Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/323830333a396335303a3a2f33322d3332203d3e20323733313438.roa
File:                     323830333a396335303a3a2f33322d3332203d3e20323733313438.roa (raw, json)
Hash identifier:          5b+mWzck9l81pR3SF+RGIfzlEh5xR1injVVf6Fksn5g=
Subject key identifier:   CA:2E:DE:1B:25:ED:7C:2E:06:2E:67:9E:16:B4:76:4B:E3:5A:A3:3F
Certificate issuer:       /CN=D11050469F1A1FAEF7D47A0EB215D99DB1F18725
Certificate serial:       2635BC4D35F0F395CBB0F85FC975B1C02AC4FD35
Authority key identifier: D1:10:50:46:9F:1A:1F:AE:F7:D4:7A:0E:B2:15:D9:9D:B1:F1:87:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/323830333a396335303a3a2f33322d3332203d3e20323733313438.roa
Signing time:             Sat 13 Jun 2026 01:50:00 +0000
ROA not before:           Sat 13 Jun 2026 01:45:00 +0000
ROA not after:            Sat 12 Jun 2027 01:50:00 +0000
asID:                     273148
IP address blocks:        2803:9c50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:35:bc:4d:35:f0:f3:95:cb:b0:f8:5f:c9:75:b1:c0:2a:c4:fd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11050469F1A1FAEF7D47A0EB215D99DB1F18725
        Validity
            Not Before: Jun 13 01:45:00 2026 GMT
            Not After : Jun 12 01:50:00 2027 GMT
        Subject: CN=CA2EDE1B25ED7C2E062E679E16B4764BE35AA33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:83:c6:45:4b:b7:42:99:7d:81:ba:d8:71:
                    fc:a6:b3:47:32:db:5f:e0:a9:ca:02:41:e5:3c:7e:
                    55:fd:bc:34:79:65:2f:4a:3f:ef:e8:ea:d9:49:f9:
                    0b:77:31:a1:4f:d3:6e:d0:62:73:c0:ca:62:d4:96:
                    f6:d4:e8:16:09:9a:34:a1:42:2f:c0:e0:8c:6c:c3:
                    ea:26:96:53:b3:52:93:b7:ce:81:6e:13:ad:f1:40:
                    99:fe:62:fc:e1:2f:6d:1e:2f:55:c4:ab:c4:9a:5b:
                    ce:07:1a:2c:7d:2a:cf:7d:e0:ff:4a:20:da:94:4f:
                    93:f2:aa:be:c4:96:6e:c2:37:2f:73:87:92:67:4b:
                    dd:69:ff:ed:90:82:7a:9a:cb:67:2b:56:33:9a:ec:
                    53:a0:85:19:15:01:7c:19:6f:a7:9c:81:1a:b8:9d:
                    d9:47:d9:1e:d7:81:8c:cc:a9:6a:9c:4b:9e:36:c2:
                    22:1c:1b:ae:fc:fb:fc:4e:47:3f:09:12:21:c5:d4:
                    4a:34:b0:98:2d:97:88:c7:cc:c7:bd:bd:f0:49:5a:
                    29:11:eb:06:0d:7d:b4:b5:b3:8b:53:83:e2:96:7a:
                    5c:1d:07:7f:e9:a5:ef:76:dc:ef:a3:d2:0e:58:ff:
                    5c:b1:95:cc:5c:0f:75:2b:ef:81:a1:ef:ff:ae:14:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2E:DE:1B:25:ED:7C:2E:06:2E:67:9E:16:B4:76:4B:E3:5A:A3:3F
            X509v3 Authority Key Identifier:
                keyid:D1:10:50:46:9F:1A:1F:AE:F7:D4:7A:0E:B2:15:D9:9D:B1:F1:87:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D11050469F1A1FAEF7D47A0EB215D99DB1F18725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89411F55E7C58D4E528E003A27BB79D73437EC2CD54D51863BE7D766D5FE0E9C/0/323830333a396335303a3a2f33322d3332203d3e20323733313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:b8:57:52:e5:97:56:bd:67:38:9a:16:6b:4b:86:8e:ec:
         5c:bc:6a:c8:6c:da:76:66:35:4f:8e:de:3f:8f:c3:22:c4:bc:
         3e:b9:68:d4:38:87:f7:ba:bd:4a:1c:19:73:2f:60:db:2e:76:
         b2:f7:ec:8c:59:4a:cb:f5:c0:b7:95:ff:f1:56:b8:c1:5b:09:
         28:c8:f2:42:d8:bd:1a:2c:7c:c7:57:79:8a:25:56:0f:6d:76:
         6a:a1:78:3b:aa:f1:6a:91:22:ee:20:42:f6:a9:10:30:34:35:
         e6:99:14:1c:91:3f:57:12:5e:d5:09:80:91:b4:1a:14:7a:08:
         de:e3:f5:00:ff:dd:51:74:e8:03:3a:b8:8f:fc:d0:44:e0:22:
         72:b7:26:81:0c:e9:e0:9b:d6:83:34:f3:c4:54:40:5e:9b:33:
         22:d2:bb:2c:a7:1d:48:9b:1a:2e:03:0b:7e:a3:88:45:ba:a8:
         81:fd:88:dc:6d:fc:41:fd:9a:ae:4f:00:be:40:3b:8a:a8:40:
         7a:18:58:94:9d:06:3b:b0:d5:65:90:b5:87:d2:25:bf:8d:b9:
         d9:85:27:cf:80:b3:9c:19:b5:ec:45:0f:50:c6:d5:6d:97:db:
         9c:20:1a:85:28:67:ac:4a:01:db:10:73:2a:bc:c0:15:43:87:
         36:15:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:06:57 2026 by rpki-client