Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a623738303a3a2f33322d3438203d3e203237373432.roa
File:                     323830333a623738303a3a2f33322d3438203d3e203237373432.roa (raw, json)
Hash identifier:          S6gTId+9iX5WYgudRPXMuglws5tfAT4qMnPhX0llwQg=
Subject key identifier:   62:0B:D2:47:37:FF:48:BC:94:5C:38:E2:A1:CF:E9:96:DA:D4:84:28
Certificate issuer:       /CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Certificate serial:       5D1480A2D36DCC4F2D07B526B808B84308C2AAFB
Authority key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a623738303a3a2f33322d3438203d3e203237373432.roa
Signing time:             Tue 02 Jun 2026 17:45:38 +0000
ROA not before:           Tue 02 Jun 2026 17:40:38 +0000
ROA not after:            Tue 01 Jun 2027 17:45:38 +0000
asID:                     27742
IP address blocks:        2803:b780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 12:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:14:80:a2:d3:6d:cc:4f:2d:07:b5:26:b8:08:b8:43:08:c2:aa:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
        Validity
            Not Before: Jun  2 17:40:38 2026 GMT
            Not After : Jun  1 17:45:38 2027 GMT
        Subject: CN=620BD24737FF48BC945C38E2A1CFE996DAD48428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:74:33:3f:f1:b6:41:6b:73:ab:df:38:05:8f:
                    fa:90:6a:42:5a:ef:70:4d:c4:62:8f:25:e2:0e:43:
                    f9:d2:7a:65:5c:ef:f6:6e:2e:9e:ea:1e:82:ba:22:
                    ab:26:cf:8b:90:1d:c6:45:0e:f1:a9:55:af:a9:0c:
                    86:4b:74:63:d5:17:5e:24:5a:51:a4:34:65:d5:db:
                    4c:bc:eb:45:57:15:71:d8:1c:1d:e2:3c:3b:01:1d:
                    37:16:f6:0e:38:86:aa:4f:56:7a:3c:ff:a3:47:83:
                    51:41:e8:87:a2:1f:d0:69:89:dc:7a:a8:05:69:08:
                    13:19:22:98:9e:14:d3:5c:e3:65:f5:45:a5:aa:1e:
                    42:35:a6:b9:a4:69:ba:09:bb:df:b5:bb:a4:7a:cc:
                    96:4b:d3:1c:72:fd:37:74:a6:9e:57:7f:a9:f6:41:
                    19:0c:ee:bc:d8:7d:3e:77:eb:64:96:7c:5c:8e:c6:
                    f8:f7:ac:2c:ee:45:3d:a8:3c:bc:d1:f4:c4:29:2a:
                    10:1d:1c:a0:66:e2:df:81:ac:fc:cf:24:dc:2f:0c:
                    7c:67:29:22:6c:46:b6:9f:e8:33:08:66:01:c6:d2:
                    54:26:49:da:8f:16:14:12:0a:d4:9c:13:f0:3f:42:
                    9d:d2:ff:27:4a:f4:79:37:aa:23:40:1b:7f:3c:34:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0B:D2:47:37:FF:48:BC:94:5C:38:E2:A1:CF:E9:96:DA:D4:84:28
            X509v3 Authority Key Identifier:
                keyid:9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a623738303a3a2f33322d3438203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b780::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:7e:2b:0c:90:f2:29:06:11:6d:1e:3d:da:45:61:12:a1:
         40:ef:6e:ad:48:40:d6:33:4e:2c:0d:c4:34:79:19:2f:48:35:
         6b:76:8f:30:af:0c:75:33:41:bf:d8:2f:28:f2:98:8f:16:06:
         4b:73:24:a7:1d:d7:42:04:1e:57:f7:94:a6:93:fe:e1:18:a1:
         a3:f6:39:4e:ff:be:50:fe:ad:72:d4:11:32:4b:b6:ea:d9:46:
         75:ea:a1:bf:3b:b4:dd:fc:c8:60:7a:19:d1:ae:73:70:7b:36:
         8d:d6:ee:8c:65:57:ca:e5:f9:3a:e6:28:80:a4:e5:e0:e3:9a:
         d8:12:14:08:80:8e:b4:6d:a3:d8:61:3a:ed:ce:9f:de:58:bf:
         6c:8f:25:71:36:f2:09:ea:f1:cf:56:1e:0e:51:3f:ef:d6:45:
         e7:3c:1b:f5:ea:e7:92:cd:b2:c1:b9:f1:dc:46:e7:e8:73:76:
         76:8d:ba:37:88:7e:92:23:fc:f8:e0:d0:22:61:f4:ff:e9:e8:
         63:97:bc:8e:ae:05:9f:2d:91:07:86:36:ec:95:71:7a:fa:ee:
         d5:4b:44:9d:c4:a7:a7:a5:0c:cd:91:2a:92:b7:91:3f:d7:80:
         bb:05:85:38:74:69:67:1a:74:46:1a:3a:55:77:f1:99:2d:49:
         a6:ce:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 07:18:39 2026 by rpki-client