Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/323830333a356333303a3a2f33322d3332203d3e20323733323034.roa
File:                     323830333a356333303a3a2f33322d3332203d3e20323733323034.roa (raw, json)
Hash identifier:          uNiZtXXbXtHlFF32NrMusEElGDbTdYKm6bW7infDx1Q=
Subject key identifier:   AF:6E:EB:18:DF:84:F8:8C:D8:43:3F:1E:11:0E:A0:60:A0:CE:D5:64
Certificate issuer:       /CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
Certificate serial:       639334257B18E1FD2F23F636D0DE8219B3366C16
Authority key identifier: EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/323830333a356333303a3a2f33322d3332203d3e20323733323034.roa
Signing time:             Mon 02 Mar 2026 20:50:00 +0000
ROA not before:           Mon 02 Mar 2026 20:45:00 +0000
ROA not after:            Mon 01 Mar 2027 20:50:00 +0000
asID:                     273204
IP address blocks:        2803:5c30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:93:34:25:7b:18:e1:fd:2f:23:f6:36:d0:de:82:19:b3:36:6c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7
        Validity
            Not Before: Mar  2 20:45:00 2026 GMT
            Not After : Mar  1 20:50:00 2027 GMT
        Subject: CN=AF6EEB18DF84F88CD8433F1E110EA060A0CED564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:67:d3:23:86:90:53:ac:93:3c:f1:87:df:
                    27:64:22:a0:b1:d7:8d:83:3e:be:45:6b:a3:58:ee:
                    47:16:e5:03:31:ea:47:9a:37:4d:7f:f9:f2:0c:2f:
                    be:c4:da:bf:74:5c:00:90:08:b1:ea:a7:3b:42:55:
                    90:22:19:8c:58:d4:59:38:9e:e6:49:f2:49:0f:30:
                    e4:2b:87:fd:22:54:63:c3:a9:ee:7b:a2:b5:b2:25:
                    69:8e:fd:9f:a4:3d:59:0a:08:f8:aa:f7:c5:91:8b:
                    1e:af:f6:af:c2:e6:88:7d:11:e7:a6:1a:6c:eb:de:
                    b1:dc:67:56:96:5f:d2:16:98:48:7d:a4:68:c5:ee:
                    71:d8:52:6b:35:10:8f:c6:38:da:85:c0:f3:b3:4d:
                    7f:d4:36:c6:52:ba:c3:76:f3:66:3c:ca:0a:ce:03:
                    cc:49:89:bf:2a:62:47:93:3c:a9:2d:d5:9e:ae:05:
                    10:3a:1e:8b:58:39:b4:1b:fe:79:b5:9c:72:32:37:
                    0c:99:65:1e:b5:bf:1a:a3:ad:f2:41:1d:58:bd:ed:
                    a2:5c:23:7e:87:d9:40:05:f4:5f:32:5b:e5:f4:1f:
                    08:ba:1d:df:67:60:41:45:60:2e:d9:db:4a:13:2b:
                    7d:39:84:bf:37:4f:7f:41:08:13:55:e4:70:86:7b:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6E:EB:18:DF:84:F8:8C:D8:43:3F:1E:11:0E:A0:60:A0:CE:D5:64
            X509v3 Authority Key Identifier:
                keyid:EE:16:3B:BF:E2:97:D6:3B:79:AE:CB:7B:CE:C7:AB:C6:9F:79:11:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE163BBFE297D63B79AECB7BCEC7ABC69F7911C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9A1F1515ABFE5C0C1D829B0E456DEDCC90EA7CE24238F7CE2C290EAEA3C8B3A/0/323830333a356333303a3a2f33322d3332203d3e20323733323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:e9:b7:38:60:67:e9:a8:8d:cd:1b:cd:6c:3c:87:81:e9:
         d8:90:8e:76:1b:39:88:e9:04:1f:4c:b1:d2:22:cb:dd:5f:14:
         35:2f:42:d6:55:a3:56:14:f2:ea:0c:73:22:56:61:75:10:a2:
         dc:76:83:40:07:9d:cf:71:15:aa:50:ea:4b:7a:ab:38:ec:a6:
         58:50:ab:5f:bd:a1:dc:5d:76:f7:45:06:3c:f3:76:07:96:ba:
         38:f7:bf:ee:99:da:0d:c1:f8:a5:9c:c5:bf:18:66:17:8c:5e:
         9f:de:fc:b0:51:2d:c3:57:ff:5f:18:7c:15:49:d9:a9:c5:78:
         89:54:9c:16:9f:d3:6a:5a:c6:02:06:4c:29:9c:59:46:00:4e:
         f4:8c:64:0d:42:63:90:96:e0:72:8f:b2:ba:fc:90:03:30:b1:
         6b:14:ff:7c:85:06:15:be:6d:d9:d4:18:d0:d4:fc:b8:86:d7:
         5b:6d:8e:14:eb:db:d8:f4:e3:8d:c3:3c:a1:00:bb:d8:2f:b7:
         50:f7:25:d6:95:56:97:13:9e:19:9a:0a:b7:23:87:f4:d1:ed:
         84:83:c9:de:c7:f8:d2:d6:8e:e8:99:42:09:13:e6:24:e9:8c:
         96:1e:c8:c9:b3:a0:7f:3d:45:28:97:51:50:34:e4:d3:bb:2b:
         19:d8:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:03:23 2026 by rpki-client