Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          Y+ffx6UUBQU1yri9qJYO2yNf8IeGFIl3kQyfrk/A6mY=
Subject key identifier:   4F:81:40:1D:AB:2C:3D:70:E6:99:B7:15:7A:69:52:3C:1A:0A:5D:CC
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       3303275313ACA5B18BBDD733114E9A25B924D32E
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 28 Aug 2026 04:32:47 +0000
ROA not before:           Fri 28 Aug 2026 04:27:47 +0000
ROA not after:            Fri 27 Aug 2027 04:32:47 +0000
asID:                     273196
IP address blocks:        2803:2650:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:03:27:53:13:ac:a5:b1:8b:bd:d7:33:11:4e:9a:25:b9:24:d3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Aug 28 04:27:47 2026 GMT
            Not After : Aug 27 04:32:47 2027 GMT
        Subject: CN=4F81401DAB2C3D70E699B7157A69523C1A0A5DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:b4:f9:38:eb:52:d3:da:b7:55:be:c8:0b:
                    47:e6:77:af:0e:d3:61:13:28:1f:ec:6c:80:77:9f:
                    27:0f:db:f6:a7:3f:dc:16:3c:dc:91:f4:50:0c:13:
                    ad:ac:2c:72:64:e3:e8:e0:8c:cd:df:c9:90:23:db:
                    20:0c:c7:99:9e:60:e0:8e:81:86:88:16:04:27:e3:
                    ac:9d:b0:b2:ae:01:a7:13:87:74:ee:3f:0f:7f:72:
                    c3:23:77:f1:b8:38:7a:a1:fe:0e:12:ac:73:e5:f2:
                    7d:2e:d0:9c:26:de:16:14:c4:28:af:eb:6c:50:5e:
                    1b:45:3a:1e:0f:b9:6f:5e:43:2f:19:53:39:6f:31:
                    3c:fd:d5:c3:15:01:cc:b8:33:6a:5b:f9:ea:2a:91:
                    d5:fb:e2:2e:e4:90:72:5a:91:20:41:ea:32:3f:57:
                    7a:6d:35:5e:44:d0:c1:6a:0c:b2:b6:9e:71:ff:d7:
                    87:31:ef:02:2b:b4:30:69:eb:96:97:b7:b8:88:4b:
                    07:be:60:17:cf:88:ae:da:78:00:35:53:f7:03:7f:
                    81:58:ce:ee:fc:89:6a:7b:9f:89:74:da:c5:58:7f:
                    d0:a2:d9:59:35:10:cd:5e:a0:2c:43:6c:cc:26:b3:
                    90:dc:fb:f4:a5:77:2b:63:05:37:42:18:f8:0a:dc:
                    74:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:81:40:1D:AB:2C:3D:70:E6:99:B7:15:7A:69:52:3C:1A:0A:5D:CC
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:77:5d:62:82:c0:ca:8f:27:db:72:66:13:bb:51:51:c6:
         19:5a:96:81:33:eb:cb:08:01:8f:90:e2:3b:c2:bb:57:8a:c6:
         81:27:69:0a:52:d7:40:a1:0d:73:1e:d4:14:73:87:14:70:28:
         ca:62:6c:6f:70:1e:7b:9a:79:06:44:ba:cf:ac:71:fe:e5:87:
         df:3f:81:12:79:77:44:66:0a:91:53:9f:41:e4:56:9d:0c:73:
         ec:c5:5e:3a:12:77:e0:81:40:c4:77:d4:da:e0:51:45:59:c9:
         af:c5:ad:00:7d:9c:4e:6b:ce:a3:bb:a9:8d:7d:df:ee:12:35:
         64:b4:b4:15:27:e7:e0:e9:75:c9:45:27:45:10:d9:7c:59:fb:
         18:bd:e3:c8:ab:01:dc:fc:d3:7e:fb:fa:c2:21:2b:1f:d9:6d:
         65:0b:f4:7e:5b:85:ae:7a:db:05:c3:b0:c8:e3:12:1b:f2:83:
         c5:1d:72:8d:32:32:8c:5f:a7:66:bc:0a:e2:cc:3e:3f:ec:f9:
         be:eb:d6:78:03:ec:c1:41:d1:39:6b:e8:f8:1a:0c:6e:22:2e:
         28:00:3b:96:e6:eb:2e:e1:b2:65:81:3a:7d:e3:a1:c8:aa:a5:
         30:8a:d5:b7:d0:f7:d3:df:f1:f0:df:d8:56:6c:c7:93:1b:8b:
         85:ee:7e:ac
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUMwMnUxOspbGLvdczEU6aJbkk0y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThDMzEyOUE4RDlEQjZGRDhGN0M4QTQ4NEEyQkVEMjI2
MzY1NEMxRDAeFw0yNjA4MjgwNDI3NDdaFw0yNzA4MjcwNDMyNDdaMDMxMTAvBgNV
BAMTKDRGODE0MDFEQUIyQzNENzBFNjk5QjcxNTdBNjk1MjNDMUEwQTVEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+bT5OOtS09q3Vb7IC0fmd68O
02ETKB/sbIB3nycP2/anP9wWPNyR9FAME62sLHJk4+jgjM3fyZAj2yAMx5meYOCO
gYaIFgQn46ydsLKuAacTh3TuPw9/csMjd/G4OHqh/g4SrHPl8n0u0Jwm3hYUxCiv
62xQXhtFOh4PuW9eQy8ZUzlvMTz91cMVAcy4M2pb+eoqkdX74i7kkHJakSBB6jI/
V3ptNV5E0MFqDLK2nnH/14cx7wIrtDBp65aXt7iISwe+YBfPiK7aeAA1U/cDf4FY
zu78iWp7n4l02sVYf9Ci2Vk1EM1eoCxDbMwms5Dc+/SldytjBTdCGPgK3HTHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUT4FAHassPXDmmbcVemlSPBoKXcwwHwYDVR0j
BBgwFoAUGMMSmo2dtv2PfIpISivtImNlTB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNkQ0NzhBMzg5OUZBNzhFNEQ0NjFCMDgxMDZCMDIwREU2
MDJDOUUyRjE4NDExQjNFQUIxQzY5QUIyRjAwNTdELzAvMThDMzEyOUE4RDlEQjZG
RDhGN0M4QTQ4NEEyQkVEMjI2MzY1NEMxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOEMzMTI5QThEOURCNkZEOEY3
QzhBNDg0QTJCRUQyMjYzNjU0QzFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTZENDc4QTM4OTlGQTc4RTRENDYxQjA4MTA2QjAyMERFNjAyQzlFMkYx
ODQxMUIzRUFCMUM2OUFCMkYwMDU3RC8wLzMyMzgzMDMzM2EzMjM2MzUzMDNhMzUz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzOTM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMmUAUwDQYJKoZIhvcNAQELBQADggEBAHJ8d11igsDKjyfbcmYTu1FRxhla
loEz68sIAY+Q4jvCu1eKxoEnaQpS10ChDXMe1BRzhxRwKMpibG9wHnuaeQZEus+s
cf7lh98/gRJ5d0RmCpFTn0HkVp0Mc+zFXjoSd+CBQMR31NrgUUVZya/FrQB9nE5r
zqO7qY193+4SNWS0tBUn5+DpdclFJ0UQ2XxZ+xi948irAdz80377+sIhKx/ZbWUL
9H5bha562wXDsMjjEhvyg8Udco0yMoxfp2a8CuLMPj/s+b7r1ngD7MFB0Tlr6Pga
DG4iLigAO5bm6y7hsmWBOn3jociqpTCK1bfQ99Pf8fDf2FZsx5Mbi4Xufqw=
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:51:27 2026 by rpki-client