Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/323830333a633936303a3a2f33322d3332203d3e20323639373337.roa
File:                     323830333a633936303a3a2f33322d3332203d3e20323639373337.roa (raw, json)
Hash identifier:          8d1WI4A+BW1d19v0CFcaXy/BDWFsc6k72O6FcbOYAdw=
Subject key identifier:   7E:1F:40:5E:6A:FF:92:C7:EA:33:3E:54:CD:41:DE:D3:CB:D2:E1:22
Certificate issuer:       /CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
Certificate serial:       6C107F2940D3BA7948BB773C000DF3A80E2F3F43
Authority key identifier: 85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/323830333a633936303a3a2f33322d3332203d3e20323639373337.roa
Signing time:             Fri 31 Jul 2026 18:15:00 +0000
ROA not before:           Fri 31 Jul 2026 18:10:00 +0000
ROA not after:            Fri 30 Jul 2027 18:15:00 +0000
asID:                     269737
IP address blocks:        2803:c960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:10:7f:29:40:d3:ba:79:48:bb:77:3c:00:0d:f3:a8:0e:2f:3f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
        Validity
            Not Before: Jul 31 18:10:00 2026 GMT
            Not After : Jul 30 18:15:00 2027 GMT
        Subject: CN=7E1F405E6AFF92C7EA333E54CD41DED3CBD2E122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:79:f1:5e:55:62:3b:88:87:73:49:5c:db:
                    1e:7c:83:9e:85:d5:4c:7b:f1:5a:2f:c8:e2:7c:f8:
                    a5:30:15:7c:08:f1:cd:cc:d5:4e:92:a3:a3:21:54:
                    45:2d:c7:e7:f1:dc:f5:25:94:2c:ba:62:f6:63:b6:
                    99:d1:8e:dc:3c:c9:f1:cf:40:e0:e3:77:9a:8b:6c:
                    bc:d1:ce:c6:a4:0c:a9:31:2d:5c:12:64:fe:88:41:
                    6c:e8:60:0b:90:71:0d:1f:ed:38:48:3c:ce:02:3b:
                    75:41:6d:97:55:2b:b4:03:b5:cb:c5:b3:f2:b6:b0:
                    2a:7d:d1:66:0f:1e:03:dc:de:b3:96:60:8c:5b:fe:
                    88:69:3b:28:51:0f:3f:8e:c1:83:be:eb:87:8c:92:
                    d1:57:13:6c:74:d9:a2:b0:25:21:54:87:bd:6a:b0:
                    35:9d:ee:d1:d3:02:0e:8e:e9:25:d7:49:25:71:0b:
                    10:0c:c0:fc:2f:ea:98:ff:bb:7c:b5:d6:1a:3c:41:
                    f8:90:b3:ff:8c:82:00:86:ce:77:0f:49:aa:fa:e8:
                    f1:54:f9:80:d6:d8:73:3d:62:9b:e0:30:f9:35:e9:
                    8b:ea:a3:1a:1a:20:87:bb:4f:60:16:78:6a:c4:d4:
                    25:26:90:9e:11:c5:0b:6a:ed:f4:9f:e0:72:05:41:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:40:5E:6A:FF:92:C7:EA:33:3E:54:CD:41:DE:D3:CB:D2:E1:22
            X509v3 Authority Key Identifier:
                keyid:85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/323830333a633936303a3a2f33322d3332203d3e20323639373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c960::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:b3:fb:97:24:e3:a2:82:6a:43:f4:83:66:aa:61:31:91:
         c8:30:ba:dd:77:65:14:26:b2:85:ba:de:ea:c9:c1:e6:2d:fb:
         3c:4e:7a:9d:c4:8a:b8:35:b4:95:25:f2:52:a1:8c:00:89:c2:
         3a:86:cd:34:4e:4b:b6:77:be:91:43:50:07:b9:56:53:89:30:
         84:c9:8d:88:21:92:a4:01:8e:64:cc:68:93:e2:1b:1e:ce:6b:
         35:bf:9e:57:ec:9d:fe:b5:d7:e7:7f:d7:56:df:eb:be:e3:d4:
         98:2a:69:15:4f:36:d0:43:c0:40:9a:aa:3e:4d:eb:49:a1:0f:
         06:ee:d1:c5:d2:7f:e2:9e:10:66:cf:79:e1:53:6e:23:5b:9b:
         a8:2a:bc:53:09:e0:7d:4d:04:73:ba:cf:1c:2b:b6:3c:61:10:
         0a:29:cb:8f:62:fa:e1:4e:28:df:68:82:15:d4:31:2b:0f:9d:
         e4:bd:c2:e1:77:e9:e2:5d:b2:f1:43:02:bc:12:26:e1:26:be:
         42:d8:98:4a:b3:74:8b:4e:ac:8b:d6:c6:db:cc:cc:a0:0c:4e:
         e3:04:ba:82:eb:e0:3b:30:8f:0e:f9:d6:56:4d:80:db:6a:13:
         6c:b6:d7:76:b1:a0:57:8d:41:c4:63:a1:8d:de:d9:94:d6:b6:
         d8:61:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:34:26 2026 by rpki-client