Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D5E06FCD5F082E3E81526F26768301813BE529C24773837DC52FDE9177276EB6/0/323830333a376633303a3a2f33322d3334203d3e20323735303635.roa
File:                     323830333a376633303a3a2f33322d3334203d3e20323735303635.roa (raw, json)
Hash identifier:          wj3jNUGeYoo2dfCfpVY/u9flvkD/+O1cx7eVVxl7exE=
Subject key identifier:   C6:72:F6:72:14:E8:4A:4D:A4:6A:6C:1D:B2:FD:9D:B6:3C:63:6B:9E
Certificate issuer:       /CN=51D0C4D3913D094B6C0CED9E0734724D1EC285E1
Certificate serial:       62046AA448C83E711F995206279123ADF3919797
Authority key identifier: 51:D0:C4:D3:91:3D:09:4B:6C:0C:ED:9E:07:34:72:4D:1E:C2:85:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51D0C4D3913D094B6C0CED9E0734724D1EC285E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5E06FCD5F082E3E81526F26768301813BE529C24773837DC52FDE9177276EB6/0/323830333a376633303a3a2f33322d3334203d3e20323735303635.roa
Signing time:             Sat 10 Oct 2026 23:35:00 +0000
ROA not before:           Sat 10 Oct 2026 23:30:00 +0000
ROA not after:            Sat 09 Oct 2027 23:35:00 +0000
asID:                     275065
IP address blocks:        2803:7f30::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5E06FCD5F082E3E81526F26768301813BE529C24773837DC52FDE9177276EB6/0/51D0C4D3913D094B6C0CED9E0734724D1EC285E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5E06FCD5F082E3E81526F26768301813BE529C24773837DC52FDE9177276EB6/0/51D0C4D3913D094B6C0CED9E0734724D1EC285E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51D0C4D3913D094B6C0CED9E0734724D1EC285E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:04:6a:a4:48:c8:3e:71:1f:99:52:06:27:91:23:ad:f3:91:97:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D0C4D3913D094B6C0CED9E0734724D1EC285E1
        Validity
            Not Before: Oct 10 23:30:00 2026 GMT
            Not After : Oct  9 23:35:00 2027 GMT
        Subject: CN=C672F67214E84A4DA46A6C1DB2FD9DB63C636B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:33:ea:91:c5:92:aa:a8:f0:a5:d7:93:e9:
                    ae:16:4d:94:2e:77:b3:c8:4e:a8:17:ad:4c:5b:b3:
                    42:b9:de:0e:0e:4d:9a:17:22:e4:6f:f5:33:cb:26:
                    6b:77:3d:ea:c2:c4:bc:30:b9:99:3f:99:aa:c0:f5:
                    f2:7a:90:ff:27:b2:62:88:36:81:87:62:19:44:5d:
                    93:b0:72:cc:27:77:80:40:c2:1e:cc:de:9c:b5:7c:
                    53:4e:0a:32:23:4a:40:20:32:ad:c1:49:cc:c2:f1:
                    b8:ed:af:75:fe:eb:e3:63:77:d0:a7:9b:d8:fe:be:
                    e4:04:db:b1:dc:ae:93:db:e8:af:98:e1:0c:18:41:
                    2f:9b:33:e1:ee:e0:bc:ed:e6:08:e8:57:80:aa:c1:
                    5e:3e:56:aa:f8:a9:cc:b3:64:16:a3:64:ba:35:4a:
                    a9:af:f6:13:16:88:d2:79:1f:db:d9:9b:a8:39:d6:
                    ce:05:d6:aa:15:bc:74:fa:55:89:3d:f3:4e:20:3d:
                    e8:8b:0b:2f:a1:64:86:95:4a:cf:57:56:87:de:73:
                    d5:c3:23:f3:bd:21:0f:64:da:63:63:03:92:76:4d:
                    c4:8c:06:d8:c9:17:f8:c9:22:bb:3b:56:28:91:da:
                    f2:55:c8:a4:d5:0b:2f:43:37:56:d6:36:6a:dd:a2:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:F6:72:14:E8:4A:4D:A4:6A:6C:1D:B2:FD:9D:B6:3C:63:6B:9E
            X509v3 Authority Key Identifier:
                keyid:51:D0:C4:D3:91:3D:09:4B:6C:0C:ED:9E:07:34:72:4D:1E:C2:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5E06FCD5F082E3E81526F26768301813BE529C24773837DC52FDE9177276EB6/0/51D0C4D3913D094B6C0CED9E0734724D1EC285E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51D0C4D3913D094B6C0CED9E0734724D1EC285E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5E06FCD5F082E3E81526F26768301813BE529C24773837DC52FDE9177276EB6/0/323830333a376633303a3a2f33322d3334203d3e20323735303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:7a:4b:e2:32:7e:5c:cc:25:34:37:c0:21:4c:d1:53:b4:
         af:3e:8d:01:ef:60:0e:35:6e:40:65:48:43:a1:52:f1:d3:ab:
         63:65:7a:ac:16:73:ca:f2:87:29:35:1b:b1:e9:ef:ca:5f:e8:
         ce:52:59:03:aa:f6:96:2a:e5:52:f3:5c:ad:cc:d6:ce:07:21:
         4a:c0:98:05:7f:10:b2:87:0f:98:78:2d:bd:1b:0e:ce:54:82:
         1c:a0:82:4d:7b:f1:8b:76:ae:42:a3:93:94:40:2f:6f:5f:aa:
         00:55:38:c7:bf:ea:09:7d:d2:2d:4e:78:5d:0d:f1:c9:6a:e6:
         68:f1:62:0d:91:aa:7e:b5:ed:fd:36:4a:8c:b5:61:33:14:3c:
         eb:ac:4e:91:e2:a7:bc:65:97:32:62:22:82:2e:7d:c6:56:4c:
         e2:9c:86:72:14:5c:c4:68:12:d6:59:9f:8a:90:8d:72:bb:a4:
         cc:f5:da:4c:da:18:89:ed:34:bb:e0:41:29:ff:66:bf:d0:07:
         82:f5:a0:ee:d7:31:d0:d9:db:68:80:19:50:60:03:f5:6b:fc:
         0f:d0:5b:77:83:5a:32:bf:5e:7e:23:4c:a8:58:0a:17:71:55:
         f2:45:c7:81:f2:7c:29:5a:7c:de:47:83:d3:f6:61:9a:46:16:
         8b:50:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:09:32 2026 by rpki-client