Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/323830333a643764303a3a2f33322d3332203d3e20323734323433.roa
File:                     323830333a643764303a3a2f33322d3332203d3e20323734323433.roa (raw, json)
Hash identifier:          g8lNbxjNbQDD/oE+iLbaUt3wjqrGEv0wLtM5fFQfAAc=
Subject key identifier:   0C:2A:7D:CC:80:8F:1B:65:37:96:F0:13:21:8F:C2:D9:6A:A9:43:95
Certificate issuer:       /CN=31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1
Certificate serial:       0FD5A70A4309D5CC1DAECDCCD4D34E82BEF97033
Authority key identifier: 31:E9:76:3A:09:C5:05:8D:27:D8:E5:0D:6E:9F:BD:7F:CC:F2:A5:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/323830333a643764303a3a2f33322d3332203d3e20323734323433.roa
Signing time:             Mon 18 May 2026 16:40:00 +0000
ROA not before:           Mon 18 May 2026 16:35:00 +0000
ROA not after:            Mon 17 May 2027 16:40:00 +0000
asID:                     274243
IP address blocks:        2803:d7d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 00:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d5:a7:0a:43:09:d5:cc:1d:ae:cd:cc:d4:d3:4e:82:be:f9:70:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1
        Validity
            Not Before: May 18 16:35:00 2026 GMT
            Not After : May 17 16:40:00 2027 GMT
        Subject: CN=0C2A7DCC808F1B653796F013218FC2D96AA94395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:af:be:7a:93:28:32:49:64:d4:66:17:8a:
                    e2:86:a8:87:b4:82:02:dd:81:3d:6e:80:75:e7:e1:
                    44:a7:4b:49:1a:59:d0:fb:5a:95:18:e6:a6:55:e7:
                    7c:ee:15:d8:4b:7f:4b:80:18:ba:e5:73:65:3b:09:
                    8f:61:23:fc:1b:c6:99:d3:13:0a:9c:da:07:bf:7e:
                    33:8c:c0:c9:02:b9:d5:23:88:37:f4:39:db:d1:dd:
                    b7:2c:dd:6f:0b:d5:8d:85:ad:05:03:41:86:e8:03:
                    0a:e0:f1:48:4d:bb:99:bb:49:17:9c:ce:93:36:83:
                    b2:b1:ae:99:d9:0f:d1:7d:9a:9c:4b:64:55:4e:d7:
                    2c:f8:b6:d4:f3:08:b8:c5:6a:1e:a3:1a:92:63:48:
                    02:5e:aa:94:1c:d2:02:0e:8c:3f:77:1b:d3:f9:c5:
                    4f:85:a0:2a:e8:4c:a5:27:26:e1:17:9c:2f:b1:fc:
                    df:2e:76:f0:65:ce:4c:8a:d1:ef:85:2b:15:9c:70:
                    f9:32:8f:8d:9b:ed:8b:65:d9:8f:5f:8e:56:a4:a8:
                    03:fc:23:00:b5:4d:45:5e:b5:ec:a9:1d:5d:5c:80:
                    e0:a3:d0:41:f1:e9:9e:c5:0d:6b:7a:2c:93:92:b9:
                    40:c9:76:2a:aa:ad:37:da:7a:8c:0c:46:3f:fe:3f:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2A:7D:CC:80:8F:1B:65:37:96:F0:13:21:8F:C2:D9:6A:A9:43:95
            X509v3 Authority Key Identifier:
                keyid:31:E9:76:3A:09:C5:05:8D:27:D8:E5:0D:6E:9F:BD:7F:CC:F2:A5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31E9763A09C5058D27D8E50D6E9FBD7FCCF2A5A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F6FE40C097CF74184403D5673779B26D1105A2D90DB0C10E80A429B0D6D6709/0/323830333a643764303a3a2f33322d3332203d3e20323734323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:43:f7:0a:ca:f1:51:63:77:08:01:65:ef:62:da:f7:e4:
         23:2a:aa:7a:96:e4:d1:ef:67:44:a2:c0:8e:20:bd:f0:47:ef:
         f8:e8:57:4a:54:06:71:25:02:0b:70:b4:b9:04:97:c0:27:56:
         a5:38:c5:ce:ab:90:0c:3a:38:89:9d:b5:e6:d5:0e:60:77:8b:
         53:cf:14:03:d5:d0:c5:c4:67:58:30:e1:82:59:84:26:47:1d:
         dd:2b:b8:41:a2:67:03:c5:62:2e:e3:01:35:c1:59:f6:c8:0b:
         7c:3d:c4:ff:ab:14:4c:4d:43:eb:6f:9b:cf:f7:e4:dc:01:6c:
         f9:c2:3d:56:55:34:b8:2e:24:c3:48:6b:3f:03:b3:7d:2a:d9:
         1b:87:31:d3:68:84:0c:6a:13:64:9c:de:fa:8e:d5:27:f6:03:
         b5:6a:f3:4e:87:44:1f:0f:63:29:dd:2f:b6:de:68:d4:24:d4:
         f3:61:3d:35:19:53:33:c6:84:b9:6d:7f:64:0e:f7:f4:80:96:
         11:a9:45:fb:1e:ae:96:73:a6:e7:49:89:b0:18:3c:58:7c:2c:
         49:74:17:6a:84:08:79:4a:b2:3d:a5:dd:57:5d:31:2b:88:96:
         32:c6:e7:8e:fc:27:39:2a:c6:ca:a1:1f:05:54:65:56:9d:08:
         55:64:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:17:27 2026 by rpki-client