Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/323830333a3835303a3a2f33322d3333203d3e20323733313035.roa
File:                     323830333a3835303a3a2f33322d3333203d3e20323733313035.roa (raw, json)
Hash identifier:          NaS7+TmMv6vZSOzgQpmERqt+2d0ELAP8q3KvG6kIE9k=
Subject key identifier:   0C:E7:01:DE:CD:E2:AA:F1:87:65:16:12:9A:E8:4E:36:7E:2D:F3:4F
Certificate issuer:       /CN=CCE406EE2B439003A67299728DE4BDF0F7D7CD39
Certificate serial:       64DCC1472A111445966D3CA2E4EDDEA8B2375306
Authority key identifier: CC:E4:06:EE:2B:43:90:03:A6:72:99:72:8D:E4:BD:F0:F7:D7:CD:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/323830333a3835303a3a2f33322d3333203d3e20323733313035.roa
Signing time:             Thu 17 Sep 2026 20:36:03 +0000
ROA not before:           Thu 17 Sep 2026 20:31:03 +0000
ROA not after:            Thu 16 Sep 2027 20:36:03 +0000
asID:                     273105
IP address blocks:        2803:850::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 23:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dc:c1:47:2a:11:14:45:96:6d:3c:a2:e4:ed:de:a8:b2:37:53:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE406EE2B439003A67299728DE4BDF0F7D7CD39
        Validity
            Not Before: Sep 17 20:31:03 2026 GMT
            Not After : Sep 16 20:36:03 2027 GMT
        Subject: CN=0CE701DECDE2AAF1876516129AE84E367E2DF34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:29:f1:a8:5c:4b:9a:89:93:7a:8d:6d:85:
                    ac:17:6c:7a:41:d3:7e:10:49:99:1b:af:3d:1d:4d:
                    60:a5:fa:25:d9:55:a6:34:7b:ff:44:02:ba:10:e4:
                    dc:5f:c8:5b:83:09:26:af:ca:95:ec:0d:02:ca:98:
                    6f:98:68:2f:72:4e:f8:24:12:88:70:67:43:a7:f0:
                    4f:33:cf:14:e0:8e:63:a3:dc:61:14:34:d3:ad:2e:
                    b6:3a:82:8b:3f:95:51:14:18:8b:6a:60:f3:94:d6:
                    19:4d:ad:5c:94:3c:9e:ca:a7:30:7e:96:02:65:c3:
                    94:cc:65:b6:4f:90:64:3a:28:33:80:b5:fa:b3:ff:
                    b9:a2:64:40:bb:07:bd:d8:0b:97:39:b8:2c:eb:27:
                    50:18:b8:ea:97:71:41:b4:7b:db:12:e5:62:a7:24:
                    bc:40:7c:2e:68:4a:ee:d1:fb:6f:72:1d:ac:0c:8a:
                    73:7e:2f:fc:f3:45:2b:dc:66:4a:d0:2d:ad:a5:bb:
                    29:90:4a:30:a4:cb:b6:0c:71:b2:3f:45:b4:7b:0d:
                    98:41:02:59:2b:ba:de:bc:ca:cc:42:2d:e7:e1:6a:
                    1d:db:17:8b:f4:8c:07:48:2a:ec:a3:9e:5c:89:ba:
                    6d:31:bb:5d:9e:d9:7b:24:ac:95:3d:bb:49:b5:f0:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:01:DE:CD:E2:AA:F1:87:65:16:12:9A:E8:4E:36:7E:2D:F3:4F
            X509v3 Authority Key Identifier:
                keyid:CC:E4:06:EE:2B:43:90:03:A6:72:99:72:8D:E4:BD:F0:F7:D7:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/323830333a3835303a3a2f33322d3333203d3e20323733313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:850::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:27:8d:19:47:40:e6:9d:66:d4:ba:b9:6f:27:3c:08:e1:7a:
         d1:bc:25:8c:88:32:cb:d8:9c:2f:68:b6:d8:f3:2b:cc:bd:3f:
         62:f2:bf:fd:66:e1:be:9c:8e:a4:6f:be:48:f5:31:54:20:ac:
         67:a1:bc:bb:01:24:82:10:cc:e8:ed:ba:15:29:df:bf:b3:6a:
         4b:5d:35:26:77:c7:c6:a1:35:67:24:46:4b:a6:64:c3:f1:17:
         a5:a8:0a:1d:ec:de:d8:78:4f:11:f7:e2:f2:50:ff:66:37:5e:
         2c:e6:e0:73:72:db:b2:68:10:1e:61:ea:c0:6e:8a:54:d3:1c:
         2c:92:3c:a9:c7:c9:5f:51:79:c7:c0:83:d7:58:d2:f8:32:66:
         60:17:44:cc:fc:40:79:44:71:04:a0:3e:c6:c1:6c:14:1a:2c:
         31:22:45:a2:14:c5:85:cd:ce:10:c8:f5:05:d3:49:2f:c7:b9:
         aa:4f:c1:e0:99:7e:e6:4a:e4:1d:51:44:77:0d:5f:33:be:75:
         4e:0a:d2:dd:0b:b1:7a:75:3b:e4:bb:d6:48:01:b7:52:d9:bd:
         32:21:80:73:7b:76:47:f7:4a:f5:5d:f8:e4:a0:21:92:77:37:
         11:6c:eb:be:ab:8e:24:8d:d1:b9:5b:80:b2:88:be:9a:52:dd:
         08:18:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:35:04 2026 by rpki-client