Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a313030303a3a2f33362d3336203d3e20323734323032.roa
File:                     323830333a396333303a313030303a3a2f33362d3336203d3e20323734323032.roa (raw, json)
Hash identifier:          vOvkmUgsDX2rKHRWIoXTBSpfayRmAl7R1wEi24BQ86w=
Subject key identifier:   3E:74:95:27:D1:A0:EC:35:70:04:C3:FA:55:EC:91:6B:33:B1:6F:9C
Certificate issuer:       /CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
Certificate serial:       4FFD08EDE36AC8BC3FB1387F1C93CD23ED3D1C06
Authority key identifier: 7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a313030303a3a2f33362d3336203d3e20323734323032.roa
Signing time:             Fri 11 Sep 2026 15:55:01 +0000
ROA not before:           Fri 11 Sep 2026 15:50:01 +0000
ROA not after:            Fri 10 Sep 2027 15:55:01 +0000
asID:                     274202
IP address blocks:        2803:9c30:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 00:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fd:08:ed:e3:6a:c8:bc:3f:b1:38:7f:1c:93:cd:23:ed:3d:1c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9DF65ED248FC06624552921AA7161D6D5BCFC7
        Validity
            Not Before: Sep 11 15:50:01 2026 GMT
            Not After : Sep 10 15:55:01 2027 GMT
        Subject: CN=3E749527D1A0EC357004C3FA55EC916B33B16F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:02:c4:24:a4:84:c5:60:57:fa:9f:dd:60:
                    2a:06:a3:18:ed:f8:2e:ab:98:95:e6:2f:d2:c3:6f:
                    7e:86:6e:31:22:a5:a4:f3:f8:b5:90:30:32:ae:5f:
                    3a:f8:08:3d:75:c0:66:ef:da:31:b8:e0:33:91:26:
                    22:39:d9:97:e7:93:32:dd:33:62:33:43:38:16:53:
                    99:76:fb:df:4d:f1:bf:07:80:f1:fe:10:6b:f1:e4:
                    b1:29:a1:5c:f3:62:0f:49:de:02:c6:e4:21:b6:f2:
                    12:7f:4b:48:4c:5a:8e:0a:ef:b4:68:e6:0d:da:d7:
                    b1:f8:84:21:fd:75:65:90:a9:e9:89:f3:9f:bb:0a:
                    86:bf:02:d6:c2:e2:38:ef:ab:56:e6:25:43:0e:a2:
                    bd:a5:bf:dc:d0:46:04:68:6d:f3:35:6a:dc:60:a5:
                    a2:8c:65:af:97:6c:9c:93:71:9d:09:f3:2a:fd:87:
                    18:08:ee:43:8e:72:e6:77:4e:9f:80:54:d1:ff:c4:
                    d9:35:f0:26:b3:23:31:e0:f5:13:89:0f:ad:55:e7:
                    65:bc:50:64:e6:1c:9c:12:0f:ce:a6:65:a6:c6:cf:
                    dd:3c:e3:3a:bf:c4:1a:4a:4e:15:5b:86:0b:54:3b:
                    93:dd:e7:85:39:33:d4:d7:b5:37:12:fc:99:02:bb:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:74:95:27:D1:A0:EC:35:70:04:C3:FA:55:EC:91:6B:33:B1:6F:9C
            X509v3 Authority Key Identifier:
                keyid:7C:9D:F6:5E:D2:48:FC:06:62:45:52:92:1A:A7:16:1D:6D:5B:CF:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C9DF65ED248FC06624552921AA7161D6D5BCFC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6852F9D13BAC1F96FB688EE627FEE6164E11B7945D76ECC748173B4CF141045A/0/323830333a396333303a313030303a3a2f33362d3336203d3e20323734323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c30:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:22:b3:33:ae:45:c4:fe:1a:a5:4f:c4:4b:ff:db:69:4a:3a:
         d3:f3:86:9d:8c:e4:10:87:45:f2:43:87:e3:a7:7c:bc:f6:da:
         06:93:61:e5:c6:9e:9d:21:0d:9f:fa:e7:34:53:7b:93:54:5f:
         89:ab:95:41:fe:1f:64:7c:e3:13:07:ca:7b:48:f2:a5:6b:c1:
         75:78:e1:9d:56:43:8b:82:bc:8c:0c:d0:bd:1c:e6:b7:c7:ac:
         8f:07:26:2c:74:51:b7:b5:2a:0d:59:79:03:48:de:ed:32:d2:
         8d:dc:e5:0d:df:05:7d:c2:87:dc:1c:e9:df:bc:c5:65:b3:b5:
         ca:b5:40:8c:3c:bc:61:11:53:0c:b4:c8:54:3c:95:1d:f7:7f:
         25:1c:5c:dd:e2:33:1a:85:33:54:c5:e6:09:94:df:9f:27:04:
         37:f7:ff:9b:0d:05:3d:67:d2:78:51:58:07:11:40:50:e1:3d:
         bf:9d:15:10:df:af:16:1b:c3:a7:10:54:94:ef:ef:09:78:2d:
         b7:01:47:be:40:82:fc:69:ff:5c:84:a4:90:bc:b8:bf:26:86:
         6f:2d:33:f2:ef:f1:c2:7e:99:ad:59:5e:6a:34:57:1c:cf:f5:
         fa:22:67:80:6e:59:58:b1:3a:1d:9b:51:e4:6b:56:a3:de:18:
         56:e6:a9:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 13 11:28:07 2026 by rpki-client