Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313130303a3a2f34302d3430203d3e20323734383937.roa
File:                     323830333a623633303a313130303a3a2f34302d3430203d3e20323734383937.roa (raw, json)
Hash identifier:          fCdkuuDzk2x5j5xsfzULApga8MIS0dQoRxvyc5PGh5g=
Subject key identifier:   6E:BB:17:69:68:40:5F:33:0C:9F:A2:66:B9:53:F3:BA:38:85:46:14
Certificate issuer:       /CN=4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C
Certificate serial:       5543A79AFB44FA0BD57E0436B45716CDA9995BED
Authority key identifier: 48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313130303a3a2f34302d3430203d3e20323734383937.roa
Signing time:             Sat 13 Jun 2026 03:25:00 +0000
ROA not before:           Sat 13 Jun 2026 03:20:00 +0000
ROA not after:            Sat 12 Jun 2027 03:25:00 +0000
asID:                     274897
IP address blocks:        2803:b630:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:43:a7:9a:fb:44:fa:0b:d5:7e:04:36:b4:57:16:cd:a9:99:5b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C
        Validity
            Not Before: Jun 13 03:20:00 2026 GMT
            Not After : Jun 12 03:25:00 2027 GMT
        Subject: CN=6EBB176968405F330C9FA266B953F3BA38854614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:e4:27:89:aa:2c:1a:c3:b8:86:e6:cd:f8:
                    15:72:65:a6:9d:2a:ca:ec:30:e9:b6:a9:9a:fe:6f:
                    aa:ad:03:cf:f9:5c:e2:d2:bb:02:18:e7:15:46:9b:
                    66:37:27:c5:0d:d9:0f:85:cd:b3:68:b5:a1:60:40:
                    23:09:57:fa:93:35:8c:bd:5a:de:23:48:1c:c1:50:
                    1f:18:65:bb:e7:e4:43:00:a4:f3:ac:22:56:2d:56:
                    af:73:c0:c5:8d:7b:86:b1:b0:ba:53:a0:f5:32:16:
                    03:d6:fd:82:00:48:8e:5b:7d:f4:37:40:c2:db:1c:
                    0e:53:cb:c3:89:f6:1c:c4:6d:36:cb:99:a7:50:87:
                    3b:01:ea:6f:77:5d:69:57:b4:f8:88:d2:31:98:42:
                    77:1d:3e:59:b8:f3:11:f8:d4:35:64:3a:16:f6:29:
                    49:23:8d:af:c2:98:f5:e3:03:51:5a:9a:94:3f:97:
                    d5:4e:fd:cf:a7:92:b8:25:21:74:93:7a:a5:55:aa:
                    69:51:62:fb:1a:f9:41:c1:22:ee:b2:80:d3:9b:bc:
                    02:f2:93:2b:8e:33:97:82:77:04:ab:d2:a6:b6:bb:
                    0b:85:d1:2b:0e:d1:9c:3f:e2:aa:b9:94:85:5e:73:
                    09:6d:18:f7:e7:4b:25:cb:4a:07:f5:89:a3:90:50:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BB:17:69:68:40:5F:33:0C:9F:A2:66:B9:53:F3:BA:38:85:46:14
            X509v3 Authority Key Identifier:
                keyid:48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/323830333a623633303a313130303a3a2f34302d3430203d3e20323734383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b630:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:59:e7:10:52:dd:47:e1:2c:c1:81:f2:12:dd:bf:44:c9:
         9b:63:a1:b1:17:6b:07:f7:ca:33:80:5b:c5:cf:ca:fc:fd:22:
         af:ea:29:59:4c:c2:10:ef:6e:a7:c5:92:3a:54:0f:b1:52:04:
         69:13:cb:31:0b:80:dd:23:fe:0c:6d:6d:f3:48:81:97:12:b5:
         9e:be:e4:3e:8d:af:1f:e2:91:a9:7a:79:80:e1:5b:01:ae:d8:
         21:1f:db:48:be:ca:bf:47:20:7c:7c:95:03:e5:49:4c:2e:b8:
         63:a0:ea:0a:22:25:85:b1:b0:ba:a3:37:fa:05:80:ab:bf:44:
         7a:c1:e2:2d:4a:00:89:31:1d:8f:aa:04:c0:68:6b:d0:84:df:
         5f:42:61:d9:b6:92:f6:d6:9f:c7:83:bf:ec:11:36:e6:1d:95:
         65:30:d2:89:68:1a:a1:20:6c:45:9c:aa:5c:db:6d:b0:2d:b7:
         be:3f:b0:fb:02:1e:72:1f:5d:6f:e2:6f:a9:d5:71:42:4f:5b:
         ce:26:68:b6:e0:5c:e2:0e:9d:cd:21:fe:09:42:28:ea:53:48:
         91:03:26:cf:66:25:82:61:4a:06:9a:d6:da:c8:80:dd:cf:c2:
         90:d7:4b:83:53:45:4a:6d:d7:38:fe:99:4c:91:10:1a:28:e3:
         ef:da:3e:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:22 2026 by rpki-client