Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a383a3a2f34382d3438203d3e20323732393632.roa
File:                     323830333a663939303a383a3a2f34382d3438203d3e20323732393632.roa (raw, json)
Hash identifier:          Rn/BJGFCBIs9GojaeHHv9wHyk3j0D7u/MUqU4lg9UGk=
Subject key identifier:   B2:18:C6:C7:AB:40:E4:9C:0C:87:1A:3B:21:E5:62:EE:DB:2B:2C:0B
Certificate issuer:       /CN=83F7E47489A9B33F206BDEF2A5355211978698EE
Certificate serial:       7F69A971C161C65C13CA8691C25B7317B22C91B5
Authority key identifier: 83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a383a3a2f34382d3438203d3e20323732393632.roa
Signing time:             Wed 30 Sep 2026 14:37:26 +0000
ROA not before:           Wed 30 Sep 2026 14:32:26 +0000
ROA not after:            Wed 29 Sep 2027 14:37:26 +0000
asID:                     272962
IP address blocks:        2803:f990:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:69:a9:71:c1:61:c6:5c:13:ca:86:91:c2:5b:73:17:b2:2c:91:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F7E47489A9B33F206BDEF2A5355211978698EE
        Validity
            Not Before: Sep 30 14:32:26 2026 GMT
            Not After : Sep 29 14:37:26 2027 GMT
        Subject: CN=B218C6C7AB40E49C0C871A3B21E562EEDB2B2C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e5:7a:1c:96:14:cd:21:31:14:94:90:ce:c4:
                    ac:f7:6b:92:29:43:05:c3:2d:83:d7:65:86:c1:6b:
                    11:aa:52:e7:90:de:e0:74:d5:b9:05:c3:e4:3f:10:
                    bd:12:6e:f4:81:4e:be:79:8e:95:da:a5:0d:e1:3f:
                    8c:d4:47:18:39:80:91:f2:1c:a9:74:ab:ff:4d:23:
                    15:66:d9:92:73:20:9b:f9:83:4c:02:aa:94:8e:a1:
                    62:dc:c0:35:cc:a3:fe:fb:74:d0:b7:ff:de:e9:eb:
                    af:e0:d4:41:8f:65:2d:88:e3:5a:49:43:b7:8e:52:
                    f6:38:e3:7f:27:18:62:6c:3a:ff:2a:64:e6:5d:89:
                    04:b2:66:df:32:85:f3:c4:fb:d5:2b:76:50:57:8e:
                    4d:cf:55:65:fc:76:6b:f6:c7:83:d9:ec:52:53:c0:
                    70:4f:5c:95:25:4f:21:ac:7a:c1:a8:b8:b0:a5:91:
                    77:47:72:00:c5:66:05:61:d8:98:b2:99:8c:28:8e:
                    cc:06:56:62:30:d0:52:d8:ce:da:5f:c4:92:2c:23:
                    36:37:1f:fd:14:74:2f:ad:83:b6:f4:6f:8e:9b:0a:
                    c6:55:ff:b4:de:52:0e:49:48:20:de:18:76:f8:08:
                    49:c5:46:16:e5:f6:14:e0:48:93:d1:98:27:a9:89:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:18:C6:C7:AB:40:E4:9C:0C:87:1A:3B:21:E5:62:EE:DB:2B:2C:0B
            X509v3 Authority Key Identifier:
                keyid:83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a383a3a2f34382d3438203d3e20323732393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f990:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:45:8b:d0:2f:55:9a:c1:e6:51:6d:0e:ec:56:1e:99:c0:57:
         2c:22:cf:c6:09:db:15:5b:38:9c:2b:fc:be:9d:f6:95:50:09:
         c1:fc:ee:28:42:5d:09:d2:96:5a:06:28:2c:a9:2e:ae:0f:34:
         8b:6a:26:6d:9c:06:5a:ae:51:e5:c8:d5:bf:95:3e:14:79:91:
         3f:4e:6a:68:14:27:66:60:df:6a:7c:34:32:04:8a:7c:8e:bf:
         b9:cc:77:04:df:4d:26:8d:0c:ec:8f:fa:e5:d9:fb:ec:6a:5a:
         2d:c3:e7:4e:e7:a5:cc:db:d5:61:32:54:26:08:e1:ea:54:60:
         ba:cd:ba:1e:a3:06:c3:0f:72:be:93:93:6c:c1:9d:79:ec:06:
         d5:df:a3:89:b0:30:30:78:10:f2:fe:0b:f0:5c:ed:ff:20:19:
         7c:8b:a4:3f:ef:c1:46:fb:96:d1:fb:5c:de:ff:69:a9:14:38:
         b7:af:1e:40:c1:24:ba:5e:65:30:94:58:03:ba:c0:98:7d:86:
         8b:51:f5:52:64:f7:e5:cf:0f:56:9b:31:ab:63:f9:21:9d:12:
         37:3b:11:f9:42:0a:72:04:03:74:a1:8f:d8:9a:45:66:db:e8:
         c0:09:52:49:43:c5:f2:d5:b6:55:bb:c6:93:d6:98:9a:b9:e9:
         5e:c0:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:42:29 2026 by rpki-client