Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3430303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3430303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          O5/dF5VUvHVWxp6HiJjyQldmT9MP24myGhjquqaUHdg=
Subject key identifier:   2E:4A:B5:A4:8C:B6:C1:16:BB:E3:56:EA:55:AD:0B:D5:AB:B0:D8:BF
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       7D6C71F4C9D4797EDBDB7A092C9FC883F0561F73
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3430303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 28 Aug 2026 04:32:48 +0000
ROA not before:           Fri 28 Aug 2026 04:27:48 +0000
ROA not after:            Fri 27 Aug 2027 04:32:48 +0000
asID:                     273196
IP address blocks:        2803:2650:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6c:71:f4:c9:d4:79:7e:db:db:7a:09:2c:9f:c8:83:f0:56:1f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Aug 28 04:27:48 2026 GMT
            Not After : Aug 27 04:32:48 2027 GMT
        Subject: CN=2E4AB5A48CB6C116BBE356EA55AD0BD5ABB0D8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:79:43:ac:7a:8a:1b:9f:23:84:82:30:29:
                    0e:e2:a5:23:90:ad:6e:b2:61:12:0e:6d:7f:3d:be:
                    73:5d:99:0f:79:4c:5c:14:74:30:4b:2f:ad:3f:8d:
                    ff:28:50:85:4b:ae:1b:ee:96:58:df:12:fd:7d:b7:
                    8a:e4:42:0d:13:61:d9:13:50:7e:99:16:e7:12:f1:
                    26:6e:89:99:f5:17:7e:aa:8d:e7:5e:99:a3:26:1a:
                    0c:87:fa:56:0f:a7:a1:93:1d:af:ae:41:89:46:d2:
                    be:69:66:9c:30:3a:24:4b:22:1c:b1:62:b8:f0:be:
                    d9:9e:d4:a3:29:9d:de:a5:74:2d:1c:22:0e:1e:b6:
                    85:d9:a9:db:32:de:80:86:e3:d0:a7:8c:73:8f:06:
                    d9:8f:0c:a5:0d:25:50:be:9e:75:e0:5b:18:1d:56:
                    73:ba:68:30:0c:0b:96:1d:07:46:d9:87:42:3e:2b:
                    50:d9:1d:39:dc:f0:9d:c8:3f:57:47:4c:e5:62:b9:
                    7d:46:09:f5:ad:76:0b:97:af:8b:d8:99:cc:9a:48:
                    c5:78:73:13:dc:2d:c9:06:f7:d2:0a:fb:a8:83:28:
                    03:02:3e:ac:55:a3:27:87:d8:5c:10:89:b7:c7:b9:
                    ea:38:c9:4d:1b:86:03:19:ee:86:35:e9:81:c4:14:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4A:B5:A4:8C:B6:C1:16:BB:E3:56:EA:55:AD:0B:D5:AB:B0:D8:BF
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3430303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:dc:cb:23:91:41:cd:a3:83:cd:42:ba:dd:6e:24:67:de:fc:
         24:5e:46:9a:cc:bc:aa:3c:03:60:58:30:f3:0f:17:db:c2:07:
         f0:5d:d8:16:5c:bc:37:36:37:8f:da:ff:79:25:4a:4f:c5:b8:
         98:87:e7:52:1c:c1:03:21:9f:6e:0b:c3:d2:16:ae:cb:f0:60:
         56:f3:02:3e:1d:97:18:09:81:e5:71:9e:64:e9:db:32:59:90:
         61:a4:3a:07:4d:dd:5b:75:d8:33:1a:a8:2c:6b:99:36:9b:f5:
         ec:20:a4:b8:74:a5:b8:6c:8c:fa:e6:92:24:7d:7e:8a:af:09:
         37:16:36:ae:2b:f9:09:af:18:fd:ed:48:6c:95:c4:27:cb:39:
         bf:6c:3a:32:94:19:3e:85:57:48:e3:0b:f1:49:8a:20:4c:8a:
         e0:7b:4f:f4:e1:e7:90:bc:9e:19:51:5b:f7:2d:dc:38:a4:57:
         67:02:c9:e0:40:d1:a7:a3:04:71:8f:12:f4:d0:58:ac:29:3e:
         a5:0c:e7:3f:02:2f:bf:64:71:5e:c1:a3:48:5f:7f:7b:96:87:
         ec:dc:47:a6:60:f4:44:37:0e:21:f3:4a:8b:cf:57:1f:0d:0d:
         5b:d8:27:ec:0f:c2:07:51:7e:b8:49:54:86:11:5f:22:2b:65:
         05:96:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:51:02 2026 by rpki-client