Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/323830333a333736303a3a2f33322d3332203d3e20323639383238.roa
File:                     323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (raw, json)
Hash identifier:          RifkABZsLCmRbyVKtsTZJib9sHbG7NxVmTf/yWidQbI=
Subject key identifier:   DC:06:02:32:94:BA:1F:73:6B:1D:06:20:7D:A7:A5:D3:D9:74:01:64
Certificate issuer:       /CN=2AA949233251849B5F79085FA81406E588FF36E5
Certificate serial:       3E2A465FB47A7E0A612EA65EE02270C746BBEF36
Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/323830333a333736303a3a2f33322d3332203d3e20323639383238.roa
Signing time:             Tue 06 Jan 2026 19:02:10 +0000
ROA not before:           Tue 06 Jan 2026 18:57:10 +0000
ROA not after:            Tue 05 Jan 2027 19:02:10 +0000
asID:                     269828
IP address blocks:        2803:3760::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:46:5f:b4:7a:7e:0a:61:2e:a6:5e:e0:22:70:c7:46:bb:ef:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5
        Validity
            Not Before: Jan  6 18:57:10 2026 GMT
            Not After : Jan  5 19:02:10 2027 GMT
        Subject: CN=DC06023294BA1F736B1D06207DA7A5D3D9740164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:37:d7:8a:29:36:2e:90:48:4c:46:52:2d:
                    76:c4:2e:3c:c0:36:8a:28:4b:fe:fc:e7:1d:bb:1f:
                    5b:68:6b:9e:34:16:71:ec:40:fb:0d:7e:cc:da:5b:
                    9d:7b:1d:fc:84:f8:17:2a:2e:32:d2:f9:dd:f0:a5:
                    f0:6d:da:52:11:69:de:e6:e6:8b:2e:23:98:14:d7:
                    49:e8:bd:b3:80:ad:52:89:07:f0:31:11:6a:db:48:
                    a2:d9:fd:ef:d5:0f:e3:de:7e:0e:54:21:1e:f3:c5:
                    b9:a5:9c:5b:76:ec:fd:61:e4:ef:f6:97:57:d8:54:
                    73:05:00:83:69:35:0f:a8:0f:58:15:f6:e6:6d:b8:
                    d7:0e:88:e5:70:e3:68:69:bf:4d:c8:91:eb:09:9b:
                    da:aa:f1:d1:6f:7a:aa:e1:d5:a3:c9:aa:2f:13:9f:
                    df:2b:7b:33:fd:9d:26:7f:ee:81:26:a3:2c:5b:15:
                    28:d8:d3:d5:9e:d8:71:4f:9d:3b:a1:0b:77:af:1f:
                    2f:5d:3b:e4:28:d1:ba:05:b2:b1:c1:a8:ea:f4:3e:
                    a4:70:28:ca:7b:af:ca:28:39:91:f3:47:a6:1f:fa:
                    24:fe:d2:f0:2a:ce:36:9c:23:4b:71:5e:df:c3:33:
                    c5:4f:c5:1c:7f:8d:0a:43:5b:0b:92:05:13:c6:b6:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:06:02:32:94:BA:1F:73:6B:1D:06:20:7D:A7:A5:D3:D9:74:01:64
            X509v3 Authority Key Identifier:
                keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/323830333a333736303a3a2f33322d3332203d3e20323639383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3760::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:bd:70:32:83:51:13:27:75:33:72:9b:77:e1:93:de:e9:
         e1:ed:dc:7a:ab:0e:db:d9:b7:ef:0d:9c:79:59:9b:0e:6e:32:
         c6:a8:17:3b:66:3d:61:d1:2b:19:9e:7e:c7:86:31:a8:66:2b:
         22:79:ce:ed:1c:0f:fe:95:3d:aa:ea:0a:39:e6:ef:42:0a:28:
         0a:83:a1:09:c3:8e:21:a6:0d:8f:f9:3f:33:7f:59:00:2d:8d:
         b9:74:2f:e3:cd:c1:9a:3f:bf:4e:de:31:69:70:75:d1:d8:42:
         ca:cf:12:f6:d4:e5:a9:81:5f:e7:4b:a7:b4:b6:84:6c:97:1a:
         92:1b:7c:b0:24:7b:62:d9:fb:71:31:5a:66:5c:53:0f:25:e5:
         04:85:25:fa:ad:7d:a8:7b:2d:92:95:34:27:72:d8:88:ae:9d:
         96:ef:f4:4f:57:81:02:57:e1:60:17:d1:a0:af:04:a0:cf:8d:
         f9:b8:bd:89:51:2b:2b:9e:62:fa:5c:30:fd:75:50:5c:aa:f6:
         73:56:a8:b2:3c:e8:3a:b5:31:9f:7f:30:84:dd:07:ed:35:4c:
         9e:c5:e3:31:f9:1d:ce:de:9c:e6:db:51:24:99:09:c6:73:ef:
         c2:10:11:71:6c:23:db:3b:f6:fd:f0:df:98:ea:83:2f:60:65:
         db:ac:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:08:45 2026 by rpki-client