Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/323830333a356531303a3a2f33322d3438203d3e20323731393737.roa
File:                     323830333a356531303a3a2f33322d3438203d3e20323731393737.roa (raw, json)
Hash identifier:          QSi2OIJbwlRt6vs3uiQdxNhPjs9IppjR9+1+ppqbxqw=
Subject key identifier:   14:BF:13:D1:4C:01:11:0E:DF:4B:EC:18:D4:CC:32:BC:72:08:03:0C
Certificate issuer:       /CN=12A0DE8A4244131397DB58771A7DFF385EAA5549
Certificate serial:       3C266AB328DF47D9E755A75BE1D5B9831574386E
Authority key identifier: 12:A0:DE:8A:42:44:13:13:97:DB:58:77:1A:7D:FF:38:5E:AA:55:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/323830333a356531303a3a2f33322d3438203d3e20323731393737.roa
Signing time:             Tue 06 Jan 2026 18:58:18 +0000
ROA not before:           Tue 06 Jan 2026 18:53:18 +0000
ROA not after:            Tue 05 Jan 2027 18:58:18 +0000
asID:                     271977
IP address blocks:        2803:5e10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:26:6a:b3:28:df:47:d9:e7:55:a7:5b:e1:d5:b9:83:15:74:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A0DE8A4244131397DB58771A7DFF385EAA5549
        Validity
            Not Before: Jan  6 18:53:18 2026 GMT
            Not After : Jan  5 18:58:18 2027 GMT
        Subject: CN=14BF13D14C01110EDF4BEC18D4CC32BC7208030C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:8d:3d:d9:39:75:74:24:5d:cd:42:20:dd:
                    c7:eb:1e:89:a5:0c:76:30:d4:a2:34:24:4f:13:6e:
                    14:06:29:c6:d2:16:e6:6c:e5:49:44:0b:18:a9:d3:
                    67:73:b1:93:d1:a6:60:55:af:d2:ae:42:ff:17:c9:
                    96:31:a6:f9:29:cb:18:88:87:84:81:90:0a:4f:ba:
                    20:01:66:6b:1a:0f:34:e6:2e:36:a9:f7:65:06:16:
                    59:c4:93:9b:d6:e3:35:68:97:6d:97:52:50:23:da:
                    cc:93:26:52:2c:a7:3d:0c:22:3b:c2:43:d4:e1:0c:
                    44:81:e4:f8:6b:73:7f:ab:d5:24:95:ee:c3:23:25:
                    77:22:2c:b2:90:f4:6c:0b:78:54:62:27:ac:4a:5a:
                    4a:fb:eb:db:a6:4a:d6:a7:62:06:4a:8c:af:1c:41:
                    e0:14:14:52:81:54:12:73:1f:e0:f4:95:b9:2a:5d:
                    b3:5e:ed:12:dd:f7:e4:cd:87:11:60:75:0a:4b:7d:
                    61:64:31:7a:6a:85:b9:5e:d8:21:98:47:81:e7:58:
                    ae:5c:3c:d2:05:85:a9:b0:e2:b3:8e:da:b2:77:b7:
                    60:7d:bb:50:a0:eb:44:72:59:b7:a0:8b:9e:de:ca:
                    f1:40:77:ba:5a:4a:e3:8f:61:e5:85:67:a4:c2:71:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:13:D1:4C:01:11:0E:DF:4B:EC:18:D4:CC:32:BC:72:08:03:0C
            X509v3 Authority Key Identifier:
                keyid:12:A0:DE:8A:42:44:13:13:97:DB:58:77:1A:7D:FF:38:5E:AA:55:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/323830333a356531303a3a2f33322d3438203d3e20323731393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:91:00:cb:f4:ee:ca:c6:8b:97:2c:cf:39:ef:41:d1:83:87:
         31:58:39:d4:49:4f:88:1c:97:ad:88:31:b8:be:4a:7e:5d:c9:
         e3:d5:a5:20:fe:59:00:36:af:c1:d0:11:18:7f:75:bf:a5:ff:
         af:38:87:5c:6f:35:8c:9f:c6:8a:1a:24:e5:c2:7a:d5:02:93:
         89:7e:88:f4:8d:cc:80:82:f1:92:4c:3a:72:f3:fa:d5:fa:e1:
         63:b3:a0:30:5f:fe:3b:27:7a:55:14:81:ca:3c:c9:7e:c3:7f:
         92:06:55:0b:8f:69:08:42:7b:44:81:6a:8f:6d:e7:fa:42:27:
         7c:5e:8b:a0:77:8a:a4:7d:75:08:e8:73:8c:3d:b5:c7:35:21:
         9c:fd:63:71:ca:4c:61:bc:56:70:72:ae:f2:fc:14:08:e3:a2:
         85:a5:a3:19:19:1b:9f:6b:fb:27:11:47:32:84:c8:8e:57:f8:
         20:7f:57:85:fe:80:87:0c:01:2d:a5:c4:d1:5f:37:c5:1c:cf:
         bf:e8:10:83:2f:da:ef:88:6d:56:a4:2d:dc:81:90:c0:99:fc:
         75:d9:92:70:93:d6:f3:2d:96:a7:4d:d2:76:de:53:55:b3:a8:
         17:1b:90:61:ca:72:39:48:82:f5:24:07:59:1e:04:81:37:ce:
         02:d8:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:23:36 2026 by rpki-client