Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79D6218B48A21F7E7C6EE55E79BB2DECC32C8FC99051CF9B7D875797C8CA8A2B/0/323830333a643164303a3a2f33322d3332203d3e20323734313338.roa
File:                     323830333a643164303a3a2f33322d3332203d3e20323734313338.roa (raw, json)
Hash identifier:          Vu+FyjI6zZjlapAinmRe3unJMv8CGMg2A2y4hfto9Ko=
Subject key identifier:   5A:0D:72:2C:01:4B:60:81:07:D8:70:F9:75:89:26:CC:E2:2B:2D:44
Certificate issuer:       /CN=6CB6AE6A2AA02CF1C4C611D3E76B58570719A467
Certificate serial:       17F3802A545594BEF9704059D12A15E0B65379DA
Authority key identifier: 6C:B6:AE:6A:2A:A0:2C:F1:C4:C6:11:D3:E7:6B:58:57:07:19:A4:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CB6AE6A2AA02CF1C4C611D3E76B58570719A467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79D6218B48A21F7E7C6EE55E79BB2DECC32C8FC99051CF9B7D875797C8CA8A2B/0/323830333a643164303a3a2f33322d3332203d3e20323734313338.roa
Signing time:             Mon 27 Apr 2026 15:00:00 +0000
ROA not before:           Mon 27 Apr 2026 14:55:00 +0000
ROA not after:            Mon 26 Apr 2027 15:00:00 +0000
asID:                     274138
IP address blocks:        2803:d1d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79D6218B48A21F7E7C6EE55E79BB2DECC32C8FC99051CF9B7D875797C8CA8A2B/0/6CB6AE6A2AA02CF1C4C611D3E76B58570719A467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79D6218B48A21F7E7C6EE55E79BB2DECC32C8FC99051CF9B7D875797C8CA8A2B/0/6CB6AE6A2AA02CF1C4C611D3E76B58570719A467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CB6AE6A2AA02CF1C4C611D3E76B58570719A467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f3:80:2a:54:55:94:be:f9:70:40:59:d1:2a:15:e0:b6:53:79:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CB6AE6A2AA02CF1C4C611D3E76B58570719A467
        Validity
            Not Before: Apr 27 14:55:00 2026 GMT
            Not After : Apr 26 15:00:00 2027 GMT
        Subject: CN=5A0D722C014B608107D870F9758926CCE22B2D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:7b:dd:6b:58:0e:b6:cb:5a:9b:a6:53:8b:
                    36:a5:d9:7e:43:e0:1f:87:f7:0f:b4:39:05:af:63:
                    1a:52:08:3a:c8:94:89:05:79:3a:a6:a5:9a:cb:38:
                    bd:d4:4c:d8:09:d4:52:34:0c:00:67:ff:e0:d6:4d:
                    bb:75:78:cc:61:f1:b2:98:1c:4e:02:a7:8f:8b:33:
                    e2:8e:d9:ca:75:a1:7c:ce:42:d4:70:a3:e3:f1:28:
                    06:2e:f5:a7:30:a4:5a:fd:3b:35:f0:b3:1c:ff:93:
                    eb:f8:8b:b5:82:b0:2d:0d:7d:fc:3d:9f:f4:6e:21:
                    d3:78:72:18:60:34:8b:84:f5:b0:57:48:8b:89:b1:
                    9a:a7:1f:7d:64:af:5d:51:bf:73:0c:77:a6:e5:96:
                    88:d1:be:03:53:9b:3d:35:1b:de:ba:4e:b6:62:2e:
                    99:fc:e2:8f:17:ba:e5:9b:54:05:b7:86:9f:82:24:
                    40:8f:3d:a2:cc:ef:5c:f3:b3:44:aa:2c:a1:70:b7:
                    1e:33:e1:e5:fc:f5:c0:1a:0c:6e:8b:c5:c4:92:7b:
                    9d:c0:1b:d9:f0:17:4b:31:7e:73:34:cf:1a:83:ae:
                    12:b0:a9:02:d1:bd:bc:56:7f:c5:50:c4:68:e6:68:
                    d1:f9:c2:ea:1e:0e:5c:1f:ac:c6:04:8e:77:da:34:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0D:72:2C:01:4B:60:81:07:D8:70:F9:75:89:26:CC:E2:2B:2D:44
            X509v3 Authority Key Identifier:
                keyid:6C:B6:AE:6A:2A:A0:2C:F1:C4:C6:11:D3:E7:6B:58:57:07:19:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79D6218B48A21F7E7C6EE55E79BB2DECC32C8FC99051CF9B7D875797C8CA8A2B/0/6CB6AE6A2AA02CF1C4C611D3E76B58570719A467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CB6AE6A2AA02CF1C4C611D3E76B58570719A467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D6218B48A21F7E7C6EE55E79BB2DECC32C8FC99051CF9B7D875797C8CA8A2B/0/323830333a643164303a3a2f33322d3332203d3e20323734313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d1d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:bf:55:7c:b4:f3:8c:a2:8a:9e:60:96:3a:53:fe:ff:04:
         96:80:a3:c2:82:e1:36:47:e6:7b:d3:21:ab:b5:71:42:b1:56:
         cf:cc:0a:7e:59:88:70:84:20:e3:c5:f5:13:2e:f4:88:ec:3d:
         77:88:33:e1:e9:ba:11:cc:fb:22:98:23:8d:65:fe:19:f9:0f:
         66:68:46:ac:98:42:d6:cf:7f:75:86:e6:44:c5:26:6e:76:24:
         5f:38:06:3c:19:b8:f6:8d:65:86:7b:e3:3c:59:49:58:8c:9c:
         ec:af:a0:cf:2d:19:81:3f:99:54:9a:5d:59:d3:97:13:65:b2:
         3e:93:65:4b:65:55:7b:9a:d4:76:b3:c0:cf:e5:19:7c:26:42:
         58:c2:59:d1:c6:6c:2d:66:bd:67:a3:38:48:32:25:99:3e:57:
         28:c0:e0:a2:74:5f:60:17:c8:22:e4:20:8e:db:40:c1:9a:1c:
         4c:cd:be:5c:e5:30:dc:3d:e5:d2:51:a2:d7:43:a5:92:45:8b:
         19:fa:0d:a7:3c:76:fd:76:db:1b:5a:2c:67:15:12:7b:6b:06:
         ee:97:c1:61:61:80:9f:07:98:4d:d9:41:ba:60:47:e5:ce:c7:
         1d:c8:d5:2b:fb:e3:77:f4:75:07:2e:78:2d:54:55:0d:7e:72:
         1a:b7:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:31:09 2026 by rpki-client