Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3438203d3e20323634373733.roa
File:                     323830333a663063303a3a2f33322d3438203d3e20323634373733.roa (raw, json)
Hash identifier:          D8WNZtGfnwkBQlZG+VoN5Vu2kYm1aFd+SXPnrPskAa8=
Subject key identifier:   E7:09:06:50:7D:D2:50:23:97:1D:24:13:83:05:0E:69:29:65:49:A0
Certificate issuer:       /CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
Certificate serial:       3B93269D52D3BF6E5F30A0BEB1C82E4FF49E792E
Authority key identifier: 68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3438203d3e20323634373733.roa
Signing time:             Wed 27 May 2026 22:44:26 +0000
ROA not before:           Wed 27 May 2026 22:39:26 +0000
ROA not after:            Wed 26 May 2027 22:44:26 +0000
asID:                     264773
IP address blocks:        2803:f0c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:93:26:9d:52:d3:bf:6e:5f:30:a0:be:b1:c8:2e:4f:f4:9e:79:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
        Validity
            Not Before: May 27 22:39:26 2026 GMT
            Not After : May 26 22:44:26 2027 GMT
        Subject: CN=E70906507DD25023971D241383050E69296549A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:ea:bb:f9:8e:0c:61:93:0d:9d:d4:43:3f:
                    17:a5:95:34:2a:86:52:fd:95:b5:d5:6f:bb:2b:12:
                    68:7c:66:6c:4f:1a:66:5b:b3:61:19:5a:55:ea:4c:
                    4a:1a:17:d2:1c:a0:70:26:e1:26:e5:0c:7c:49:5f:
                    ed:20:42:dc:3e:49:98:89:ab:58:8e:75:f1:48:d8:
                    42:ba:f9:31:6d:35:97:e6:09:cb:01:d4:74:a0:89:
                    4d:db:1f:4b:c8:36:4e:e7:3f:19:19:4e:41:2b:95:
                    c0:ec:0f:05:58:42:c1:59:d6:c0:0e:63:f6:66:b6:
                    7d:ea:7a:3b:e3:9e:40:58:b8:5c:92:37:dd:25:98:
                    45:18:73:f5:3d:50:28:47:a0:6c:8d:e5:5d:34:11:
                    30:98:ac:74:60:d0:54:79:62:f8:9e:95:24:7f:9a:
                    a9:cd:3f:2c:c5:8f:53:e5:24:f0:3f:a5:af:36:4d:
                    bf:82:8f:23:59:18:b0:2a:01:64:10:63:a8:7f:c6:
                    03:7e:9a:95:68:3d:33:0d:c8:d8:5c:72:84:29:17:
                    fa:00:76:55:70:09:95:a8:4c:7d:fc:94:c4:e9:05:
                    6f:21:f0:4e:8f:26:11:65:29:f1:ad:04:7a:64:d5:
                    db:f1:2c:05:7c:cb:85:83:d3:a4:56:d1:d5:54:11:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:09:06:50:7D:D2:50:23:97:1D:24:13:83:05:0E:69:29:65:49:A0
            X509v3 Authority Key Identifier:
                keyid:68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3438203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:a8:26:cc:38:94:ec:13:c5:27:82:36:ff:40:6b:d2:69:f9:
         fc:ab:90:21:56:a5:35:58:a6:0d:63:42:c3:f9:fd:b0:7b:0e:
         c5:47:fa:86:9d:a2:a3:bc:c3:69:d0:74:a5:af:26:fe:08:7f:
         5a:da:30:25:e3:45:4c:e9:89:0c:8a:11:0c:04:73:d6:a9:f0:
         3f:6f:34:1e:16:35:50:43:04:55:5a:ac:26:b6:9a:32:1d:ca:
         30:f5:fd:81:7c:91:ba:f7:47:e1:03:d9:b0:95:54:31:00:81:
         ac:12:7d:0b:3d:72:de:33:a5:c2:3b:ce:f2:60:76:c2:1b:9b:
         0f:06:26:1f:79:1e:19:df:64:5b:d9:04:62:2b:5a:17:fc:fa:
         ae:76:78:cd:00:71:21:4f:c7:6c:a2:1c:fa:df:1e:80:7f:8e:
         48:7b:b4:74:21:a6:a0:7b:bf:bb:a5:f4:fe:64:b9:10:9c:54:
         5b:fe:b3:07:06:2a:e7:8d:ca:0b:74:ed:ff:eb:9f:1b:a7:6e:
         1e:89:bd:cf:3b:c1:8d:14:8f:00:89:d4:36:48:b9:a9:ae:a5:
         11:75:30:e1:33:98:db:a7:35:18:cd:cb:b0:cf:8a:c7:3e:f5:
         79:df:b0:95:ae:b5:38:59:d5:c0:b1:b8:8d:09:67:3d:88:74:
         8e:2a:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:26:04 2026 by rpki-client