Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a333030303a3a2f33362d3336203d3e20323635383535.roa
File:                     323830333a663864303a333030303a3a2f33362d3336203d3e20323635383535.roa (raw, json)
Hash identifier:          Xrkfaznvndyieu7R3eWzfspKmyomvFlQ7CdBwFih5xk=
Subject key identifier:   5D:A0:4E:4E:A4:05:65:48:B3:D7:C8:33:3C:6F:86:AC:8A:6A:6B:D2
Certificate issuer:       /CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5
Certificate serial:       0391900338AD7720A9ADAF49283BC45AF95CF497
Authority key identifier: 44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a333030303a3a2f33362d3336203d3e20323635383535.roa
Signing time:             Tue 14 Jul 2026 15:52:38 +0000
ROA not before:           Tue 14 Jul 2026 15:47:38 +0000
ROA not after:            Tue 13 Jul 2027 15:52:38 +0000
asID:                     265855
IP address blocks:        2803:f8d0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 09:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:91:90:03:38:ad:77:20:a9:ad:af:49:28:3b:c4:5a:f9:5c:f4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5
        Validity
            Not Before: Jul 14 15:47:38 2026 GMT
            Not After : Jul 13 15:52:38 2027 GMT
        Subject: CN=5DA04E4EA4056548B3D7C8333C6F86AC8A6A6BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:96:b9:07:e0:8c:83:bf:56:ed:9a:fd:02:
                    52:58:f3:31:8b:75:d6:a8:c7:61:54:03:35:2e:a6:
                    d5:4b:6f:dd:56:5d:9a:40:55:e2:aa:a3:01:9e:06:
                    1e:1b:dd:71:49:7c:28:d6:43:c6:10:d2:5f:8f:11:
                    fc:62:1e:93:a1:ae:a4:fb:a5:d8:66:7a:a7:0f:9f:
                    49:2d:57:36:b2:fa:7c:23:16:d3:fc:f8:5e:6d:d1:
                    67:3d:5c:a1:63:94:4e:87:13:e9:73:65:bf:c1:70:
                    fc:e5:d5:32:a2:e0:23:fc:02:24:9a:84:6b:c7:a1:
                    2a:d1:cc:36:f4:ca:de:d2:2e:d4:e9:1b:ab:00:9a:
                    58:3f:11:7b:bc:ae:01:3d:05:fb:c7:ff:ad:7b:75:
                    8e:e9:ad:8d:cf:f6:a1:6c:6a:7d:17:4a:b7:31:0a:
                    81:d4:48:2b:03:5e:dd:d0:9d:80:1f:ed:73:c6:30:
                    03:88:d7:a5:e5:b2:8a:ee:87:9b:b7:1f:3a:66:48:
                    1f:b7:66:e2:6d:97:53:18:8c:1a:5d:eb:43:4c:0f:
                    6c:65:54:15:c6:47:ad:7c:64:6c:0c:83:30:05:4b:
                    4e:1c:8e:56:71:af:e2:6c:67:6a:11:60:9e:24:5d:
                    f7:4b:0e:21:af:28:28:7f:68:62:3b:98:36:1f:ec:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:4E:4E:A4:05:65:48:B3:D7:C8:33:3C:6F:86:AC:8A:6A:6B:D2
            X509v3 Authority Key Identifier:
                keyid:44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/323830333a663864303a333030303a3a2f33362d3336203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f8d0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:0a:17:fe:d4:16:22:97:7d:fd:89:58:96:34:1b:79:3c:d1:
         28:9e:ad:f0:39:15:1c:9b:04:39:2b:95:59:68:0f:be:79:4b:
         2a:e3:1f:49:50:6f:86:be:d4:be:6d:30:c6:fd:21:ad:44:7c:
         f2:4b:43:61:6e:3c:60:5f:37:a6:8d:48:d7:81:a4:b3:48:13:
         21:ed:8c:80:0a:03:b1:c8:ff:63:9f:b3:71:22:f4:00:e3:88:
         a1:35:9b:40:cd:2a:fb:f9:12:29:38:e9:92:e3:36:a8:f9:12:
         ab:aa:32:0b:b3:df:2a:ea:b9:19:56:5d:dd:dd:c8:b0:1b:d2:
         24:45:95:12:7b:9b:79:4b:db:ce:13:27:c8:07:7b:9f:83:cd:
         63:94:36:52:eb:80:f0:55:b4:f8:78:2c:ec:5b:00:1c:0c:be:
         79:9e:f8:55:02:3d:2c:13:2f:11:37:1c:a4:32:20:85:46:03:
         d4:42:de:eb:4f:91:76:fa:c3:84:44:49:82:16:55:01:57:36:
         ab:cf:5f:c8:d9:8b:86:9f:3f:3f:cd:52:11:76:90:1f:3b:72:
         27:c6:05:be:05:95:09:8d:0e:2c:53:cf:f8:e3:3c:95:15:16:
         f5:3f:0f:e3:af:36:ef:f2:8f:db:7f:16:66:a9:a3:b2:a2:1e:
         5f:ce:c2:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 22 07:50:01 2026 by rpki-client