Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/323830333a363331303a3a2f33322d3438203d3e20323732303633.roa
File:                     323830333a363331303a3a2f33322d3438203d3e20323732303633.roa (raw, json)
Hash identifier:          LEaWmYpQxmU1vSkf7eJuplosi0VXfPKvAG6zg/vtpvw=
Subject key identifier:   EB:F7:66:AF:5B:C2:77:C1:64:96:43:69:59:AA:48:62:26:5A:3C:39
Certificate issuer:       /CN=19976E5BA74FB247FC4055C5D407269E0EE49686
Certificate serial:       783B0B9C2DECFFC31EB91460E88209BEDC394B1D
Authority key identifier: 19:97:6E:5B:A7:4F:B2:47:FC:40:55:C5:D4:07:26:9E:0E:E4:96:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19976E5BA74FB247FC4055C5D407269E0EE49686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/323830333a363331303a3a2f33322d3438203d3e20323732303633.roa
Signing time:             Fri 11 Sep 2026 12:40:00 +0000
ROA not before:           Fri 11 Sep 2026 12:35:00 +0000
ROA not after:            Fri 10 Sep 2027 12:40:00 +0000
asID:                     272063
IP address blocks:        2803:6310::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/19976E5BA74FB247FC4055C5D407269E0EE49686.crl
                          rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/19976E5BA74FB247FC4055C5D407269E0EE49686.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19976E5BA74FB247FC4055C5D407269E0EE49686.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3b:0b:9c:2d:ec:ff:c3:1e:b9:14:60:e8:82:09:be:dc:39:4b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19976E5BA74FB247FC4055C5D407269E0EE49686
        Validity
            Not Before: Sep 11 12:35:00 2026 GMT
            Not After : Sep 10 12:40:00 2027 GMT
        Subject: CN=EBF766AF5BC277C16496436959AA4862265A3C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:61:cb:4a:ab:36:e0:71:4d:d8:45:58:11:
                    39:79:f6:34:4f:e1:ee:ec:61:f5:e4:40:85:79:79:
                    9b:ed:96:d9:9a:ad:21:3c:c5:5d:96:d1:f3:ab:04:
                    28:d4:f6:32:df:4d:d0:f7:02:e0:1a:39:11:1f:83:
                    20:1d:c9:30:49:5c:89:49:32:80:21:2e:d5:38:f4:
                    12:2f:3e:c4:fd:91:bf:85:db:90:e9:88:7c:b5:40:
                    80:49:0d:43:7d:0d:9d:43:34:b2:ff:19:e0:b0:b4:
                    29:20:c1:b6:d2:ce:ca:63:ed:c5:c4:f6:fd:8c:f9:
                    b6:d2:c5:24:6c:e9:66:b6:0a:b4:3c:c2:c7:9a:52:
                    37:e9:03:93:58:cb:62:b4:aa:64:87:97:33:05:e0:
                    dc:ad:2b:41:a7:bd:e9:7d:29:21:dc:41:12:69:6a:
                    02:87:d7:2e:58:52:39:c0:22:8b:4b:44:62:fb:7e:
                    de:f0:16:31:ea:61:02:9a:71:42:97:a9:24:d3:71:
                    46:d5:5a:09:cb:44:1e:6e:e0:97:70:fb:05:cc:91:
                    63:50:67:29:fd:ec:22:be:0d:1d:96:4c:18:8d:10:
                    4a:1d:51:c5:19:65:f8:e4:e9:fc:cf:eb:51:43:29:
                    7d:81:ca:84:4d:99:76:fd:38:b1:77:01:bd:03:3d:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F7:66:AF:5B:C2:77:C1:64:96:43:69:59:AA:48:62:26:5A:3C:39
            X509v3 Authority Key Identifier:
                keyid:19:97:6E:5B:A7:4F:B2:47:FC:40:55:C5:D4:07:26:9E:0E:E4:96:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/19976E5BA74FB247FC4055C5D407269E0EE49686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19976E5BA74FB247FC4055C5D407269E0EE49686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/323830333a363331303a3a2f33322d3438203d3e20323732303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6310::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:23:90:a1:c1:35:99:47:94:87:42:11:0f:dd:5c:a1:8f:
         31:62:9b:0a:b1:86:cf:51:4e:94:9f:36:43:30:65:9a:78:4a:
         cc:c9:1a:77:0d:0e:59:df:fb:ff:bd:1f:cc:45:19:65:f2:f7:
         50:63:37:6e:8e:7e:2c:64:47:d3:1b:61:98:64:b0:80:66:0b:
         64:d5:b6:e3:34:cc:f7:c7:25:ee:2d:be:3b:10:91:d4:99:dd:
         20:2e:42:68:46:2a:de:7d:60:42:1f:c1:17:39:1f:bf:59:9b:
         0a:36:22:2d:6c:fb:6b:7f:f6:4d:d2:81:72:bb:5a:e6:a5:ee:
         76:d3:25:c2:3c:e9:e2:0f:74:29:d0:c1:5e:1c:6b:a1:b0:d0:
         e3:11:ad:91:26:ea:4a:8d:dc:bd:47:b5:c3:fc:57:b7:a9:a4:
         03:b3:3a:6b:6a:85:5b:59:9f:47:9f:fd:1d:2d:f9:ff:d7:99:
         71:6e:02:93:8a:f3:61:6f:63:05:b9:49:e5:df:f6:2b:67:37:
         e8:b9:f5:8b:a2:cc:df:6c:a7:7b:c9:38:da:26:a4:c2:45:2e:
         48:58:85:98:6f:55:58:e8:5a:b6:54:8c:ab:d4:8c:31:32:7e:
         c2:7c:74:9a:d8:2e:20:39:7f:70:65:2a:fd:9f:37:d1:01:99:
         90:21:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:30 2026 by rpki-client