Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e203237383834.roa
File:                     323830333a3931303a3a2f33322d3332203d3e203237383834.roa (raw, json)
Hash identifier:          Pr1UZ2Gh6VBD67bc7EQfY3zlCG/YQn/jcIxjABYyLTA=
Subject key identifier:   CE:9A:2A:18:F1:2C:FD:DA:24:3C:E1:DC:97:4D:35:17:C5:4D:0E:21
Certificate issuer:       /CN=4C07ED76182959652B8E9E133053015F589BFC7F
Certificate serial:       4E75CA94F7B3B1948F97EAC9595FFFED83F12FDE
Authority key identifier: 4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e203237383834.roa
Signing time:             Wed 03 Jun 2026 23:46:27 +0000
ROA not before:           Wed 03 Jun 2026 23:41:27 +0000
ROA not after:            Wed 02 Jun 2027 23:46:27 +0000
asID:                     27884
IP address blocks:        2803:910::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 14:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:75:ca:94:f7:b3:b1:94:8f:97:ea:c9:59:5f:ff:ed:83:f1:2f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C07ED76182959652B8E9E133053015F589BFC7F
        Validity
            Not Before: Jun  3 23:41:27 2026 GMT
            Not After : Jun  2 23:46:27 2027 GMT
        Subject: CN=CE9A2A18F12CFDDA243CE1DC974D3517C54D0E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:d0:de:74:bd:0a:46:02:75:21:4a:c7:91:
                    37:41:6e:8d:1d:dd:2b:36:18:15:13:1d:c6:9e:04:
                    a1:68:ac:c8:17:35:66:0a:ce:3c:5d:ac:8a:98:c2:
                    79:a3:dc:cc:ac:48:06:65:12:ef:8a:c4:b9:23:bc:
                    ee:dd:64:29:f0:b8:7a:d6:38:4d:7c:18:c8:73:3e:
                    44:79:a7:b8:53:58:9a:81:c4:9f:cf:9d:58:86:c8:
                    f0:5a:a0:94:07:5c:70:e2:a4:ec:5c:3e:74:29:e6:
                    2c:7e:38:15:19:b2:2e:b1:58:ea:f5:2b:d0:5d:2c:
                    8a:7d:ab:f9:7e:ef:85:ac:87:cd:ac:c1:8b:40:d0:
                    90:e7:5d:19:44:63:c5:ae:b3:01:49:a6:52:d6:4e:
                    2c:a4:cb:4c:fa:f7:eb:cb:4f:7f:db:cc:ea:ba:e0:
                    79:f9:b1:b8:a8:2f:4f:12:cf:c4:50:f0:33:60:d9:
                    97:93:32:6e:72:20:4c:7e:c5:cb:49:5a:36:d2:68:
                    0f:3d:4c:15:eb:3e:c3:b4:b0:60:03:a0:08:de:8b:
                    7d:df:dc:18:60:ad:b7:e0:2c:e0:e4:3a:c0:fc:7a:
                    34:1b:a3:9c:92:e7:cc:ea:a0:ec:b7:30:f0:b1:1b:
                    54:c1:2b:17:e6:40:b7:e5:7a:69:23:e8:3c:26:22:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9A:2A:18:F1:2C:FD:DA:24:3C:E1:DC:97:4D:35:17:C5:4D:0E:21
            X509v3 Authority Key Identifier:
                keyid:4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/323830333a3931303a3a2f33322d3332203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:f0:ae:f3:d9:53:28:35:6f:4f:48:83:f4:fa:8e:b2:ba:
         b8:c8:47:4f:3f:2c:e1:37:b4:21:72:cf:c3:cb:76:e1:48:3c:
         8a:bf:48:ba:90:c1:72:e2:57:78:8f:6c:f7:6e:9f:cf:85:23:
         45:75:6d:2b:65:04:61:96:0f:1d:c7:f8:c0:13:3a:ea:0a:8f:
         65:f9:91:75:60:62:95:d8:59:81:1e:f4:1e:71:c3:27:27:1c:
         67:30:f4:8d:f2:da:f5:cd:5c:f8:f5:c9:2d:0f:35:3a:01:a8:
         91:07:23:01:2f:04:1d:c2:af:6a:3f:9b:ce:c7:7b:7f:2d:04:
         47:fa:bb:f2:ec:20:e2:2a:d0:df:00:f3:55:18:3d:61:17:34:
         45:91:47:18:6b:7c:6b:98:7e:02:c4:34:50:b1:bf:6f:ed:99:
         30:3c:ca:05:ab:dd:1a:ae:42:33:06:0f:cc:cd:ab:2f:67:ac:
         2f:3f:ac:27:49:43:f4:a3:84:3a:d8:40:43:55:71:5d:41:37:
         08:9d:99:c5:00:e9:5a:51:51:4f:ae:47:4e:25:25:7d:09:29:
         ea:3a:3e:2b:c2:eb:04:1d:3a:92:8e:8d:70:35:fe:58:21:85:
         83:92:ef:e7:53:76:80:3b:de:c0:10:cf:a5:b7:38:bb:52:b1:
         ec:66:b6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:34:28 2026 by rpki-client