Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/323830333a386635303a3a2f33322d3332203d3e20323733393432.roa
File:                     323830333a386635303a3a2f33322d3332203d3e20323733393432.roa (raw, json)
Hash identifier:          ogVgKTI2cvg8Zilqd95n8RaNIL6wsgBAtRUFpY3FQUs=
Subject key identifier:   17:61:D5:89:22:1C:24:23:A4:A9:A2:53:E9:8F:76:0B:DC:2E:28:59
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       2250404FAA75B84E706148CDB4D0373DFC18CE91
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/323830333a386635303a3a2f33322d3332203d3e20323733393432.roa
Signing time:             Wed 23 Sep 2026 19:36:28 +0000
ROA not before:           Wed 23 Sep 2026 19:31:28 +0000
ROA not after:            Wed 22 Sep 2027 19:36:28 +0000
asID:                     273942
IP address blocks:        2803:8f50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:50:40:4f:aa:75:b8:4e:70:61:48:cd:b4:d0:37:3d:fc:18:ce:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: Sep 23 19:31:28 2026 GMT
            Not After : Sep 22 19:36:28 2027 GMT
        Subject: CN=1761D589221C2423A4A9A253E98F760BDC2E2859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:bd:de:c7:5c:79:24:37:09:cd:45:c8:f7:
                    3d:62:8e:a5:5e:16:a8:22:5b:e4:4e:3b:de:27:2d:
                    fc:ee:50:1b:e0:d6:33:04:9a:de:0e:64:3d:56:4d:
                    bc:c8:f4:b9:9b:5d:3d:51:c1:32:21:9a:f3:74:57:
                    81:43:8a:10:11:06:a2:64:a4:16:ce:0e:99:9c:94:
                    46:6f:7f:61:46:b2:c1:84:87:0c:de:e1:5e:2d:95:
                    dc:49:98:85:cc:96:22:85:04:51:90:45:f5:00:c7:
                    71:34:a1:31:c6:50:c9:15:2a:8c:5e:42:ad:8f:6b:
                    a6:cc:07:82:50:16:10:ac:ad:b4:f3:87:ed:bb:7f:
                    e7:6f:8a:fa:fd:ae:7d:c9:27:ed:56:ee:b3:1c:f6:
                    77:af:91:de:64:ca:18:c4:5e:00:1f:b8:09:00:19:
                    b1:ca:71:b0:82:9c:02:99:94:6e:76:29:4e:33:a5:
                    4c:b5:89:2d:5d:22:bd:9c:00:83:40:48:36:61:18:
                    e7:3a:ac:7c:8e:0d:1c:62:5e:ef:8f:3b:79:06:40:
                    eb:5c:f8:d1:f6:39:00:13:d9:be:c5:e6:96:9c:38:
                    22:8e:e0:eb:2b:b1:9f:f7:24:03:8f:4e:b3:2f:02:
                    4f:25:d5:4a:e4:b9:d4:76:cc:7d:bc:98:89:70:5f:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:D5:89:22:1C:24:23:A4:A9:A2:53:E9:8F:76:0B:DC:2E:28:59
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/323830333a386635303a3a2f33322d3332203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:3f:87:76:ad:d5:ee:58:39:db:ec:b7:37:cc:ba:d2:6e:
         de:d8:60:4d:2a:00:b2:92:7d:cc:5b:a3:51:c1:20:08:12:67:
         39:32:f6:ce:3e:0d:53:c5:75:e3:b6:95:18:c1:52:08:19:db:
         9c:3a:b7:75:3b:02:07:69:b9:2c:b0:f8:ee:dc:11:48:35:d0:
         98:ff:2d:8c:b7:21:0c:b6:e0:9d:8a:2d:37:31:c5:e3:ef:fd:
         9b:7d:67:ee:fa:f4:9e:01:df:97:bc:77:c6:2a:9d:d1:00:f0:
         4a:01:d4:10:6e:63:64:4c:23:31:6d:96:82:b2:d6:8c:b2:c2:
         5a:75:9c:69:76:30:f8:15:c6:21:1a:57:2f:53:27:22:43:cf:
         b2:13:4f:22:b9:0b:0d:6f:7f:ca:4a:44:45:b5:51:fb:4d:ef:
         dc:37:0e:3d:e5:10:b5:5f:dd:9a:ad:2d:2a:a6:ad:da:4c:19:
         53:cf:fe:ff:10:4e:39:66:0f:fa:4b:3b:0d:43:96:8c:ae:e1:
         17:14:d7:d2:3f:0f:72:02:fc:00:c9:71:2d:ef:c2:a9:f6:dd:
         ba:de:59:34:57:a1:d4:22:f6:a6:47:db:46:2c:a2:ef:07:16:
         48:b8:05:cb:17:3b:0c:33:06:ea:4b:46:56:42:fb:ff:f8:ce:
         9d:7e:17:27
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIlBAT6p1uE5wYUjNtNA3PfwYzpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxNDFCNjcyQzZEM0FFQjcxMjY5MkJCQzZCRkNGMThB
NDJDNzU0OTAeFw0yNjA5MjMxOTMxMjhaFw0yNzA5MjIxOTM2MjhaMDMxMTAvBgNV
BAMTKDE3NjFENTg5MjIxQzI0MjNBNEE5QTI1M0U5OEY3NjBCREMyRTI4NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrV73ex1x5JDcJzUXI9z1ijqVe
FqgiW+ROO94nLfzuUBvg1jMEmt4OZD1WTbzI9LmbXT1RwTIhmvN0V4FDihARBqJk
pBbODpmclEZvf2FGssGEhwze4V4tldxJmIXMliKFBFGQRfUAx3E0oTHGUMkVKoxe
Qq2Pa6bMB4JQFhCsrbTzh+27f+dvivr9rn3JJ+1W7rMc9nevkd5kyhjEXgAfuAkA
GbHKcbCCnAKZlG52KU4zpUy1iS1dIr2cAINASDZhGOc6rHyODRxiXu+PO3kGQOtc
+NH2OQAT2b7F5pacOCKO4OsrsZ/3JAOPTrMvAk8l1UrkudR2zH28mIlwXyojAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUF2HViSIcJCOkqaJT6Y92C9wuKFkwHwYDVR0j
BBgwFoAUkxQbZyxtOutxJpK7xr/PGKQsdUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RUY1RTY3N0M0N0FGMjYwOEU4RENDOUIzNUNFMTM1MjJD
QTFDN0Y1NDI4NEY1ODIxQTlDQ0I5OEQ4MUY4Nzg3LzAvOTMxNDFCNjcyQzZEM0FF
QjcxMjY5MkJCQzZCRkNGMThBNDJDNzU0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MzE0MUI2NzJDNkQzQUVCNzEy
NjkyQkJDNkJGQ0YxOEE0MkM3NTQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEVGNUU2NzdDNDdBRjI2MDhFOERDQzlCMzVDRTEzNTIyQ0ExQzdGNTQy
ODRGNTgyMUE5Q0NCOThEODFGODc4Ny8wLzMyMzgzMDMzM2EzODY2MzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDj1Aw
DQYJKoZIhvcNAQELBQADggEBAFz/P4d2rdXuWDnb7Lc3zLrSbt7YYE0qALKSfcxb
o1HBIAgSZzky9s4+DVPFdeO2lRjBUggZ25w6t3U7AgdpuSyw+O7cEUg10Jj/LYy3
IQy24J2KLTcxxePv/Zt9Z+769J4B35e8d8YqndEA8EoB1BBuY2RMIzFtloKy1oyy
wlp1nGl2MPgVxiEaVy9TJyJDz7ITTyK5Cw1vf8pKREW1UftN79w3Dj3lELVf3Zqt
LSqmrdpMGVPP/v8QTjlmD/pLOw1Dloyu4RcU19I/D3IC/ADJcS3vwqn23breWTRX
odQi9qZH20Ysou8HFki4BcsXOwwzBupLRlZC+//4zp1+Fyc=
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:26:19 2026 by rpki-client