Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa
File:                     323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa (raw, json)
Hash identifier:          6M/abro4uCyDJQImEwICWMX9ROEXqStrwT4fl/LR9XU=
Subject key identifier:   9A:A5:A6:D0:B5:6D:E0:38:60:9C:56:39:31:11:41:DD:98:81:6B:E9
Certificate issuer:       /CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
Certificate serial:       23039E2A3F2632DC27E9151B4DB51F8035E7587A
Authority key identifier: 6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa
Signing time:             Mon 07 Sep 2026 15:34:07 +0000
ROA not before:           Mon 07 Sep 2026 15:29:07 +0000
ROA not after:            Mon 06 Sep 2027 15:34:07 +0000
asID:                     274217
IP address blocks:        2803:bd0:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 05:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:03:9e:2a:3f:26:32:dc:27:e9:15:1b:4d:b5:1f:80:35:e7:58:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C292FA15A747FB9B20CD2854518A05B78927EA7
        Validity
            Not Before: Sep  7 15:29:07 2026 GMT
            Not After : Sep  6 15:34:07 2027 GMT
        Subject: CN=9AA5A6D0B56DE038609C5639311141DD98816BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:23:88:38:37:83:aa:36:5b:90:78:a7:a9:
                    e0:09:42:9d:56:4f:87:61:a1:32:17:52:b8:33:d3:
                    eb:e9:59:19:c3:07:e6:e0:5c:2f:8f:8a:42:99:a3:
                    8c:7b:69:08:18:62:26:57:5d:4a:65:b2:56:06:94:
                    2c:5a:9a:e0:92:11:b3:ed:80:b6:50:7d:03:85:28:
                    a4:13:71:71:c0:7e:07:5b:e8:cb:8f:59:6d:0d:d5:
                    20:b1:7c:4a:3c:85:52:6b:a9:7e:83:6b:e0:d0:c7:
                    28:95:ff:d4:5c:19:c8:70:72:9c:18:57:fe:23:b1:
                    1a:88:4b:a5:6a:b6:cc:59:0d:80:80:00:27:a0:76:
                    04:bb:c9:f5:fc:86:48:76:9a:7c:13:ac:4b:f8:0d:
                    ff:a2:1c:76:91:20:8d:81:cb:47:35:f8:c8:40:46:
                    71:57:ce:f2:ec:a3:b4:ff:9c:9f:f0:b8:20:de:de:
                    b8:dc:6c:4a:bb:7e:59:08:bb:a0:60:fc:37:9c:2d:
                    97:da:e3:dc:74:d2:ac:d6:6f:d0:98:1f:a4:3e:bc:
                    60:e6:e0:be:6e:c1:68:90:74:72:bf:53:e9:c2:9e:
                    ba:ac:ff:39:8e:38:24:7d:8f:b8:ac:f0:1e:93:3c:
                    ce:67:31:e6:76:39:37:5f:05:07:15:71:df:eb:f7:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A5:A6:D0:B5:6D:E0:38:60:9C:56:39:31:11:41:DD:98:81:6B:E9
            X509v3 Authority Key Identifier:
                keyid:6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/323830333a6264303a313030333a3a2f34382d3438203d3e20323734323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd0:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:9f:b8:7f:86:0d:9f:63:24:58:97:dc:4d:c7:cf:fe:7f:
         40:98:5b:d2:92:05:a5:fb:48:0b:f7:e6:00:fb:29:81:23:18:
         c5:e0:50:ee:ab:f2:b1:3a:dc:20:e4:07:e6:a1:e6:2a:24:5a:
         1d:d1:7b:e9:9d:4a:34:52:1d:4a:36:33:dc:a1:ab:16:95:cf:
         42:09:bd:b0:f6:d4:42:d4:6d:2d:84:72:c7:78:25:aa:0b:e1:
         47:0b:35:09:bc:99:5d:69:c7:88:49:01:f6:6f:e5:37:09:ce:
         f4:55:80:b6:ae:9d:ce:5f:0e:45:e4:07:41:95:db:d3:f3:e7:
         1f:52:66:7c:04:be:06:97:db:0e:56:3b:83:cc:7b:46:7f:74:
         c5:f4:20:c9:43:c7:d9:1b:27:e2:58:3b:82:79:c6:db:78:c4:
         7b:c6:5b:fb:f0:6c:97:51:34:a2:08:46:e0:0a:47:6f:cb:82:
         e8:8b:fa:cd:59:40:d0:4c:df:d7:9a:54:73:84:52:bf:1c:42:
         fb:ee:71:38:b9:20:25:f2:ef:1b:d4:e8:93:1c:57:de:ca:f4:
         1b:79:87:5d:de:ff:40:a7:0e:aa:31:fb:1f:0a:a7:93:19:73:
         9a:f8:df:d1:cb:64:e2:1b:5c:c1:2f:44:f2:0d:0a:d1:cc:70:
         de:51:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:30:10 2026 by rpki-client