Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/323830333a356665303a3a2f33322d3438203d3e20323733383737.roa
File:                     323830333a356665303a3a2f33322d3438203d3e20323733383737.roa (raw, json)
Hash identifier:          Uw/liDlgiZ567H1c0q5FcwcDx7FEoBGUsiCYkF/lQN8=
Subject key identifier:   9F:8B:DC:AA:6A:CF:D9:8E:CC:B6:88:36:C4:0B:AC:8D:E6:4E:5B:37
Certificate issuer:       /CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
Certificate serial:       16CA98973AB5A884B856A2D2F34307DAF5C2FBEF
Authority key identifier: 64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/323830333a356665303a3a2f33322d3438203d3e20323733383737.roa
Signing time:             Thu 14 May 2026 02:42:27 +0000
ROA not before:           Thu 14 May 2026 02:37:27 +0000
ROA not after:            Thu 13 May 2027 02:42:27 +0000
asID:                     273877
IP address blocks:        2803:5fe0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ca:98:97:3a:b5:a8:84:b8:56:a2:d2:f3:43:07:da:f5:c2:fb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
        Validity
            Not Before: May 14 02:37:27 2026 GMT
            Not After : May 13 02:42:27 2027 GMT
        Subject: CN=9F8BDCAA6ACFD98ECCB68836C40BAC8DE64E5B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:e5:c4:19:59:19:5e:44:57:0f:4f:dc:f2:
                    ec:6a:3e:2f:99:57:ac:b9:a1:c9:af:4c:e7:34:49:
                    5a:ad:53:38:59:c3:b4:b9:b8:89:bc:ab:de:fa:34:
                    27:0f:d1:85:0e:4d:2a:1d:91:1f:60:19:15:55:c0:
                    77:b1:20:31:63:1c:8d:cf:11:74:4c:cb:42:76:1d:
                    31:d5:ef:9d:37:50:93:1d:21:11:3b:ab:8d:39:9e:
                    35:e6:62:8e:14:b3:83:2e:f1:34:53:eb:60:2c:cb:
                    fd:0b:99:97:ab:b5:15:f0:bb:53:2b:73:fc:cf:7d:
                    b0:75:08:08:97:1b:69:06:6c:13:23:29:68:88:0a:
                    69:3e:e7:d6:d2:65:f3:90:dc:9d:24:ff:a0:77:0e:
                    15:2e:43:99:e5:fb:0f:f6:b4:86:31:0b:18:74:ec:
                    83:b8:eb:0b:e1:80:3a:54:dd:27:8e:0d:4a:15:a7:
                    21:25:57:b5:b5:e4:21:40:65:8c:4c:e9:a9:f7:4c:
                    2b:9e:16:e6:73:85:a7:e3:26:97:56:3c:c8:87:d3:
                    7a:6d:2a:34:c4:86:ef:49:78:9b:ab:c1:fe:0e:bc:
                    6b:c7:da:47:70:af:7a:5c:7e:91:16:2f:10:d3:ff:
                    54:64:58:58:6e:c4:c9:e5:70:74:29:05:8d:c2:fe:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8B:DC:AA:6A:CF:D9:8E:CC:B6:88:36:C4:0B:AC:8D:E6:4E:5B:37
            X509v3 Authority Key Identifier:
                keyid:64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/323830333a356665303a3a2f33322d3438203d3e20323733383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:03:ef:50:9f:4c:4d:a3:af:67:54:0d:4b:c5:1f:0b:8e:81:
         53:a9:e8:25:04:23:9a:7b:cc:4d:dd:a8:5f:b2:c1:64:79:f9:
         d1:67:bf:19:73:25:0b:df:8e:d2:6e:21:b7:9b:74:85:74:fe:
         cb:e3:89:b3:49:23:21:09:ae:c8:c5:3a:98:65:42:ca:78:8d:
         6e:4b:20:26:be:cf:92:a5:f2:00:00:e4:0b:d1:02:34:8a:c7:
         fd:62:64:e3:cb:53:3f:89:ae:96:7d:96:14:5f:a4:58:7d:85:
         de:83:0f:ef:49:48:b7:30:a6:4f:6c:72:18:40:60:a4:49:a8:
         30:49:0e:11:2c:1f:41:63:f5:87:b5:e4:b7:bc:01:00:56:64:
         33:9f:7d:61:dc:d1:16:46:72:6d:80:57:5d:49:ca:38:59:8b:
         fd:a2:81:3a:7d:a2:d7:68:af:8c:08:bd:53:7f:5e:5f:09:0a:
         d3:aa:26:6a:fe:dd:4d:2b:61:fc:22:25:f0:2e:d4:aa:31:5e:
         d4:0b:a9:f1:f8:30:b6:2a:b1:21:18:6c:72:a0:0c:eb:b7:0f:
         55:f2:83:62:65:73:b1:21:d1:bc:46:7e:0c:41:ee:c1:2c:20:
         e1:d4:26:c3:97:24:4a:2b:80:8e:e4:60:b9:e1:9b:c3:67:80:
         4c:04:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:39:02 2026 by rpki-client