Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa
File:                     323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          ueTByk0CZi8X2FQ7n5SS74p2+6vFcBsx7T2tkpIaGEE=
Subject key identifier:   BE:5E:03:58:76:1D:96:A3:3C:29:DC:D3:A5:FE:79:73:47:C9:BD:3B
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       5668DFC0185718044B67D6DED7D490D8E707A9D1
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa
Signing time:             Wed 14 Oct 2026 21:40:35 +0000
ROA not before:           Wed 14 Oct 2026 21:35:35 +0000
ROA not after:            Wed 13 Oct 2027 21:40:35 +0000
asID:                     273177
IP address blocks:        2803:ca50:3f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 09:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:df:c0:18:57:18:04:4b:67:d6:de:d7:d4:90:d8:e7:07:a9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Oct 14 21:35:35 2026 GMT
            Not After : Oct 13 21:40:35 2027 GMT
        Subject: CN=BE5E0358761D96A33C29DCD3A5FE797347C9BD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:ad:9d:c8:05:7b:a2:00:0f:f8:df:ff:3e:
                    58:74:b3:53:d5:9e:7c:6b:47:fc:c9:47:d1:55:43:
                    96:51:11:d4:4b:39:1f:98:94:11:f5:51:96:bf:51:
                    d3:6a:7e:59:5c:ce:23:ed:73:8b:82:23:e9:22:78:
                    f4:be:76:93:15:6c:d9:d9:1b:16:aa:01:dd:dc:d0:
                    15:e3:f2:dd:ba:7f:bb:05:78:82:4f:55:52:9c:31:
                    b9:08:cf:79:e8:cb:7e:38:e4:d1:fb:64:d8:69:9c:
                    c4:a0:de:c0:53:8b:2a:07:94:52:82:00:38:90:fa:
                    95:c5:f3:f3:92:96:d0:15:4d:66:f3:61:9c:5d:32:
                    6c:e6:d2:1d:50:6e:77:31:23:f7:7b:6a:ea:1a:bc:
                    2b:b4:e5:56:b2:50:09:82:eb:27:43:56:d9:18:f3:
                    86:2e:7f:bc:63:78:e0:60:eb:91:3f:6c:47:85:5a:
                    a9:12:34:e7:6f:70:1d:35:66:54:80:f1:50:8e:0d:
                    53:b3:88:21:d9:83:e7:6b:4c:e3:df:ca:ce:83:9f:
                    a1:15:dd:9c:91:35:45:c9:2c:7c:d8:6d:a9:3d:c9:
                    ce:11:0e:4d:e7:41:cb:e2:a4:8e:4c:b5:91:73:6e:
                    22:cd:d6:30:c0:b6:3e:5b:9c:50:fa:37:e4:4b:b2:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5E:03:58:76:1D:96:A3:3C:29:DC:D3:A5:FE:79:73:47:C9:BD:3B
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a336630303a3a2f34382d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50:3f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:bc:85:a9:6c:66:24:56:19:ca:ad:88:78:01:45:b2:85:
         19:4d:98:4b:74:ad:20:a8:94:81:96:4c:7e:cd:bc:37:9d:c1:
         63:fd:85:f0:96:64:55:a0:33:57:f0:de:70:ba:f6:f8:53:a7:
         27:aa:ac:9c:80:d2:25:d2:97:2c:7d:37:5c:19:45:79:ee:98:
         5e:61:6f:d3:da:56:a1:46:a7:a2:78:8a:f0:61:91:a4:b5:6e:
         f9:b6:11:cd:d7:e3:6b:4c:bc:3a:af:d4:37:09:8b:34:cb:ca:
         bf:4d:58:ae:cc:cc:04:1b:23:bb:e5:30:02:14:eb:74:eb:61:
         55:4d:84:8a:1f:e6:3b:72:7a:9b:8c:cd:77:98:7d:78:ee:b6:
         45:08:15:96:df:2f:e2:35:10:83:e5:ca:6e:30:12:ab:a6:af:
         17:8f:c2:1c:4a:3b:14:f9:f1:92:0c:c0:76:8c:76:c1:d0:04:
         41:b3:29:ae:0f:67:1f:21:92:e4:32:8d:ef:d0:44:1e:dc:28:
         e7:17:11:96:46:f1:82:6f:7e:60:3d:10:71:72:7d:7b:73:2d:
         41:a8:e0:a8:bd:2e:62:c9:5b:41:1c:83:f0:f5:26:d6:20:1b:
         a4:2a:87:88:ed:bc:17:fc:78:ed:9e:eb:a5:9a:b4:b7:15:53:
         eb:14:17:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 06:20:49 2026 by rpki-client