Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa
File:                     323830333a646539303a3a2f33322d3438203d3e20323634373733.roa (raw, json)
Hash identifier:          V/Lbl5WB6uQwncOZFo9bUBslap1TkFY0Q5fF/QEskjE=
Subject key identifier:   F7:8C:FC:28:26:E7:88:E8:26:08:78:EA:02:29:B7:AE:19:30:B7:B1
Certificate issuer:       /CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
Certificate serial:       793F16696A5C76A55F94C8A9B47E6E6167CC2A63
Authority key identifier: 18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa
Signing time:             Wed 27 May 2026 22:44:26 +0000
ROA not before:           Wed 27 May 2026 22:39:26 +0000
ROA not after:            Wed 26 May 2027 22:44:26 +0000
asID:                     264773
IP address blocks:        2803:de90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3f:16:69:6a:5c:76:a5:5f:94:c8:a9:b4:7e:6e:61:67:cc:2a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
        Validity
            Not Before: May 27 22:39:26 2026 GMT
            Not After : May 26 22:44:26 2027 GMT
        Subject: CN=F78CFC2826E788E8260878EA0229B7AE1930B7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:24:4d:c5:ea:97:0a:70:be:23:5c:9e:d6:
                    47:64:99:b3:d7:3b:a1:52:29:bd:f6:e0:f6:4b:f0:
                    3f:05:42:69:39:55:e7:de:30:3b:78:32:01:83:c1:
                    7e:aa:e4:30:71:39:82:e0:69:22:eb:e0:dc:95:3d:
                    d6:6c:2a:c2:3e:76:a8:56:4d:54:4e:fe:0d:6e:64:
                    b1:9c:b4:b1:49:fc:d3:81:af:91:07:8a:b4:88:c4:
                    cc:a2:04:34:4a:48:18:d7:34:3f:46:8b:b6:8b:2c:
                    fe:9d:b7:69:da:6c:bf:dd:e5:82:c2:07:b4:58:ff:
                    43:7f:1a:97:8c:f3:0a:98:f8:1d:a8:da:cd:d9:18:
                    15:0c:a1:48:f4:94:2f:48:31:f7:8d:a3:0e:69:b5:
                    70:3f:f8:7a:43:ec:56:5b:24:8f:12:14:53:46:2c:
                    10:9d:60:52:39:b7:cc:96:90:fd:0d:84:ca:56:55:
                    5c:31:89:49:ba:d1:3f:3f:75:85:9e:0f:bd:ff:91:
                    b4:a7:84:0c:23:33:58:6a:f3:09:dc:3a:e5:b0:f5:
                    a7:73:ca:42:bc:db:53:72:b1:ee:93:23:59:ac:48:
                    6f:b5:14:ed:89:97:c0:14:86:39:a8:f7:82:5e:fa:
                    ed:3d:9a:2c:ba:95:85:27:33:04:c2:2e:1d:d6:af:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:FC:28:26:E7:88:E8:26:08:78:EA:02:29:B7:AE:19:30:B7:B1
            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de90::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:15:b3:6c:a0:1e:7f:5c:94:ea:d9:18:e8:d0:96:df:ac:
         27:9b:c7:6f:e6:aa:c4:9b:3b:5d:28:0a:6f:bd:ea:10:83:4e:
         84:77:fe:4a:7f:f7:82:06:bc:a0:a2:77:73:e6:af:cb:68:aa:
         f5:b7:dd:06:a7:4d:02:bd:8d:10:ab:5c:52:0f:fe:52:70:87:
         8b:5d:42:ff:94:dd:d6:69:5d:fd:1e:77:6b:62:1e:71:7d:19:
         c3:04:c0:a6:5b:05:be:c4:aa:c7:e8:c6:41:25:f7:d4:f1:f3:
         2e:fb:ac:0d:02:d5:6d:81:f6:3b:49:5a:06:e3:fe:7b:55:fa:
         a4:6a:88:08:d3:02:b0:7a:90:e4:c3:d5:98:0a:c7:ba:3e:bb:
         2e:ab:45:3c:85:0d:1a:71:2f:27:c3:71:bd:32:ae:c7:d6:36:
         31:eb:eb:2d:6f:3b:83:19:6b:2d:4d:de:0c:7d:d7:ad:7e:9f:
         6e:b9:75:0e:48:41:5d:69:71:66:a1:3f:ee:c1:92:c5:63:0f:
         35:b3:37:aa:8a:c4:ea:4e:53:de:25:6b:23:8b:a5:55:4a:e6:
         f1:f7:f0:85:ec:46:80:0b:aa:b2:0a:22:6e:e0:d1:17:12:d0:
         4d:c2:41:91:b8:19:4b:b0:41:75:6d:c6:d5:0d:34:41:2a:bf:
         60:07:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:35:24 2026 by rpki-client