Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01965B62135846001201757E67F60598D1F2C507524E39A608436C4680ED8031/0/323830333a623964303a3a2f33322d3332203d3e20323734313631.roa
File:                     323830333a623964303a3a2f33322d3332203d3e20323734313631.roa (raw, json)
Hash identifier:          Rpm6VwNNtqaqG37yW3soHuJXTKWUZlehP4Tn0xoGyCE=
Subject key identifier:   E4:40:73:77:46:33:0F:99:6F:E0:30:42:5B:C0:2A:87:4D:2A:D8:ED
Certificate issuer:       /CN=C72C27A59D5020E056A7C79DA679C1534CBD326C
Certificate serial:       2441E585A3CF84AC124C4D38791AE25486FFC35F
Authority key identifier: C7:2C:27:A5:9D:50:20:E0:56:A7:C7:9D:A6:79:C1:53:4C:BD:32:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C72C27A59D5020E056A7C79DA679C1534CBD326C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/01965B62135846001201757E67F60598D1F2C507524E39A608436C4680ED8031/0/323830333a623964303a3a2f33322d3332203d3e20323734313631.roa
Signing time:             Thu 11 Jun 2026 23:47:27 +0000
ROA not before:           Thu 11 Jun 2026 23:42:27 +0000
ROA not after:            Thu 10 Jun 2027 23:47:27 +0000
asID:                     274161
IP address blocks:        2803:b9d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/01965B62135846001201757E67F60598D1F2C507524E39A608436C4680ED8031/0/C72C27A59D5020E056A7C79DA679C1534CBD326C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/01965B62135846001201757E67F60598D1F2C507524E39A608436C4680ED8031/0/C72C27A59D5020E056A7C79DA679C1534CBD326C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C72C27A59D5020E056A7C79DA679C1534CBD326C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:e5:85:a3:cf:84:ac:12:4c:4d:38:79:1a:e2:54:86:ff:c3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72C27A59D5020E056A7C79DA679C1534CBD326C
        Validity
            Not Before: Jun 11 23:42:27 2026 GMT
            Not After : Jun 10 23:47:27 2027 GMT
        Subject: CN=E440737746330F996FE030425BC02A874D2AD8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:e8:8d:9a:c1:14:70:fb:29:e7:78:25:82:
                    99:2f:49:6e:0a:67:23:74:09:4c:50:37:05:f6:ac:
                    31:90:6e:c4:b9:21:e4:b9:75:10:ba:83:43:cb:a9:
                    72:a8:54:48:f6:9d:07:d4:32:61:0a:8d:c8:2a:9c:
                    4a:c0:25:35:e5:5c:fb:76:d7:ea:15:1c:5b:77:28:
                    0a:39:23:39:be:d3:44:58:ed:9a:47:d2:e1:f6:a2:
                    d1:29:c1:6b:06:03:2e:56:60:e3:9c:4d:ea:93:d3:
                    14:18:dc:25:d8:b0:ec:b9:13:42:c4:67:fa:6a:d6:
                    e5:72:e4:cc:18:82:a5:e1:cb:c5:a7:ac:b1:51:eb:
                    89:2e:7d:82:8a:3d:9f:28:72:6e:83:52:71:b2:ba:
                    52:02:72:ae:aa:36:3d:da:89:59:78:ff:6a:0f:cd:
                    c8:49:43:67:6a:3b:ab:43:0e:e2:a1:3f:a9:f1:d7:
                    91:67:da:72:8a:40:9b:77:cb:a2:22:22:44:36:d0:
                    b5:1c:a1:15:0a:c9:e4:2f:34:68:b0:09:8e:4a:b3:
                    5a:d4:1c:9c:ba:3a:97:a8:f0:db:f2:27:73:81:53:
                    71:9a:65:78:78:6c:f9:3c:50:49:b0:59:d6:6f:1b:
                    cd:46:d7:96:cb:f0:33:8a:be:45:fc:75:30:fa:e3:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:40:73:77:46:33:0F:99:6F:E0:30:42:5B:C0:2A:87:4D:2A:D8:ED
            X509v3 Authority Key Identifier:
                keyid:C7:2C:27:A5:9D:50:20:E0:56:A7:C7:9D:A6:79:C1:53:4C:BD:32:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/01965B62135846001201757E67F60598D1F2C507524E39A608436C4680ED8031/0/C72C27A59D5020E056A7C79DA679C1534CBD326C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C72C27A59D5020E056A7C79DA679C1534CBD326C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01965B62135846001201757E67F60598D1F2C507524E39A608436C4680ED8031/0/323830333a623964303a3a2f33322d3332203d3e20323734313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b9d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:57:43:ae:d8:eb:6d:1e:3d:70:8a:d8:16:2d:9a:29:a7:
         c4:18:9a:50:bb:38:81:fd:f2:d3:db:c2:09:85:e6:e5:9e:51:
         49:30:2c:d4:b1:52:17:9c:b0:6b:df:62:92:cc:d3:16:ba:16:
         83:15:24:6d:0f:fd:47:c8:49:c1:ea:ca:ab:f3:ec:3e:5c:07:
         7e:8a:53:0e:77:45:da:fd:a1:28:cf:5d:51:e0:e7:cd:37:d3:
         27:e6:49:fd:05:87:31:45:23:5c:d1:a0:e0:64:8c:03:22:04:
         24:c8:99:74:b1:d2:68:17:c6:f7:04:38:be:84:80:80:2f:ac:
         dc:df:5b:34:79:4b:b0:9a:c4:3a:29:3f:cc:f7:20:7f:34:b2:
         bd:31:0d:41:1a:3b:f8:f1:69:54:95:b8:af:78:91:46:55:6a:
         db:55:d8:d7:f6:36:0a:80:d6:62:8b:42:b4:ba:18:5e:eb:99:
         66:46:5f:52:cd:8e:fa:a1:a8:2d:3e:26:38:39:65:de:bd:70:
         65:ac:4a:52:54:dd:82:48:d9:7c:09:b5:70:a4:58:45:43:d6:
         77:a1:18:ca:1a:e7:cb:6f:4a:8b:7e:34:6d:8b:26:e4:ab:66:
         1e:6b:fe:70:21:cd:a5:4d:02:28:7e:61:b2:a3:c0:10:d5:ba:
         df:b9:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:07:13 2026 by rpki-client