Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/323830333a323932303a3a2f33322d3438203d3e20323636363637.roa
File:                     323830333a323932303a3a2f33322d3438203d3e20323636363637.roa (raw, json)
Hash identifier:          YBlStnOabPKKLAshPoH9VsTkFiqXOefqbmTm3abMD90=
Subject key identifier:   BA:29:AB:46:E0:70:00:93:2D:D8:90:18:70:44:41:37:8B:60:DE:9E
Certificate issuer:       /CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Certificate serial:       31D9FDA56B0F98395E3AC15BBACA95CFAE5867CC
Authority key identifier: A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/323830333a323932303a3a2f33322d3438203d3e20323636363637.roa
Signing time:             Tue 08 Sep 2026 18:34:36 +0000
ROA not before:           Tue 08 Sep 2026 18:29:36 +0000
ROA not after:            Tue 07 Sep 2027 18:34:36 +0000
asID:                     266667
IP address blocks:        2803:2920::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Sep 2026 07:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d9:fd:a5:6b:0f:98:39:5e:3a:c1:5b:ba:ca:95:cf:ae:58:67:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
        Validity
            Not Before: Sep  8 18:29:36 2026 GMT
            Not After : Sep  7 18:34:36 2027 GMT
        Subject: CN=BA29AB46E07000932DD89018704441378B60DE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:b3:94:e6:4e:06:f7:69:56:7b:a9:08:d0:
                    c3:fc:2b:f2:c1:73:ec:de:df:97:ca:6e:20:9a:cd:
                    d2:51:a6:1f:84:ec:22:9e:8d:1f:9e:72:7e:fa:26:
                    1d:3c:57:0e:54:51:12:7f:f0:7f:1b:44:e0:83:a3:
                    2a:ea:68:85:67:11:a8:47:73:17:b2:ff:42:0c:78:
                    b0:78:53:c4:5d:57:27:c4:46:c7:15:37:42:87:aa:
                    f8:4c:51:c0:0a:7b:73:c3:df:c0:f8:55:71:f6:7c:
                    97:95:5a:14:4d:dd:38:fd:74:58:af:b2:5d:f2:74:
                    9d:fb:2a:4f:ea:ae:d0:ab:f7:aa:e3:25:84:ee:4a:
                    de:33:62:c7:25:8e:0f:f9:0b:d2:30:c9:95:60:53:
                    a1:44:8b:6c:f2:42:12:98:81:8a:f7:36:2b:0e:c9:
                    c9:39:2d:05:85:e0:44:2f:e4:23:ea:ed:f2:8b:3f:
                    7e:48:58:1f:be:f1:f1:fc:b7:92:e3:69:4b:8d:7c:
                    6e:b6:b5:40:b6:48:80:06:b4:8a:81:53:6e:be:6f:
                    17:a0:a4:f6:8e:bc:30:ae:dc:de:78:37:85:2c:1f:
                    51:35:7c:90:ee:7b:d8:b3:68:dc:26:e1:ae:96:a2:
                    0e:50:18:f5:e4:d1:3e:22:56:e2:8f:b6:7d:f1:03:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:AB:46:E0:70:00:93:2D:D8:90:18:70:44:41:37:8B:60:DE:9E
            X509v3 Authority Key Identifier:
                keyid:A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/323830333a323932303a3a2f33322d3438203d3e20323636363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2920::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:56:4b:c6:6f:78:d8:53:60:3e:02:7a:51:f8:19:7b:77:57:
         e7:85:16:96:24:25:cd:24:8b:98:22:7d:0e:68:ac:65:b2:17:
         77:3f:c3:d8:da:f2:a1:6b:de:3c:62:91:02:bf:ef:62:44:b5:
         11:27:49:59:51:2e:62:19:c2:58:8a:f9:f7:32:2c:84:93:7b:
         22:c6:79:9d:c3:e6:9d:69:e1:53:c5:03:d2:6c:17:5c:9e:71:
         37:d6:93:18:4c:8b:20:f3:8e:8f:81:f9:d6:71:d4:42:3a:98:
         05:7c:42:1c:74:49:b3:5b:0e:66:3c:54:e4:38:fd:78:d8:ec:
         a0:ea:ba:b9:d3:0e:5d:98:0f:26:f8:4b:af:9c:96:94:1a:88:
         f8:f4:97:5e:82:c3:63:7f:61:f2:fe:7c:d1:ce:3a:97:b9:04:
         32:fe:80:ae:a8:33:16:b8:28:2e:eb:ca:9e:14:0f:c2:55:cb:
         81:17:0d:cc:ca:11:ba:e0:64:e8:ea:37:39:7d:2f:ac:4c:39:
         61:30:50:02:e0:c8:31:dc:83:0b:84:7c:1a:99:ba:90:94:a7:
         e6:05:a9:52:2a:3a:29:31:bd:d4:fd:f6:21:e1:54:55:d9:3a:
         91:0d:05:fe:f9:5a:44:78:a2:ce:9d:02:80:80:20:4d:f2:8e:
         b4:44:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:59:10 2026 by rpki-client