Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/323830333a336136303a3a2f33322d3438203d3e20323633313839.roa
File:                     323830333a336136303a3a2f33322d3438203d3e20323633313839.roa (raw, json)
Hash identifier:          9IRvqKDhM2xjn3+UxQbQ7GAYIax+oK0N7P/dZPM0+xI=
Subject key identifier:   11:D0:98:2B:89:EC:A1:B4:C6:37:DD:E3:63:88:1C:40:40:72:F7:FC
Certificate issuer:       /CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC
Certificate serial:       3804D0565082F4CAC0AF32A312F2333D2D874F7E
Authority key identifier: 78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/323830333a336136303a3a2f33322d3438203d3e20323633313839.roa
Signing time:             Tue 25 Aug 2026 17:26:28 +0000
ROA not before:           Tue 25 Aug 2026 17:21:28 +0000
ROA not after:            Tue 24 Aug 2027 17:26:28 +0000
asID:                     263189
IP address blocks:        2803:3a60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 07:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:04:d0:56:50:82:f4:ca:c0:af:32:a3:12:f2:33:3d:2d:87:4f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC
        Validity
            Not Before: Aug 25 17:21:28 2026 GMT
            Not After : Aug 24 17:26:28 2027 GMT
        Subject: CN=11D0982B89ECA1B4C637DDE363881C404072F7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:b5:26:f5:f4:b8:43:4f:2b:9f:91:f7:fc:
                    7b:c9:d2:85:4d:62:6c:7a:6a:77:2e:21:c5:39:6b:
                    7e:23:d7:81:3c:60:e3:f1:e8:6a:73:88:e5:eb:76:
                    72:7d:0c:13:3d:dd:ee:58:93:d6:e3:c4:65:21:23:
                    91:90:ac:40:77:2f:4e:9a:f9:25:1d:fb:ab:93:f6:
                    9a:b3:da:ad:a4:42:6f:2a:4e:e7:99:7c:de:cd:74:
                    02:e3:cc:5d:c3:3f:2c:58:37:4a:57:2f:98:c5:88:
                    ef:28:b7:25:af:f9:4e:00:ff:71:8d:61:cf:c7:2a:
                    a8:36:b7:29:de:02:f6:64:8d:49:59:a9:50:a0:c0:
                    bc:17:4a:41:a3:99:77:97:64:a6:d0:27:23:8c:a9:
                    86:de:72:46:2a:a4:f9:b0:52:c7:90:42:7e:18:fc:
                    47:5f:cc:f9:d3:47:b6:0d:39:6a:b1:67:7d:c8:22:
                    0c:0a:e6:3b:94:90:d3:4a:15:79:27:0a:d8:44:d2:
                    b5:ff:be:1e:84:c0:f4:36:67:3f:b3:e6:02:1b:3b:
                    74:6e:10:85:72:e4:27:56:03:15:66:d0:44:1b:70:
                    d7:74:3b:a3:f9:41:82:a9:76:af:f2:61:fa:27:f8:
                    34:04:d3:8d:7d:71:22:75:31:fe:ba:23:52:8e:74:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:98:2B:89:EC:A1:B4:C6:37:DD:E3:63:88:1C:40:40:72:F7:FC
            X509v3 Authority Key Identifier:
                keyid:78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/323830333a336136303a3a2f33322d3438203d3e20323633313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:15:a0:b5:8c:39:e2:65:44:fb:f5:e0:17:46:69:92:2c:4c:
         f7:89:52:60:64:3b:23:6c:48:9c:41:bc:66:65:16:6a:4f:69:
         db:41:1a:8a:b8:02:52:30:71:43:c1:85:e8:72:08:fb:1a:b7:
         0b:d0:e8:9f:62:4b:ab:78:5e:e9:ce:f5:1a:29:e5:79:13:8a:
         5a:61:5e:69:75:a2:58:db:d9:39:2d:5d:b5:76:91:f2:0f:ab:
         d1:7b:7d:80:01:88:8d:b2:a7:cb:74:4f:fd:3c:93:90:06:d0:
         88:31:9a:9b:e1:67:91:bc:c3:92:ee:24:a3:11:1f:77:f1:d2:
         27:85:17:56:e4:ff:41:c2:28:4b:df:d7:7b:cf:df:ac:e1:94:
         7f:2c:f6:74:53:be:f8:1a:87:99:40:25:6b:12:e9:51:00:b8:
         32:25:ed:71:94:25:30:9a:08:19:e9:f6:e4:b9:77:1f:de:2b:
         f6:d6:9c:ff:98:51:17:c4:b3:5d:8f:66:13:db:d3:bc:fc:1a:
         0c:70:5b:dc:d6:06:3b:ce:48:5f:8b:b6:6f:ef:a2:18:45:c7:
         a4:6b:c8:3c:eb:32:5f:e9:aa:df:e6:f3:ec:af:70:39:b9:4b:
         9e:c3:20:af:4e:66:d8:e0:aa:c1:86:79:88:2e:f8:66:c3:11:
         2e:b8:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:02:57 2026 by rpki-client