Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a343030303a3a2f33342d3334203d3e20323732303235.roa
File:                     323830333a613531303a343030303a3a2f33342d3334203d3e20323732303235.roa (raw, json)
Hash identifier:          bRy5Od/bAbwU+6DBwP7VXLUJDblBGP/mfz2uUiC4q4c=
Subject key identifier:   CA:6B:CA:34:FD:44:D0:DC:89:6B:59:64:F4:DE:50:B9:39:F5:D5:CC
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       1B62C681F124AF3DE85F36594D3EC578314ADE96
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a343030303a3a2f33342d3334203d3e20323732303235.roa
Signing time:             Mon 29 Jun 2026 13:55:02 +0000
ROA not before:           Mon 29 Jun 2026 13:50:02 +0000
ROA not after:            Mon 28 Jun 2027 13:55:02 +0000
asID:                     272025
IP address blocks:        2803:a510:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:c6:81:f1:24:af:3d:e8:5f:36:59:4d:3e:c5:78:31:4a:de:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Jun 29 13:50:02 2026 GMT
            Not After : Jun 28 13:55:02 2027 GMT
        Subject: CN=CA6BCA34FD44D0DC896B5964F4DE50B939F5D5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:9f:99:17:d7:7b:2c:cc:bc:84:be:40:f5:
                    40:49:15:f9:b9:9a:38:a3:7d:38:d8:9e:2f:48:08:
                    0c:d7:ea:f1:17:52:57:bb:2c:b2:81:3d:16:88:a3:
                    73:ff:9d:66:bb:c5:0e:58:18:1e:27:b8:d3:b9:23:
                    b2:ca:61:bd:51:ec:48:85:39:f8:b5:47:a8:d4:7e:
                    2c:ea:7c:9b:f1:f9:ee:45:48:b6:4e:da:bd:57:d1:
                    4f:b9:46:4d:fc:cd:df:de:eb:dd:16:ad:e3:c5:0d:
                    99:e5:fe:4b:5b:a4:6a:7a:b5:f5:c3:80:01:14:28:
                    f4:04:d2:9c:9e:bb:a8:d4:f6:80:1b:9a:2e:a7:d3:
                    cd:2e:0a:b1:e3:7e:20:aa:d8:b6:b6:9e:9b:1f:83:
                    87:69:7d:72:72:0e:c7:08:61:bc:01:37:3c:bf:81:
                    c5:e7:11:30:40:d8:fe:19:aa:fe:c2:6d:c5:05:dd:
                    68:0a:c4:50:a3:ec:f1:28:93:4b:34:0f:5a:d6:c6:
                    3f:c7:6c:27:b9:b0:e3:29:67:2a:94:7b:de:e5:36:
                    2a:f8:00:4f:67:c6:4a:14:85:59:60:73:4a:5c:7c:
                    60:3a:85:1a:71:4e:f5:b8:cf:c0:92:4e:48:be:31:
                    b5:a9:b6:6e:1d:90:b3:21:a5:2c:78:88:19:70:c5:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:CA:34:FD:44:D0:DC:89:6B:59:64:F4:DE:50:B9:39:F5:D5:CC
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a343030303a3a2f33342d3334203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a510:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:ad:a6:b7:77:7c:f0:e1:ef:6c:37:d0:7e:62:25:4a:2a:d0:
         33:e2:85:e2:9b:db:62:b9:2d:6e:a5:d1:eb:d4:05:c9:76:4e:
         6f:b9:86:d3:6e:90:9d:8c:e1:08:1a:07:54:9f:12:8f:a1:f6:
         2e:47:99:a2:dd:8e:82:2e:9f:01:2a:9d:c5:97:f8:e5:ba:c3:
         65:47:33:d3:05:2e:e5:56:10:12:be:75:66:e2:a5:7d:f0:15:
         e8:5e:3d:83:8c:e6:18:bb:b5:c1:ae:d3:49:d3:01:40:62:45:
         ed:1a:eb:e2:71:b9:cd:83:22:c3:19:e2:2f:75:48:e0:23:5b:
         82:c1:70:f1:a6:cc:c1:2d:38:65:b1:de:70:21:67:5c:61:7c:
         24:69:79:f1:87:9f:a1:1c:1c:fc:13:7b:37:8c:c6:77:e0:a7:
         39:a7:df:7e:80:f9:1b:03:83:7d:76:10:4d:83:e2:7e:fb:95:
         eb:eb:8c:15:21:13:8a:1a:74:9c:da:f1:88:02:c2:4a:af:cb:
         ca:06:5a:de:27:43:dc:74:ac:5d:44:d6:94:b6:a5:63:8e:81:
         08:d1:d1:25:22:09:07:66:c7:94:5b:a0:ad:75:d6:fb:3b:c4:
         23:f7:b8:7d:e5:e3:a6:4b:86:f9:2b:ea:80:3a:fb:63:cb:c9:
         95:c5:49:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 6 09:49:57 2026 by rpki-client