Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          77TbUaJ7gpnIoLeQcTYhePzfDiU6dO53UQUZwpIqXCA=
Subject key identifier:   3F:FE:C0:CA:DC:9A:A9:FA:16:F2:62:A2:B6:E7:EF:43:45:B3:04:3F
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       35A0313C95F08D194E997940BF49FC0891FCB34E
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 31 Mar 2026 21:37:07 +0000
ROA not before:           Tue 31 Mar 2026 21:32:07 +0000
ROA not after:            Tue 30 Mar 2027 21:37:07 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a0:31:3c:95:f0:8d:19:4e:99:79:40:bf:49:fc:08:91:fc:b3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar 31 21:32:07 2026 GMT
            Not After : Mar 30 21:37:07 2027 GMT
        Subject: CN=3FFEC0CADC9AA9FA16F262A2B6E7EF4345B3043F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:97:7b:40:39:0a:fe:8d:09:ea:ad:4b:04:
                    d7:c4:83:80:83:b1:f6:7c:d6:a8:df:19:85:dc:0f:
                    a9:d1:1b:32:ee:38:a9:49:ae:f8:03:89:a1:f7:fb:
                    a5:1c:6d:92:db:e2:e7:3e:6c:01:66:24:c2:2b:81:
                    61:71:6d:d1:04:6e:f3:82:da:fc:02:86:3e:41:af:
                    4f:52:9c:7a:32:07:8a:9a:70:ea:31:f0:ca:b1:96:
                    62:a8:b1:83:88:05:89:04:12:19:6d:24:c8:bf:80:
                    a4:14:0f:df:a9:bb:b3:35:18:76:39:34:85:9c:06:
                    87:9b:c1:53:39:ef:58:c5:2a:7d:5d:98:d8:81:91:
                    28:94:7f:fa:7a:72:d3:62:5d:76:2a:29:6b:4f:66:
                    b7:c7:8c:08:eb:8a:13:b4:e0:20:35:ca:fc:d1:10:
                    0a:81:58:07:d4:78:f7:82:34:2c:61:86:d8:96:4c:
                    86:78:66:9f:bd:89:28:d3:f0:75:51:34:f1:64:bf:
                    37:c9:67:69:01:19:bc:8c:a7:99:e7:93:72:ba:4f:
                    8d:2e:8d:6c:36:f8:93:93:c2:e3:bc:8e:9c:92:b7:
                    a0:44:73:20:2f:93:43:cf:ae:af:1f:d6:35:31:cb:
                    fa:74:44:78:a9:7d:a1:b5:d3:29:6c:e1:9d:6d:5a:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FE:C0:CA:DC:9A:A9:FA:16:F2:62:A2:B6:E7:EF:43:45:B3:04:3F
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:23:73:4c:00:28:c3:75:18:12:0b:f0:25:d4:26:04:96:3e:
         49:39:7e:94:af:e1:29:f2:56:13:34:da:eb:31:62:65:52:f6:
         9a:fe:c5:22:a0:31:b1:a0:d7:ca:a9:fe:71:f3:62:6c:e3:bb:
         a5:7f:e8:3a:a1:fb:a6:6f:ad:f9:60:e0:a9:f2:92:4d:59:ef:
         32:f6:23:3b:cb:2c:0c:9a:c1:00:cf:8e:fd:c9:b9:54:73:e7:
         3b:00:7f:e4:11:c6:9c:90:e4:16:72:dd:16:3d:c1:32:fc:74:
         59:e0:19:d4:d2:4f:9b:ee:8d:7a:06:6b:4e:75:4e:ba:f3:74:
         12:6e:b9:33:97:56:97:fa:2f:ab:95:1c:61:5e:4c:67:e8:36:
         b8:44:61:60:04:4e:93:43:b5:f4:f7:47:25:df:3c:fd:4b:3f:
         51:c8:a5:e0:8b:2d:74:ee:7b:dd:cf:69:f7:89:49:5d:79:f4:
         af:a6:51:74:3b:c6:fd:11:51:08:e5:4f:5c:ec:c9:ef:6c:48:
         c0:d5:67:51:bd:48:b5:73:dc:0b:da:4f:c3:87:aa:17:83:bd:
         69:d2:62:89:c9:a0:61:f5:13:88:82:e3:e2:11:07:7d:e2:79:
         75:44:3a:37:b5:dc:a0:e9:24:31:1b:87:d1:e2:a0:c2:ad:9f:
         1f:71:1a:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 8 06:18:11 2026 by rpki-client