36:6f:e8:ae:ac:
         eb:df:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:56 2026 by rpki-client