Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/323830333a343264303a3a2f33322d3438203d3e20323733323231.roa
File:                     323830333a343264303a3a2f33322d3438203d3e20323733323231.roa (raw, json)
Hash identifier:          W5u+ZaZJRO6VFtCxgXkvrJObGiIUx17aGymYxO/lKR4=
Subject key identifier:   2F:92:13:78:D6:35:74:72:5A:6E:5E:77:61:70:FF:D8:81:81:D3:6E
Certificate issuer:       /CN=BED423F8BF886A1F701D384EDB158128EF927F3E
Certificate serial:       1A942848DDB0AEE7C514537C112EDA24A27BC2F7
Authority key identifier: BE:D4:23:F8:BF:88:6A:1F:70:1D:38:4E:DB:15:81:28:EF:92:7F:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/323830333a343264303a3a2f33322d3438203d3e20323733323231.roa
Signing time:             Mon 02 Mar 2026 21:32:27 +0000
ROA not before:           Mon 02 Mar 2026 21:27:27 +0000
ROA not after:            Mon 01 Mar 2027 21:32:27 +0000
asID:                     273221
IP address blocks:        2803:42d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:94:28:48:dd:b0:ae:e7:c5:14:53:7c:11:2e:da:24:a2:7b:c2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED423F8BF886A1F701D384EDB158128EF927F3E
        Validity
            Not Before: Mar  2 21:27:27 2026 GMT
            Not After : Mar  1 21:32:27 2027 GMT
        Subject: CN=2F921378D63574725A6E5E776170FFD88181D36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:b8:f7:77:e6:ec:99:7c:df:29:78:99:85:
                    21:29:df:e4:d4:09:a9:75:13:f0:5e:fe:91:0f:0d:
                    d0:f2:ff:32:c9:e6:0d:a0:43:bd:98:ad:37:90:ce:
                    71:01:74:99:5e:7c:d7:58:5c:50:54:fb:05:f0:28:
                    ef:20:2b:48:7d:f9:43:5f:f7:49:d8:6e:7a:9c:5f:
                    d1:7b:85:04:06:7a:f9:ff:9e:40:b1:be:fa:be:53:
                    4d:d8:07:3e:03:0b:e9:8a:be:7a:74:fc:c9:e8:32:
                    8f:e1:40:ea:ef:03:6c:4a:f9:72:e6:30:40:f5:78:
                    38:64:ad:c9:ed:03:5b:7a:93:64:ca:d6:b3:c1:5c:
                    a4:e0:ce:98:47:c4:29:5b:bc:15:d9:ff:4d:d7:ce:
                    2b:30:ef:52:8a:e4:25:68:3a:fc:1f:06:d9:3a:cb:
                    25:db:1c:13:45:60:5d:6e:8a:c6:09:ee:86:8d:7f:
                    dc:81:f6:ae:e6:d2:ad:33:65:b7:67:00:07:4e:15:
                    a8:a7:66:2c:65:5a:04:59:29:bd:40:e5:39:3e:6a:
                    6b:b7:e1:11:68:88:be:79:3a:09:2b:b3:3b:60:ea:
                    fb:97:bc:98:08:10:4a:99:0c:72:c6:6c:cf:1b:87:
                    60:73:35:d1:1f:39:74:1b:e2:5f:b2:d4:8b:27:96:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:92:13:78:D6:35:74:72:5A:6E:5E:77:61:70:FF:D8:81:81:D3:6E
            X509v3 Authority Key Identifier:
                keyid:BE:D4:23:F8:BF:88:6A:1F:70:1D:38:4E:DB:15:81:28:EF:92:7F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/BED423F8BF886A1F701D384EDB158128EF927F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BED423F8BF886A1F701D384EDB158128EF927F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89F33763815B43A88EE1B8461DC2BA76F7BD9665458EEB7692C65403A1D529CC/0/323830333a343264303a3a2f33322d3438203d3e20323733323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:42d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:28:ff:73:9f:23:e6:af:64:83:d1:de:59:33:fd:5e:4e:9f:
         89:ef:9b:f3:14:4a:2d:b4:82:22:06:ba:b3:2e:27:d3:a3:45:
         66:7e:71:f0:66:51:28:78:e9:90:09:27:83:95:ca:c3:4c:17:
         77:2c:7f:2a:37:03:aa:85:9c:bc:47:23:82:b0:20:23:0d:45:
         e5:70:2b:a7:de:80:46:80:1f:e4:48:3a:86:f8:cc:29:bb:4e:
         82:b5:42:d3:4f:16:aa:d6:d9:2e:7d:d4:86:65:73:6b:f1:b3:
         3f:20:df:5f:7a:35:21:93:db:2e:61:76:5c:04:47:3a:eb:2b:
         39:d9:10:ec:fa:ba:d1:de:c6:d0:54:42:3b:d9:6e:d7:97:61:
         77:ec:ea:8f:b7:77:97:2e:07:2f:cf:19:19:10:1d:35:90:b4:
         d2:45:0e:1c:c2:42:df:7a:45:d3:23:b0:b6:19:2d:09:8b:a3:
         f5:51:7c:a7:e4:a3:a1:22:f1:25:5b:40:65:59:04:6e:ef:c9:
         69:ba:8d:1e:4d:69:84:61:84:00:07:fd:3c:68:f9:0e:2a:2e:
         f1:f9:61:d6:73:dc:4c:d9:3e:17:32:58:8c:92:b6:14:a0:c2:
         6d:7d:66:ff:b2:e6:c5:af:ae:30:01:47:cd:40:b6:f9:b6:8d:
         de:fd:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:05:24 2026 by rpki-client