Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/160B09D6C507E92A1235B0E744F800D22E4E9988F9E0E0DD230DCDFA44ACD7CE/0/323030313a313232373a3a2f33322d3332203d3e20323733323833.roa
File:                     323030313a313232373a3a2f33322d3332203d3e20323733323833.roa (raw, json)
Hash identifier:          lNXarLp5l8OVHaRQamB7T9PfQogFhGJQc5eaYDF8dwI=
Subject key identifier:   03:6B:0B:2B:51:53:A5:4C:48:B8:71:70:B9:85:E0:B3:80:EE:EE:82
Certificate issuer:       /CN=BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0
Certificate serial:       5A7651376B8DB74F1BAB705045F7AE1EDF948DCB
Authority key identifier: BB:9F:D8:1D:3D:A0:7C:F2:79:6D:D4:3B:AD:C9:15:2C:9E:E5:2C:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/160B09D6C507E92A1235B0E744F800D22E4E9988F9E0E0DD230DCDFA44ACD7CE/0/323030313a313232373a3a2f33322d3332203d3e20323733323833.roa
Signing time:             Mon 25 May 2026 22:35:00 +0000
ROA not before:           Mon 25 May 2026 22:30:00 +0000
ROA not after:            Mon 24 May 2027 22:35:00 +0000
asID:                     273283
IP address blocks:        2001:1227::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/160B09D6C507E92A1235B0E744F800D22E4E9988F9E0E0DD230DCDFA44ACD7CE/0/BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/160B09D6C507E92A1235B0E744F800D22E4E9988F9E0E0DD230DCDFA44ACD7CE/0/BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:51:37:6b:8d:b7:4f:1b:ab:70:50:45:f7:ae:1e:df:94:8d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0
        Validity
            Not Before: May 25 22:30:00 2026 GMT
            Not After : May 24 22:35:00 2027 GMT
        Subject: CN=036B0B2B5153A54C48B87170B985E0B380EEEE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:61:d9:54:d8:ec:7e:aa:24:54:3c:57:d2:fc:
                    7e:92:91:3c:13:d5:08:a2:29:07:c2:4b:d8:8a:c8:
                    20:21:86:c1:37:14:ac:9c:fb:6b:48:e3:d1:7f:8b:
                    8e:48:d0:ba:ce:79:e0:03:aa:5a:87:e2:d7:2e:83:
                    8c:40:e8:a6:68:fa:4e:f8:70:ab:b1:fb:7b:1c:9f:
                    6d:56:ed:3d:0c:71:18:e3:f0:41:71:00:34:d8:89:
                    4d:4b:f6:9f:bd:9a:b2:23:18:7b:72:e7:b5:b4:15:
                    29:d5:c2:92:a5:f9:65:91:c7:e2:5e:46:b4:95:25:
                    27:5d:52:4f:ea:82:2e:ec:10:e8:9d:39:b9:89:91:
                    8c:1e:f7:d0:fd:f3:cc:e8:4d:c5:0a:a1:65:b6:c0:
                    45:69:22:79:12:0b:62:d4:ee:dc:ac:0c:5b:60:f0:
                    52:47:09:31:b7:25:ae:2d:da:83:b8:04:02:d2:45:
                    d5:2a:aa:ee:97:66:26:9a:e9:40:21:04:a1:f4:d4:
                    ea:08:e2:db:20:56:04:0e:d6:87:8a:72:37:ea:b9:
                    07:9a:35:12:ab:db:eb:bf:37:6c:aa:85:35:3a:5f:
                    82:f3:42:cd:a1:0e:2b:ab:61:2f:55:7e:84:5e:95:
                    63:64:2b:1d:15:cc:af:2d:61:10:05:a1:55:99:dc:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6B:0B:2B:51:53:A5:4C:48:B8:71:70:B9:85:E0:B3:80:EE:EE:82
            X509v3 Authority Key Identifier:
                keyid:BB:9F:D8:1D:3D:A0:7C:F2:79:6D:D4:3B:AD:C9:15:2C:9E:E5:2C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/160B09D6C507E92A1235B0E744F800D22E4E9988F9E0E0DD230DCDFA44ACD7CE/0/BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9FD81D3DA07CF2796DD43BADC9152C9EE52CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/160B09D6C507E92A1235B0E744F800D22E4E9988F9E0E0DD230DCDFA44ACD7CE/0/323030313a313232373a3a2f33322d3332203d3e20323733323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1227::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:e1:37:10:bd:32:70:20:cb:b4:cc:88:97:e9:a1:2c:3f:
         c6:1a:71:04:3d:78:35:0d:06:3b:ec:68:3e:70:ff:04:35:9a:
         51:94:73:fe:5f:92:f8:12:1f:68:00:91:8c:42:11:fb:6b:60:
         c3:a9:fe:cd:3a:38:57:76:48:cf:72:29:cb:18:c4:aa:d5:49:
         b2:56:3e:19:4f:f6:3a:f3:21:fb:71:ed:54:7d:d3:db:05:c9:
         7c:6a:8b:78:69:57:30:bf:b8:24:25:6b:15:5e:56:5a:76:dd:
         4b:3d:57:6d:8d:11:08:f9:e2:b6:ad:52:e4:b5:07:6e:8e:8b:
         d5:b3:74:bf:2a:f6:c2:76:85:ce:20:a1:37:0a:10:d3:67:15:
         96:8d:ad:61:c2:2f:e2:01:03:96:df:e0:7c:60:d1:36:e9:61:
         d0:08:65:bb:89:d8:74:ec:70:93:09:03:cf:21:3d:9e:48:99:
         c2:64:a0:09:a8:68:3d:93:13:67:45:04:87:19:b5:8e:27:e6:
         ec:b0:75:ae:48:4b:e6:f7:7c:84:97:32:13:fe:5f:18:be:4e:
         47:f2:cb:26:50:ac:f2:be:08:5a:82:ae:bd:93:f3:f6:44:a3:
         82:5d:b7:31:f5:1f:91:65:3c:1a:2b:f0:52:7f:4f:8f:9e:12:
         d0:2d:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:01:47 2026 by rpki-client