Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a3a2f33322d3438203d3e20323733313737.roa
File:                     323830333a636135303a3a2f33322d3438203d3e20323733313737.roa (raw, json)
Hash identifier:          1T0nTiJLv7FuC4ay+oWlyEZhd2oZchVnMy8hLUbZD80=
Subject key identifier:   16:53:A5:65:58:2A:DF:FF:39:C8:4D:D3:25:11:8B:D7:E8:07:30:7D
Certificate issuer:       /CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
Certificate serial:       4963C04A427D531D94DC0275C326517D3685CD92
Authority key identifier: B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a3a2f33322d3438203d3e20323733313737.roa
Signing time:             Wed 23 Sep 2026 22:36:31 +0000
ROA not before:           Wed 23 Sep 2026 22:31:31 +0000
ROA not after:            Wed 22 Sep 2027 22:36:31 +0000
asID:                     273177
IP address blocks:        2803:ca50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:63:c0:4a:42:7d:53:1d:94:dc:02:75:c3:26:51:7d:36:85:cd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6
        Validity
            Not Before: Sep 23 22:31:31 2026 GMT
            Not After : Sep 22 22:36:31 2027 GMT
        Subject: CN=1653A565582ADFFF39C84DD325118BD7E807307D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:4c:12:89:bf:e7:fd:7f:61:1e:1d:ce:23:
                    ac:fd:86:81:d5:b7:19:8d:c9:66:fe:81:34:6b:b2:
                    12:39:db:d6:0d:cd:17:a0:4f:ce:17:ca:14:73:03:
                    42:8d:3e:84:54:bd:8a:8e:11:92:8c:b3:dc:9a:34:
                    02:9d:e7:b8:04:33:81:59:e5:63:d1:a4:4b:81:5a:
                    bd:d8:d3:18:01:51:f0:72:32:20:78:c7:bb:09:7b:
                    7b:66:08:aa:45:7e:3b:1e:80:a2:88:11:0d:fc:4b:
                    61:4c:87:bd:d8:7e:72:39:b5:04:f6:a9:f3:b0:7c:
                    ff:ea:c8:50:eb:ff:7f:9d:5c:2e:f2:4b:db:a0:0c:
                    0e:7f:1e:08:6b:d9:18:d8:1c:10:6d:96:47:c6:be:
                    02:a8:63:06:1d:4c:f9:17:ec:a0:36:3a:65:9f:cf:
                    6d:80:10:5b:21:5e:12:f1:30:66:ba:7f:4d:0e:91:
                    b4:fa:c0:82:18:ed:22:51:27:cf:be:db:00:28:54:
                    ed:f0:88:12:9c:dd:a9:ef:10:57:d6:79:dc:43:4d:
                    d6:8e:c1:6f:d1:2e:8e:83:56:7c:50:a0:50:52:34:
                    51:58:dc:96:9e:7c:f2:49:5e:49:03:2b:55:fe:4f:
                    84:ba:21:cb:1b:fc:f9:9a:c5:14:01:7c:fd:99:cc:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:53:A5:65:58:2A:DF:FF:39:C8:4D:D3:25:11:8B:D7:E8:07:30:7D
            X509v3 Authority Key Identifier:
                keyid:B9:13:C2:60:F5:6B:F7:B1:E2:B7:32:3F:47:B3:26:FB:8A:0C:BC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B913C260F56BF7B1E2B7323F47B326FB8A0CBCD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FF7B7F5770C4EDD7D6B8E4EE01C3A4B5B92E99C766788D7330E6C276C0F3088/0/323830333a636135303a3a2f33322d3438203d3e20323733313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:f5:cb:c7:0a:a7:77:42:51:8c:99:ea:22:04:3a:4e:b7:
         7f:b2:ca:cd:83:c0:04:07:24:2d:50:29:09:9c:d5:62:ab:c6:
         1f:39:58:4d:0f:2f:9f:e3:a1:04:92:8f:24:da:63:90:b2:b1:
         c7:d8:f2:c0:6e:db:c8:cd:b5:23:a8:97:07:03:d8:c5:4b:3f:
         13:53:ea:5d:d0:10:f0:d2:db:f5:37:80:fa:eb:68:68:f8:c6:
         8d:43:06:29:69:03:29:f6:ee:db:0c:b9:c5:ce:dd:50:09:c9:
         30:dc:50:f0:cf:87:3e:f7:9e:72:27:c9:58:32:89:3c:95:98:
         08:97:87:4f:83:cd:45:f8:60:7a:4c:c5:b1:5c:63:f1:6d:01:
         7e:0d:86:3f:6c:40:3e:bc:99:0a:e1:ae:e8:d3:88:75:d4:5f:
         98:99:82:c9:0b:47:b8:14:9d:2d:db:74:0e:c4:15:90:3c:6b:
         6e:4b:81:96:0a:bf:f6:03:5a:b3:1f:4c:40:53:67:64:37:72:
         07:24:a8:2a:f9:1b:65:9b:31:d4:e7:cc:ee:db:1f:b4:31:38:
         67:14:eb:f6:12:6e:3c:a8:ce:ba:7b:17:72:48:3a:a8:d6:23:
         c3:ec:ce:85:4b:2d:f6:f3:04:c3:53:ac:d0:ab:03:76:17:3e:
         98:b2:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:43:34 2026 by rpki-client