Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/323830333a363035303a3a2f33322d3333203d3e20323733303935.roa
File:                     323830333a363035303a3a2f33322d3333203d3e20323733303935.roa (raw, json)
Hash identifier:          xt5mGKGpRnRgyFEogjC1XVP9OciXql3de45rVgyn1ok=
Subject key identifier:   37:0E:75:B8:C6:D0:93:69:89:F2:A7:00:2E:BC:29:36:C0:98:96:37
Certificate issuer:       /CN=5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D
Certificate serial:       1EC78D2D074F505400E31AB019EE7F5AB42EC142
Authority key identifier: 5D:C4:01:60:9A:3F:73:61:47:EA:58:DD:C7:A8:E7:B2:1A:0F:8A:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/323830333a363035303a3a2f33322d3333203d3e20323733303935.roa
Signing time:             Sat 07 Feb 2026 18:40:00 +0000
ROA not before:           Sat 07 Feb 2026 18:35:00 +0000
ROA not after:            Sat 06 Feb 2027 18:40:00 +0000
asID:                     273095
IP address blocks:        2803:6050::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 02:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c7:8d:2d:07:4f:50:54:00:e3:1a:b0:19:ee:7f:5a:b4:2e:c1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D
        Validity
            Not Before: Feb  7 18:35:00 2026 GMT
            Not After : Feb  6 18:40:00 2027 GMT
        Subject: CN=370E75B8C6D0936989F2A7002EBC2936C0989637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:75:87:0e:27:c7:48:91:11:0c:cf:a6:4c:
                    74:be:4d:c3:ab:f6:96:d1:9c:c5:8e:6b:71:a8:6c:
                    e0:60:cf:e8:2a:e5:1d:3c:64:74:77:e3:e6:5d:53:
                    99:2b:02:0e:5d:f3:97:fd:d0:7b:9c:f7:25:37:e0:
                    af:a0:d8:a8:01:c1:02:48:ea:8f:f1:e0:a5:2f:3e:
                    58:a9:90:83:77:1d:54:00:e8:8d:28:03:c5:32:2a:
                    7f:ef:eb:0a:cc:c4:bd:48:02:65:dc:cf:df:39:ab:
                    a1:13:e5:63:2d:e8:f4:d3:af:67:e8:b1:cc:7d:54:
                    0f:0a:7e:dd:a0:71:72:b5:9e:f5:0c:22:c6:35:a5:
                    2f:51:7e:ac:83:19:ae:43:f5:9f:72:0f:d9:50:3f:
                    71:99:49:f1:9d:ee:76:e2:9c:8f:37:36:8c:1c:8b:
                    97:b2:06:93:fd:3e:2d:81:e2:64:f8:ee:fc:05:f8:
                    d8:25:2f:b6:df:6f:62:86:f7:3e:cb:b3:c2:ef:c4:
                    3d:c1:69:a5:2d:bb:41:57:ba:ee:85:3c:70:7f:43:
                    2a:58:2e:ba:e5:62:d6:08:ce:63:bf:c2:27:9e:b5:
                    d1:3e:c0:8a:c0:bf:02:ab:18:dd:a1:0f:ac:17:02:
                    51:f5:f2:33:99:9d:c9:ca:e0:a8:8e:08:36:50:2a:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0E:75:B8:C6:D0:93:69:89:F2:A7:00:2E:BC:29:36:C0:98:96:37
            X509v3 Authority Key Identifier:
                keyid:5D:C4:01:60:9A:3F:73:61:47:EA:58:DD:C7:A8:E7:B2:1A:0F:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/323830333a363035303a3a2f33322d3333203d3e20323733303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6050::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:04:5d:a0:d0:f9:0f:8a:b5:1f:71:c3:a5:39:64:f2:d8:9e:
         f7:07:73:48:1d:e4:ef:3e:07:57:d3:91:21:76:30:ae:2d:98:
         97:43:91:7f:dc:03:c5:38:11:b9:de:80:23:9a:18:48:3f:95:
         a3:41:78:08:b1:11:80:fb:57:70:a8:c9:bc:92:06:a3:65:2e:
         b8:59:78:6a:30:af:68:4c:56:f8:b7:17:0e:09:df:d0:ae:90:
         7a:03:8e:c9:98:f4:1f:ed:71:0a:f3:03:b9:9e:02:53:c7:0c:
         dd:3d:68:47:0c:bf:b3:49:90:08:ea:79:8c:a9:ba:49:ed:d3:
         45:ac:d9:a6:94:27:1d:14:88:9a:e8:14:67:3b:e4:78:ad:24:
         4c:bd:d2:63:ac:23:83:d5:74:b6:8a:a9:07:58:64:f4:2d:6d:
         b2:97:02:c4:3e:ba:39:be:7d:97:7d:92:b2:0c:ed:6f:e8:29:
         10:67:71:2d:29:9b:ab:33:30:de:d4:a1:c1:ee:9c:74:1e:d9:
         65:47:0c:f0:62:96:f3:40:0c:7d:02:40:9f:94:54:dc:1c:c9:
         16:ed:aa:cc:c9:1e:e4:0f:04:4f:f4:5d:5f:4e:77:7a:c2:91:
         2d:c0:6e:c4:d3:02:9e:07:f0:72:8b:d0:10:37:40:26:e8:f4:
         1a:97:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:17:25 2026 by rpki-client