Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/323830333a373633303a3a2f33322d3438203d3e20323734383938.roa
File:                     323830333a373633303a3a2f33322d3438203d3e20323734383938.roa (raw, json)
Hash identifier:          VwQ2pmCPvDifkxeqatdMztYiUV1oLYFnyQxo5/sDEk8=
Subject key identifier:   89:E0:17:75:45:34:7F:3D:99:0E:CD:70:9C:BB:0E:B4:43:66:A3:F0
Certificate issuer:       /CN=3429E4D97CF8A5646696C14C976FF565A6A7576B
Certificate serial:       5C3F7FEFC548C8E0DE68B6C11B1CB87118E00BAC
Authority key identifier: 34:29:E4:D9:7C:F8:A5:64:66:96:C1:4C:97:6F:F5:65:A6:A7:57:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/323830333a373633303a3a2f33322d3438203d3e20323734383938.roa
Signing time:             Tue 21 Apr 2026 16:50:00 +0000
ROA not before:           Tue 21 Apr 2026 16:45:00 +0000
ROA not after:            Tue 20 Apr 2027 16:50:00 +0000
asID:                     274898
IP address blocks:        2803:7630::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 16:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3f:7f:ef:c5:48:c8:e0:de:68:b6:c1:1b:1c:b8:71:18:e0:0b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3429E4D97CF8A5646696C14C976FF565A6A7576B
        Validity
            Not Before: Apr 21 16:45:00 2026 GMT
            Not After : Apr 20 16:50:00 2027 GMT
        Subject: CN=89E0177545347F3D990ECD709CBB0EB44366A3F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:85:9a:6d:40:09:c5:e4:88:48:b4:9c:06:
                    77:9b:d3:12:b1:97:8f:20:7f:40:c7:fd:6a:a4:83:
                    46:76:0e:4d:6d:2f:d4:a0:e0:83:df:60:1f:ac:53:
                    92:4a:41:3a:f1:3f:84:7c:09:40:dc:26:fe:dd:9c:
                    b7:ab:4c:25:2d:2f:7b:b0:8c:52:24:0c:a2:73:9c:
                    74:f7:58:5a:79:16:7b:38:b9:d1:f2:cf:26:95:f5:
                    75:d2:03:ee:4f:c5:a9:3f:59:c8:3f:97:71:94:63:
                    64:c6:8a:94:2c:b9:8e:18:fb:d9:cc:77:4d:35:0f:
                    b6:cf:ae:21:dc:a7:9e:46:ac:38:64:06:60:87:fb:
                    9b:a6:6b:47:a4:70:53:95:e9:c5:b3:5f:e3:43:b4:
                    ef:ed:26:f0:91:bf:6f:05:47:dc:0a:46:1a:d9:10:
                    58:8f:9d:4b:65:e9:bb:37:8d:8b:c6:69:29:cc:ed:
                    22:e4:f7:13:68:38:b3:18:7b:8e:62:1c:ea:97:a1:
                    32:c4:35:ba:15:22:45:22:94:be:31:42:2c:71:7a:
                    c1:af:57:fa:0e:b1:e6:10:19:58:4e:b1:28:48:70:
                    3a:a2:21:2a:92:9e:2c:b7:2b:63:50:f8:f8:e4:f8:
                    35:13:64:53:95:8f:09:02:6d:f4:c0:52:ed:44:26:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:17:75:45:34:7F:3D:99:0E:CD:70:9C:BB:0E:B4:43:66:A3:F0
            X509v3 Authority Key Identifier:
                keyid:34:29:E4:D9:7C:F8:A5:64:66:96:C1:4C:97:6F:F5:65:A6:A7:57:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/323830333a373633303a3a2f33322d3438203d3e20323734383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7630::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:7d:d2:99:50:90:56:a8:c8:8f:fa:33:a3:d8:ff:1e:44:
         0a:2f:4f:f2:c5:bd:be:05:13:45:3a:74:2a:5c:19:46:c9:db:
         89:df:79:4b:6d:7f:fc:95:f9:68:12:24:29:5a:3f:e0:be:27:
         30:77:d8:2f:78:f1:e4:d0:a2:c1:da:6d:43:03:64:d4:cf:0e:
         b7:80:12:86:27:16:f8:fe:cd:4c:ef:19:51:4a:5a:30:28:71:
         ca:9d:f8:ee:6c:4e:22:50:5d:66:c5:8c:ad:f7:bb:f8:76:90:
         6a:25:d7:ab:c5:41:31:df:a2:0a:37:02:3f:8f:67:f4:6f:47:
         41:8f:77:12:8c:ab:83:d3:d9:2d:7d:49:9a:e8:ef:25:8c:41:
         4d:17:79:04:3c:d6:fc:38:d6:9d:2b:c0:dc:7e:5b:aa:56:ae:
         04:16:43:6f:12:a5:3f:41:ae:5f:fe:1a:e7:b3:48:d7:16:a1:
         f7:33:98:7f:69:90:e0:0e:b7:bf:b5:ab:aa:09:47:3b:47:f8:
         d8:ac:de:32:f4:3b:1a:f3:6d:07:47:41:fd:d0:f6:cc:e3:60:
         1e:e7:97:c8:64:b9:45:5f:78:f1:10:77:01:20:78:48:0c:3a:
         e7:8f:34:0a:80:3a:72:5f:c3:0c:3c:4a:fd:bd:e0:79:78:5f:
         d7:15:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:30:48 2026 by rpki-client