Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/323830333a376264303a3a2f33322d3438203d3e20323734323331.roa
File:                     323830333a376264303a3a2f33322d3438203d3e20323734323331.roa (raw, json)
Hash identifier:          j3Kok1fvkbiDqEWKpnw6jWioX5eN+TpG1mdeVpAP0a8=
Subject key identifier:   AC:85:B6:9A:94:F6:C3:2D:17:74:86:04:CE:0A:A1:F1:78:6C:B9:D3
Certificate issuer:       /CN=CC61C9832275FDCA9E312CE28253A3F9165ECC75
Certificate serial:       333E5F00941A2FB0FABDAAA7659D3532CE8C4C51
Authority key identifier: CC:61:C9:83:22:75:FD:CA:9E:31:2C:E2:82:53:A3:F9:16:5E:CC:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/323830333a376264303a3a2f33322d3438203d3e20323734323331.roa
Signing time:             Thu 05 Mar 2026 02:20:00 +0000
ROA not before:           Thu 05 Mar 2026 02:15:00 +0000
ROA not after:            Thu 04 Mar 2027 02:20:00 +0000
asID:                     274231
IP address blocks:        2803:7bd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3e:5f:00:94:1a:2f:b0:fa:bd:aa:a7:65:9d:35:32:ce:8c:4c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC61C9832275FDCA9E312CE28253A3F9165ECC75
        Validity
            Not Before: Mar  5 02:15:00 2026 GMT
            Not After : Mar  4 02:20:00 2027 GMT
        Subject: CN=AC85B69A94F6C32D17748604CE0AA1F1786CB9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:b6:9a:a8:de:c0:40:56:11:ea:42:7b:ec:
                    3b:14:78:4d:5d:8f:26:9e:73:ef:73:22:3d:f0:7f:
                    88:25:47:a9:51:73:77:ee:b5:75:2d:c0:c4:41:70:
                    b4:c3:3a:be:40:63:f8:8e:c9:ab:44:2a:09:19:d8:
                    d5:7b:15:98:5e:d0:71:ad:19:99:ce:60:c8:ba:f0:
                    5a:fd:20:dc:52:7b:c0:af:13:a9:fe:b7:8e:37:a7:
                    00:23:9b:d5:1e:7a:4d:d4:4b:32:e7:f6:f7:ee:75:
                    87:a0:15:19:4b:6b:dc:16:54:c2:61:6e:5a:fc:61:
                    55:a1:77:5c:a8:d4:29:d2:38:31:5f:60:7d:4b:9e:
                    27:6c:be:39:93:9c:1f:0d:83:c6:fa:5f:47:75:0a:
                    a7:4a:f6:d0:49:ca:ac:2a:60:eb:19:f1:81:cd:d0:
                    4d:c5:9e:8e:73:75:a1:58:84:cf:14:bd:d3:8c:01:
                    c5:86:f9:29:46:d2:89:26:31:b5:f3:3f:e4:18:a0:
                    a4:7e:d3:b9:d6:e3:d7:9b:05:98:46:31:2d:a3:42:
                    4a:8b:3e:9c:69:a6:90:e9:8a:19:97:01:79:69:a5:
                    dd:05:00:68:d5:56:28:cf:ab:93:50:fc:7f:fd:43:
                    f4:8a:85:65:40:d4:93:d0:63:cf:8b:ef:6d:15:75:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:B6:9A:94:F6:C3:2D:17:74:86:04:CE:0A:A1:F1:78:6C:B9:D3
            X509v3 Authority Key Identifier:
                keyid:CC:61:C9:83:22:75:FD:CA:9E:31:2C:E2:82:53:A3:F9:16:5E:CC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/323830333a376264303a3a2f33322d3438203d3e20323734323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:5d:01:84:53:0b:60:93:94:fd:18:87:56:c7:e5:56:40:
         07:e9:c1:e0:ee:bc:dd:d8:82:ef:29:2d:8d:03:f4:9f:dc:5f:
         f6:1c:c8:9a:06:2f:5c:f4:02:aa:1f:5a:31:90:23:7f:e6:34:
         0e:5b:5b:c4:5c:3c:13:6a:86:8b:01:8f:5d:47:79:b4:9c:3d:
         2f:a8:94:d4:6e:dc:de:18:bb:13:d7:75:aa:86:c0:c0:0d:31:
         c6:92:79:ef:56:36:89:04:89:fe:40:0f:40:74:54:98:4b:99:
         e8:2a:cb:cf:eb:06:53:64:5e:28:9f:cf:19:ca:f8:3e:fa:50:
         dc:7f:11:49:eb:48:8f:ff:85:e2:05:c0:ee:0d:fa:e2:25:24:
         4a:ad:a0:bd:09:21:7e:c3:02:c3:ee:ad:95:7f:d2:f4:2d:c2:
         e9:e0:6d:25:19:10:a3:0a:d2:99:fb:99:f8:09:1a:0c:9e:1f:
         3c:40:9b:70:89:e5:a3:b9:9a:36:ab:47:cf:1e:4f:3f:30:9f:
         cd:5b:81:05:34:e7:7d:0e:09:78:ab:30:02:9b:6e:5f:0b:82:
         7f:23:c8:8d:62:2d:26:ed:58:d0:7d:1d:bc:46:a2:d5:46:70:
         aa:de:86:a1:cb:e8:33:55:f7:e7:17:c0:c5:8a:37:f4:5b:1e:
         b2:41:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 04:30:55 2026 by rpki-client