Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161F757A41421279008EF4AD5A6F09F4DD83F833A28A9A23C7E0F34C8A6E1B7A/0/323830333a666635303a3a2f33322d3438203d3e20323733393539.roa
File:                     323830333a666635303a3a2f33322d3438203d3e20323733393539.roa (raw, json)
Hash identifier:          ZvFHlWr1R0pk+2nZl6V46/fJN7tivNNvAoRBCFPMgH8=
Subject key identifier:   C8:1A:34:00:D9:7A:4A:28:40:72:D6:49:E3:A0:E9:26:DD:66:82:0F
Certificate issuer:       /CN=9EDD8307CDB115DD74144A36925CDF942A79584F
Certificate serial:       7C7C9D27C97BE94313032024656AB4DEA99357EB
Authority key identifier: 9E:DD:83:07:CD:B1:15:DD:74:14:4A:36:92:5C:DF:94:2A:79:58:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EDD8307CDB115DD74144A36925CDF942A79584F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/161F757A41421279008EF4AD5A6F09F4DD83F833A28A9A23C7E0F34C8A6E1B7A/0/323830333a666635303a3a2f33322d3438203d3e20323733393539.roa
Signing time:             Thu 28 May 2026 18:44:33 +0000
ROA not before:           Thu 28 May 2026 18:39:33 +0000
ROA not after:            Thu 27 May 2027 18:44:33 +0000
asID:                     273959
IP address blocks:        2803:ff50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/161F757A41421279008EF4AD5A6F09F4DD83F833A28A9A23C7E0F34C8A6E1B7A/0/9EDD8307CDB115DD74144A36925CDF942A79584F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/161F757A41421279008EF4AD5A6F09F4DD83F833A28A9A23C7E0F34C8A6E1B7A/0/9EDD8307CDB115DD74144A36925CDF942A79584F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EDD8307CDB115DD74144A36925CDF942A79584F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7c:9d:27:c9:7b:e9:43:13:03:20:24:65:6a:b4:de:a9:93:57:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDD8307CDB115DD74144A36925CDF942A79584F
        Validity
            Not Before: May 28 18:39:33 2026 GMT
            Not After : May 27 18:44:33 2027 GMT
        Subject: CN=C81A3400D97A4A284072D649E3A0E926DD66820F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:69:d2:80:94:64:06:66:ee:cb:ce:77:66:
                    48:71:52:05:9d:65:45:82:97:97:72:c1:0c:ca:4d:
                    fd:75:22:a7:2f:ba:b9:5e:60:25:86:fa:0f:c9:a9:
                    c0:c5:ac:95:17:46:49:1d:82:8d:35:bd:e0:e2:3a:
                    7b:fb:bd:51:44:86:3d:d3:66:01:33:7b:66:84:12:
                    22:c0:63:01:aa:33:38:22:ac:4b:ea:44:69:74:94:
                    18:b4:2a:ee:87:33:e4:52:ca:37:98:8a:6b:3f:4c:
                    78:8e:85:dd:82:49:2f:ad:4f:00:3d:1d:77:5c:4a:
                    0b:08:32:e2:d2:31:36:a2:e0:1c:54:db:32:75:08:
                    4c:53:08:d7:23:ab:a3:b6:69:46:8a:1d:40:63:c4:
                    cd:f3:4c:ce:9e:1c:a6:46:d6:92:ef:42:a7:14:5e:
                    54:ca:4b:81:03:4e:4a:64:c1:66:49:85:fe:3f:84:
                    7d:76:42:f0:38:33:7b:88:e1:f8:8a:cb:52:9c:bb:
                    4b:c3:9c:2a:60:fe:bd:31:a1:7b:65:ce:a4:da:6d:
                    d8:75:1e:7b:ae:5e:fe:54:0f:c2:34:b7:c2:24:2e:
                    cf:29:e6:24:55:97:30:13:57:3d:69:f7:51:bc:37:
                    6c:3d:d9:83:d5:aa:3d:4b:f3:8c:0a:76:f5:e9:f3:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:34:00:D9:7A:4A:28:40:72:D6:49:E3:A0:E9:26:DD:66:82:0F
            X509v3 Authority Key Identifier:
                keyid:9E:DD:83:07:CD:B1:15:DD:74:14:4A:36:92:5C:DF:94:2A:79:58:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/161F757A41421279008EF4AD5A6F09F4DD83F833A28A9A23C7E0F34C8A6E1B7A/0/9EDD8307CDB115DD74144A36925CDF942A79584F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EDD8307CDB115DD74144A36925CDF942A79584F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161F757A41421279008EF4AD5A6F09F4DD83F833A28A9A23C7E0F34C8A6E1B7A/0/323830333a666635303a3a2f33322d3438203d3e20323733393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff50::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:37:e4:5f:54:75:50:22:be:b1:6b:13:5f:93:74:5e:71:1d:
         cb:a3:28:73:01:b2:62:af:18:07:4d:7e:63:cd:74:80:e1:1c:
         01:e5:4d:52:17:7b:3b:5d:11:55:00:1b:a7:de:de:60:31:82:
         71:95:6c:c0:f2:ed:0f:88:8c:3c:c8:92:95:5e:4f:18:03:77:
         75:13:0b:1e:bc:77:fe:f4:92:93:5b:75:9e:c9:6f:bd:70:6f:
         8a:8d:26:74:8a:ed:22:8e:f2:91:00:a1:25:8a:4b:b2:25:30:
         08:a5:46:8d:a5:2e:7d:5f:cb:3c:17:2b:3d:ab:11:5f:91:53:
         e2:ea:b6:7b:28:41:d4:9d:b8:ed:ee:2f:3c:0e:6f:77:bc:85:
         bf:36:63:84:80:c0:54:cb:b9:97:92:5f:26:b0:75:ea:0c:23:
         1e:71:4d:5d:e5:1e:7f:55:9d:a8:c5:f2:1c:00:55:5f:8f:14:
         23:0b:07:ff:5b:49:d8:21:f6:6c:20:56:3e:8a:53:d3:9e:0b:
         00:ea:83:82:64:70:2c:c5:f2:9a:d3:1a:85:11:45:69:26:e4:
         5f:4b:1d:28:23:3b:e7:9d:9e:44:31:46:94:68:a7:c4:44:36:
         32:e4:b9:59:84:0a:74:2b:f7:21:d3:5d:6b:2d:30:c4:2d:49:
         4b:81:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:45 2026 by rpki-client