Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3CF36E5FC3A3BD675BB8D0C38BD011E49C20D001B6B30459D69A579B9E43905F/0/323830333a383939303a3a2f33322d3438203d3e20323732393433.roa
File:                     323830333a383939303a3a2f33322d3438203d3e20323732393433.roa (raw, json)
Hash identifier:          T8YLKLYb8YUnTlGLjGDPrh4mqqg3UPshoLHtkhaOiI4=
Subject key identifier:   2B:53:5C:D2:05:40:3B:52:CF:4A:BD:E8:0E:EE:5C:B7:E0:0B:FE:04
Certificate issuer:       /CN=E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03
Certificate serial:       6D02C51687C07E5146673B3D348C935FC1F375F5
Authority key identifier: E0:C6:9F:F2:58:9D:A6:9E:49:20:DD:03:D1:F1:E0:4A:DF:7F:3F:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CF36E5FC3A3BD675BB8D0C38BD011E49C20D001B6B30459D69A579B9E43905F/0/323830333a383939303a3a2f33322d3438203d3e20323732393433.roa
Signing time:             Wed 05 Aug 2026 19:55:00 +0000
ROA not before:           Wed 05 Aug 2026 19:50:00 +0000
ROA not after:            Wed 04 Aug 2027 19:55:00 +0000
asID:                     272943
IP address blocks:        2803:8990::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CF36E5FC3A3BD675BB8D0C38BD011E49C20D001B6B30459D69A579B9E43905F/0/E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CF36E5FC3A3BD675BB8D0C38BD011E49C20D001B6B30459D69A579B9E43905F/0/E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Sep 2026 15:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:02:c5:16:87:c0:7e:51:46:67:3b:3d:34:8c:93:5f:c1:f3:75:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03
        Validity
            Not Before: Aug  5 19:50:00 2026 GMT
            Not After : Aug  4 19:55:00 2027 GMT
        Subject: CN=2B535CD205403B52CF4ABDE80EEE5CB7E00BFE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0c:7f:7d:f8:82:a3:68:a0:a5:3d:83:7e:0c:
                    7b:65:e2:8a:16:6e:78:74:b6:62:65:14:2f:5a:29:
                    df:a3:55:d6:25:5c:57:7a:e6:b3:fb:65:ac:40:83:
                    10:d1:bc:24:02:41:77:aa:60:04:ae:0e:9a:11:f2:
                    9d:d8:b6:20:8e:57:bb:43:77:a8:1f:89:2c:c4:51:
                    39:a2:2a:16:29:74:18:55:d0:00:98:5a:c3:11:79:
                    37:d4:f5:e5:de:bf:b9:4e:de:80:39:c7:6c:72:a5:
                    8c:c7:77:6d:23:1c:d6:92:8f:29:c3:54:14:92:f2:
                    01:f2:e7:c0:f3:8f:a7:22:6a:5b:3a:26:5b:30:e9:
                    5a:5a:7a:bc:4d:39:77:46:83:fa:d4:d0:36:97:b9:
                    aa:17:11:0f:61:17:ca:26:0b:aa:9c:7c:61:14:7b:
                    23:09:58:20:b3:e1:48:c3:c4:20:ee:4f:13:3b:77:
                    48:63:4f:f6:b9:9c:fb:90:bf:fb:59:18:25:96:9b:
                    68:93:7b:1e:4d:d5:2a:08:eb:8d:8d:1a:2a:ca:08:
                    f7:c9:82:71:77:d7:be:9e:fa:84:3a:5e:84:94:fb:
                    45:0d:44:69:14:d0:91:ca:ed:3a:d3:91:8b:43:6f:
                    5d:75:82:52:ea:9a:f8:2a:52:76:af:b1:2d:ef:91:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:5C:D2:05:40:3B:52:CF:4A:BD:E8:0E:EE:5C:B7:E0:0B:FE:04
            X509v3 Authority Key Identifier:
                keyid:E0:C6:9F:F2:58:9D:A6:9E:49:20:DD:03:D1:F1:E0:4A:DF:7F:3F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CF36E5FC3A3BD675BB8D0C38BD011E49C20D001B6B30459D69A579B9E43905F/0/E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0C69FF2589DA69E4920DD03D1F1E04ADF7F3F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CF36E5FC3A3BD675BB8D0C38BD011E49C20D001B6B30459D69A579B9E43905F/0/323830333a383939303a3a2f33322d3438203d3e20323732393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8990::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:93:31:72:f9:e2:d4:6b:69:d2:ff:ee:c3:85:18:a0:c4:c7:
         c4:cd:30:4d:84:3e:6b:81:67:d5:69:bb:42:07:6e:90:06:dc:
         84:6f:53:ac:57:11:c2:fc:0f:d1:22:77:6f:7d:b4:be:53:23:
         e7:4a:e2:26:2b:70:8a:fe:c6:2f:bb:2b:43:d6:5a:55:27:57:
         92:8f:42:73:d8:d7:59:c6:d0:4c:4d:1f:44:5d:31:8f:63:fb:
         01:08:6e:db:a4:d5:4d:33:86:97:27:96:5f:2c:35:b5:ea:66:
         bd:15:fc:55:7e:fe:94:e7:17:c7:da:f2:8e:08:17:f0:4e:f1:
         f2:b6:fb:81:16:fd:8a:97:f9:44:d7:5d:b5:65:88:69:9f:08:
         4e:29:f4:21:44:a3:2c:42:7c:fa:6d:5c:86:b3:b6:f4:7b:5e:
         82:14:05:ce:3c:b9:06:0b:48:a9:dd:e9:03:a7:55:9a:e6:44:
         3c:4a:a3:59:b0:eb:e9:2f:51:ee:9a:b5:6c:33:fa:b5:6c:68:
         f1:e7:81:0f:4f:1e:34:30:1f:75:d5:93:6d:f3:8a:a5:b8:f6:
         59:d3:04:ae:72:94:45:8d:14:e4:a6:a1:e3:e2:79:49:b8:92:
         cf:7a:2c:00:20:fd:85:44:95:70:48:71:fe:62:8e:13:dd:72:
         46:03:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:48:25 2026 by rpki-client