Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/323830333a343965303a3a2f33322d3332203d3e20323730303130.roa
File:                     323830333a343965303a3a2f33322d3332203d3e20323730303130.roa (raw, json)
Hash identifier:          pJoklkFFP/5iC3RhznHSLWZs9nGNT440jz4/FOvxxRU=
Subject key identifier:   53:4F:74:5D:29:39:5F:E5:8C:8E:39:F4:DA:38:B6:EB:A5:5F:24:CD
Certificate issuer:       /CN=795B9A9A078937864D9116132A81F55AF7A4D72A
Certificate serial:       2924D5DCE0E9FE348DB7FCADD94F8ED13C05F361
Authority key identifier: 79:5B:9A:9A:07:89:37:86:4D:91:16:13:2A:81:F5:5A:F7:A4:D7:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/795B9A9A078937864D9116132A81F55AF7A4D72A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/323830333a343965303a3a2f33322d3332203d3e20323730303130.roa
Signing time:             Wed 27 May 2026 13:15:00 +0000
ROA not before:           Wed 27 May 2026 13:10:00 +0000
ROA not after:            Wed 26 May 2027 13:15:00 +0000
asID:                     270010
IP address blocks:        2803:49e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/795B9A9A078937864D9116132A81F55AF7A4D72A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:24:d5:dc:e0:e9:fe:34:8d:b7:fc:ad:d9:4f:8e:d1:3c:05:f3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795B9A9A078937864D9116132A81F55AF7A4D72A
        Validity
            Not Before: May 27 13:10:00 2026 GMT
            Not After : May 26 13:15:00 2027 GMT
        Subject: CN=534F745D29395FE58C8E39F4DA38B6EBA55F24CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:2d:de:f0:03:eb:5e:a7:8b:7b:a2:77:67:
                    ed:2f:a8:d6:c7:bc:65:25:6c:ca:55:86:88:f9:22:
                    66:74:1e:78:fe:b5:65:44:cf:63:61:e8:67:4b:06:
                    45:f6:2a:b8:7b:2a:32:e0:0c:86:af:c7:04:3e:a9:
                    bc:07:4b:c5:29:55:fa:23:02:b2:46:5e:b5:68:31:
                    4f:00:d2:9c:56:dd:82:3b:2d:7a:fc:6c:55:0c:e4:
                    7a:54:ad:94:2e:05:20:06:d5:f4:9a:fa:00:e6:34:
                    ee:a9:b5:1c:a1:95:ac:cd:85:5a:54:87:ea:56:f2:
                    98:f9:8d:39:3f:fb:b1:5a:7a:a8:d4:06:d4:b1:5e:
                    7b:80:ea:c5:6a:30:51:70:82:7b:d4:25:d2:2e:dc:
                    96:01:42:e7:f9:ab:38:2c:b6:bc:6d:a6:c3:af:ad:
                    45:52:0c:6c:c2:e4:8f:29:55:54:f1:44:1f:fc:f9:
                    50:fb:c0:7a:a2:b0:06:66:6c:ea:bc:f7:f2:69:bd:
                    ea:a5:17:54:f0:35:4d:e5:bc:fa:d6:68:3d:a1:4c:
                    2b:1f:bc:7f:37:c2:ea:e1:1b:72:0f:0f:7c:f8:5a:
                    02:da:c2:cb:2a:dc:2e:cb:35:1f:a5:bf:65:1f:04:
                    c4:3e:11:bc:2c:0b:e9:2e:67:da:c4:06:9a:b8:c5:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:74:5D:29:39:5F:E5:8C:8E:39:F4:DA:38:B6:EB:A5:5F:24:CD
            X509v3 Authority Key Identifier:
                keyid:79:5B:9A:9A:07:89:37:86:4D:91:16:13:2A:81:F5:5A:F7:A4:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/795B9A9A078937864D9116132A81F55AF7A4D72A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/323830333a343965303a3a2f33322d3332203d3e20323730303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:49e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:4f:4d:72:35:cf:32:cf:ca:a6:87:f7:55:05:ca:43:3e:
         65:ff:38:bd:f0:6c:5d:66:eb:42:47:fd:b9:88:51:1e:fd:be:
         8c:04:10:38:32:1d:fc:f4:c5:94:87:f0:12:d9:94:85:71:41:
         98:fb:51:dc:64:7e:f7:25:be:26:bf:90:68:5e:71:8d:88:06:
         01:10:65:cd:6c:ff:ef:a0:2e:ad:04:6c:fa:fe:41:d2:4b:28:
         0b:4b:68:01:32:f6:87:1e:99:a1:db:e5:62:a2:f5:cf:f8:c4:
         53:d5:e1:a1:fb:c1:0c:9d:71:bc:67:4b:b9:34:09:ff:53:94:
         56:cb:cd:53:e7:ca:89:e9:af:ae:24:fe:18:98:fa:81:97:60:
         80:c7:2e:99:e6:06:61:af:dc:91:5c:43:a8:a6:10:37:4c:2a:
         7d:4b:21:d4:97:a6:df:0c:ee:7a:25:27:0d:4e:8a:76:a7:b6:
         99:a1:90:4a:ef:93:1c:b6:e3:6d:80:71:3d:ad:fa:b8:a7:51:
         c1:e8:48:68:34:e0:9a:41:7e:89:6c:b2:e4:0d:b9:9a:db:a2:
         87:86:ba:01:61:85:ee:eb:97:30:19:57:58:60:5f:8f:d8:07:
         f1:30:fe:bd:a8:c4:24:b0:71:69:62:e5:61:95:9b:23:c8:58:
         bf:ba:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:00:04 2026 by rpki-client