Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/323830333a626139303a3a2f33322d3438203d3e20323732383834.roa
File:                     323830333a626139303a3a2f33322d3438203d3e20323732383834.roa (raw, json)
Hash identifier:          PpTAnGJaKQKat/ImjZkznWcM0CraMRv9rIP+OlEbwz0=
Subject key identifier:   BD:ED:CF:E5:EE:95:75:80:1F:91:6B:E3:F1:42:19:A7:D4:A8:20:22
Certificate issuer:       /CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2
Certificate serial:       7B03C1B281B0E0F02B397D85E7BC28BFDEF6BC40
Authority key identifier: CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/323830333a626139303a3a2f33322d3438203d3e20323732383834.roa
Signing time:             Fri 23 Jan 2026 17:27:09 +0000
ROA not before:           Fri 23 Jan 2026 17:22:09 +0000
ROA not after:            Fri 22 Jan 2027 17:27:09 +0000
asID:                     272884
IP address blocks:        2803:ba90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:03:c1:b2:81:b0:e0:f0:2b:39:7d:85:e7:bc:28:bf:de:f6:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2
        Validity
            Not Before: Jan 23 17:22:09 2026 GMT
            Not After : Jan 22 17:27:09 2027 GMT
        Subject: CN=BDEDCFE5EE9575801F916BE3F14219A7D4A82022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:e5:70:52:eb:fe:d0:3d:1a:ad:58:09:79:
                    3f:78:7a:88:dc:74:e9:88:41:65:f7:eb:86:de:f8:
                    a4:eb:34:7d:a1:49:ae:23:bf:53:0a:4a:01:1c:f6:
                    77:9c:62:28:c2:03:75:ca:59:78:a6:1f:2a:96:68:
                    be:64:3c:66:b9:96:03:82:5c:4b:90:76:5d:cf:97:
                    f8:7f:17:3b:0c:d3:4b:68:ee:25:73:3c:c9:a3:75:
                    bb:c6:76:1d:f3:65:30:e1:5d:14:05:05:b3:40:5c:
                    4e:48:9b:04:db:8c:b3:b2:99:2d:8d:fb:0e:4d:57:
                    2a:14:1f:e8:06:62:00:03:1d:ac:22:96:6a:37:4f:
                    6a:88:bf:80:85:2d:44:1b:9a:0b:6a:be:1b:c9:8f:
                    67:ad:6b:d0:e6:9c:27:b4:b1:bc:5d:ad:0b:98:14:
                    8e:51:f0:aa:d2:a4:7b:df:5d:13:92:b7:e0:ab:10:
                    4b:d2:42:19:e4:49:1a:1b:20:bf:2f:a1:2b:a5:7e:
                    df:d3:50:ac:13:46:93:86:69:de:08:22:b1:c9:4b:
                    14:52:0e:2f:ca:99:a6:ef:57:a2:e3:d5:37:cb:00:
                    f8:22:57:7a:b0:57:7d:31:01:0d:70:47:cf:da:b2:
                    dc:3a:f0:2f:de:35:36:93:11:0f:81:c8:9c:12:d4:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:CF:E5:EE:95:75:80:1F:91:6B:E3:F1:42:19:A7:D4:A8:20:22
            X509v3 Authority Key Identifier:
                keyid:CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/323830333a626139303a3a2f33322d3438203d3e20323732383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba90::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:72:46:c9:24:5d:f1:a7:3b:bc:7d:ef:6f:49:30:71:9b:
         0b:9f:ac:42:30:82:e7:38:db:bb:80:48:18:5d:9f:02:b7:8b:
         50:2a:b5:9c:7c:64:84:f0:c5:6f:f9:e0:aa:f4:3c:ba:61:3b:
         d9:2a:99:a7:78:f7:21:57:28:29:72:6f:d8:49:28:62:aa:32:
         de:c6:b3:dd:2d:ea:02:da:8e:8c:0f:7e:66:47:dd:94:f5:b9:
         4e:6f:fc:85:f0:50:2f:ca:ba:ec:6e:b2:99:6a:76:59:07:ce:
         9e:4c:0e:51:1d:a3:6e:cc:86:38:16:ee:cc:b2:57:58:38:f0:
         c1:8d:a5:6c:93:0a:8d:6f:1c:20:21:72:dd:3a:ad:97:db:c2:
         53:76:db:12:fd:01:f7:97:15:1e:cc:bb:5a:b8:a7:01:96:25:
         63:e5:b6:e8:dd:f3:05:9d:31:6a:79:dd:3f:47:31:24:56:3e:
         4c:b1:05:83:29:5e:fe:87:07:82:89:5d:42:4a:df:e6:1b:af:
         31:33:a7:46:d4:8e:64:a3:6e:0a:99:1e:d0:56:06:3a:54:bc:
         a0:3d:24:80:21:00:cf:6d:89:af:d0:b2:6c:b4:38:f3:76:dc:
         5f:ff:0a:f8:84:49:07:c6:47:3a:80:c3:b1:a1:56:f7:9c:ba:
         57:3a:df:36
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUewPBsoGw4PArOX2F57wov972vEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JCNDVEMzM0ODdBOERCNTQyNjczQzAyMUIxQzJBQ0VC
QTI3MDRDMjAeFw0yNjAxMjMxNzIyMDlaFw0yNzAxMjIxNzI3MDlaMDMxMTAvBgNV
BAMTKEJERURDRkU1RUU5NTc1ODAxRjkxNkJFM0YxNDIxOUE3RDRBODIwMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBg+VwUuv+0D0arVgJeT94eojc
dOmIQWX364be+KTrNH2hSa4jv1MKSgEc9necYijCA3XKWXimHyqWaL5kPGa5lgOC
XEuQdl3Pl/h/FzsM00to7iVzPMmjdbvGdh3zZTDhXRQFBbNAXE5ImwTbjLOymS2N
+w5NVyoUH+gGYgADHawilmo3T2qIv4CFLUQbmgtqvhvJj2eta9DmnCe0sbxdrQuY
FI5R8KrSpHvfXROSt+CrEEvSQhnkSRobIL8voSulft/TUKwTRpOGad4IIrHJSxRS
Di/KmabvV6Lj1TfLAPgiV3qwV30xAQ1wR8/astw68C/eNTaTEQ+ByJwS1AcDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUve3P5e6VdYAfkWvj8UIZp9SoICIwHwYDVR0j
BBgwFoAUy7RdM0h6jbVCZzwCGxwqzronBMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QkY4OTkyNzgwRDc3RjA2QzQwQUI2ODQ3QjM2RkY3QTdD
QzE2NEY3RTQ2MzhBNjc0ODhGQUEzNDAzMEJFRjJBLzAvQ0JCNDVEMzM0ODdBOERC
NTQyNjczQzAyMUIxQzJBQ0VCQTI3MDRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI0NUQzMzQ4N0E4REI1NDI2
NzNDMDIxQjFDMkFDRUJBMjcwNEMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUJGODk5Mjc4MEQ3N0YwNkM0MEFCNjg0N0IzNkZGN0E3Q0MxNjRGN0U0
NjM4QTY3NDg4RkFBMzQwMzBCRUYyQS8wLzMyMzgzMDMzM2E2MjYxMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDupAw
DQYJKoZIhvcNAQELBQADggEBAEtIckbJJF3xpzu8fe9vSTBxmwufrEIwguc427uA
SBhdnwK3i1AqtZx8ZITwxW/54Kr0PLphO9kqmad49yFXKClyb9hJKGKqMt7Gs90t
6gLajowPfmZH3ZT1uU5v/IXwUC/KuuxusplqdlkHzp5MDlEdo27MhjgW7syyV1g4
8MGNpWyTCo1vHCAhct06rZfbwlN22xL9AfeXFR7Mu1q4pwGWJWPltujd8wWdMWp5
3T9HMSRWPkyxBYMpXv6HB4KJXUJK3+YbrzEzp0bUjmSjbgqZHtBWBjpUvKA9JIAh
AM9tia/Qsmy0OPN23F//CviESQfGRzqAw7GhVveculc63zY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:30 2026 by rpki-client