Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/323830333a396435303a3a2f33322d3438203d3e20323733383731.roa
File:                     323830333a396435303a3a2f33322d3438203d3e20323733383731.roa (raw, json)
Hash identifier:          xjaGLbNBJEGwSYxVXan9xSi9MNF/Uz2ICTGsPBFkT2U=
Subject key identifier:   6F:7F:35:EB:4A:0D:91:57:83:71:86:2C:63:20:0E:D4:1D:15:A6:6C
Certificate issuer:       /CN=7ADC89EC146B6840AE627C02074614635D0086C1
Certificate serial:       1EBACC997D704F9140FFF8D95519D96A28EB7A89
Authority key identifier: 7A:DC:89:EC:14:6B:68:40:AE:62:7C:02:07:46:14:63:5D:00:86:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ADC89EC146B6840AE627C02074614635D0086C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/323830333a396435303a3a2f33322d3438203d3e20323733383731.roa
Signing time:             Fri 30 Jan 2026 06:24:11 +0000
ROA not before:           Fri 30 Jan 2026 06:19:11 +0000
ROA not after:            Fri 29 Jan 2027 06:24:11 +0000
asID:                     273871
IP address blocks:        2803:9d50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/7ADC89EC146B6840AE627C02074614635D0086C1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/7ADC89EC146B6840AE627C02074614635D0086C1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ADC89EC146B6840AE627C02074614635D0086C1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ba:cc:99:7d:70:4f:91:40:ff:f8:d9:55:19:d9:6a:28:eb:7a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ADC89EC146B6840AE627C02074614635D0086C1
        Validity
            Not Before: Jan 30 06:19:11 2026 GMT
            Not After : Jan 29 06:24:11 2027 GMT
        Subject: CN=6F7F35EB4A0D91578371862C63200ED41D15A66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:46:9c:3f:c5:24:29:b7:ae:5b:10:ca:99:
                    af:f5:51:6c:35:10:b7:a8:96:22:a0:ff:22:1c:db:
                    80:a6:e9:8b:f6:cc:56:0e:d1:eb:0d:48:0c:ac:04:
                    23:39:08:01:e0:fe:99:fa:17:56:4b:06:21:3a:c5:
                    7b:33:b5:f5:fe:c5:33:09:20:52:4e:2b:75:f4:98:
                    3d:b5:e1:50:db:42:fe:83:7d:88:91:b8:cf:98:e4:
                    5c:fa:34:81:d3:9a:96:b7:81:2a:da:b8:96:81:96:
                    78:53:8d:56:00:2e:5f:86:f5:d6:75:f6:79:2d:d2:
                    1c:42:40:f0:dc:b6:3a:05:9b:6d:bd:81:51:2b:98:
                    2c:d3:a2:99:a3:cf:85:0e:d1:49:6b:21:88:3c:f3:
                    8b:bf:89:4b:13:b0:e7:89:ea:25:1e:4d:28:1e:50:
                    fe:f9:68:4b:83:79:37:b5:85:8d:b0:ac:86:48:f3:
                    0f:9f:df:32:b9:78:8a:56:ae:31:1c:b9:f9:cf:91:
                    35:04:f3:74:ad:f6:11:89:e3:28:bb:d8:ec:5f:93:
                    24:96:06:f4:27:59:bd:43:15:2c:70:c9:e7:06:f2:
                    8b:13:76:23:a3:13:b0:83:b9:a0:51:f8:27:d1:ec:
                    88:7b:51:e2:bb:55:3e:8b:ec:e2:e7:05:89:ba:97:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7F:35:EB:4A:0D:91:57:83:71:86:2C:63:20:0E:D4:1D:15:A6:6C
            X509v3 Authority Key Identifier:
                keyid:7A:DC:89:EC:14:6B:68:40:AE:62:7C:02:07:46:14:63:5D:00:86:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/7ADC89EC146B6840AE627C02074614635D0086C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ADC89EC146B6840AE627C02074614635D0086C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/323830333a396435303a3a2f33322d3438203d3e20323733383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:45:8e:00:46:e0:3c:8e:d3:a0:09:51:34:e6:0c:51:b3:e0:
         13:d7:bd:d2:16:26:c5:15:36:41:20:43:87:4c:d5:e2:41:38:
         10:72:17:1e:ec:96:ae:df:d8:1c:46:b7:62:0f:c2:10:58:84:
         ad:98:5f:aa:e0:5b:ea:85:d5:c6:89:d7:1c:59:38:4b:b6:a3:
         a0:54:bc:2f:38:39:c7:77:51:02:e0:ae:b0:56:9b:74:60:de:
         29:9a:0c:0d:29:4b:bc:f5:c1:01:11:f4:a8:e0:0e:d7:b1:58:
         f4:96:bc:3f:d8:ad:5e:77:a4:58:c8:b8:c0:ea:b4:6c:73:e5:
         19:25:bc:f4:c4:48:d1:df:7b:3f:76:e4:28:95:25:b5:8c:5c:
         e8:b2:ca:2b:91:7b:c9:ae:c0:cc:50:27:41:91:e3:8e:1d:f7:
         1e:20:27:eb:1a:44:5f:f3:70:a1:eb:c6:53:e6:39:cf:18:d3:
         d2:b7:d5:6c:21:b3:df:cd:cc:97:b5:a6:20:a3:96:f9:0e:08:
         cb:6a:02:a8:13:60:e9:ae:14:08:19:18:2f:6d:b3:d8:74:99:
         39:28:13:58:09:01:00:81:2c:12:59:f2:17:16:35:51:4f:b0:
         1a:70:db:01:6c:31:e5:cf:16:87:be:d4:30:17:83:f6:b3:9d:
         57:0c:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:03 2026 by rpki-client