Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49CDCBFD59D3ED1252589BCC22C046E54866690F362227482409BAD5D07106C8/0/323830333a333135303a3a2f33322d3332203d3e20323733383237.roa
File:                     323830333a333135303a3a2f33322d3332203d3e20323733383237.roa (raw, json)
Hash identifier:          jwDDHX4fVDVFVMDRo2eehZnCGKFt9xDfs9oFT8gmQd4=
Subject key identifier:   FE:89:25:09:3E:2A:41:26:B8:D9:A2:55:EA:F5:F1:1E:C2:E7:4F:1B
Certificate issuer:       /CN=87FCACD316F0A5714B241F9BED96E35BBB38E3CF
Certificate serial:       52540F320EBE3642143C06074CE5BD3996CD953E
Authority key identifier: 87:FC:AC:D3:16:F0:A5:71:4B:24:1F:9B:ED:96:E3:5B:BB:38:E3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87FCACD316F0A5714B241F9BED96E35BBB38E3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49CDCBFD59D3ED1252589BCC22C046E54866690F362227482409BAD5D07106C8/0/323830333a333135303a3a2f33322d3332203d3e20323733383237.roa
Signing time:             Wed 22 Apr 2026 14:39:41 +0000
ROA not before:           Wed 22 Apr 2026 14:34:41 +0000
ROA not after:            Wed 21 Apr 2027 14:39:41 +0000
asID:                     273827
IP address blocks:        2803:3150::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49CDCBFD59D3ED1252589BCC22C046E54866690F362227482409BAD5D07106C8/0/87FCACD316F0A5714B241F9BED96E35BBB38E3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49CDCBFD59D3ED1252589BCC22C046E54866690F362227482409BAD5D07106C8/0/87FCACD316F0A5714B241F9BED96E35BBB38E3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87FCACD316F0A5714B241F9BED96E35BBB38E3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 21:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:54:0f:32:0e:be:36:42:14:3c:06:07:4c:e5:bd:39:96:cd:95:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87FCACD316F0A5714B241F9BED96E35BBB38E3CF
        Validity
            Not Before: Apr 22 14:34:41 2026 GMT
            Not After : Apr 21 14:39:41 2027 GMT
        Subject: CN=FE8925093E2A4126B8D9A255EAF5F11EC2E74F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:dd:55:84:56:a4:13:01:75:ad:c5:44:7e:
                    19:e5:a1:7c:21:4c:27:e3:8f:6f:b4:6e:16:b6:73:
                    48:39:e3:7e:27:bd:91:fd:22:80:96:11:9d:ed:3a:
                    7c:64:c5:de:86:1e:9b:cf:ee:0a:45:ad:64:09:a2:
                    f0:b5:8f:3b:98:e9:9d:84:01:d9:d3:62:98:56:90:
                    1a:ef:ec:b1:6f:9e:e1:9c:98:c6:9a:e5:12:5c:b4:
                    0e:b9:39:64:11:bc:2b:09:7e:db:65:8a:89:6d:5e:
                    66:86:75:d2:d6:83:ba:72:2d:89:72:c1:98:12:35:
                    a7:d0:3d:58:d1:e1:98:40:ea:62:4d:0b:8d:bd:a5:
                    80:af:23:4f:5a:72:ae:ed:09:d1:d2:fe:65:95:31:
                    35:25:50:90:3a:a1:f7:21:7b:37:a9:c2:fc:f7:c6:
                    57:06:90:d8:b1:db:6f:06:d3:80:c7:46:30:66:be:
                    bd:c5:ca:91:0c:bb:6c:a6:d8:eb:e1:2e:2b:08:f4:
                    2f:fb:0e:0b:83:e7:87:64:86:44:6a:0a:af:72:04:
                    12:51:e2:3a:99:56:0a:ae:c7:3d:5f:e7:da:6d:04:
                    1a:56:08:46:d5:00:86:95:34:f0:84:4e:5c:d1:cb:
                    44:2e:83:68:29:ec:01:8f:6c:bf:f6:c8:84:74:69:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:89:25:09:3E:2A:41:26:B8:D9:A2:55:EA:F5:F1:1E:C2:E7:4F:1B
            X509v3 Authority Key Identifier:
                keyid:87:FC:AC:D3:16:F0:A5:71:4B:24:1F:9B:ED:96:E3:5B:BB:38:E3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49CDCBFD59D3ED1252589BCC22C046E54866690F362227482409BAD5D07106C8/0/87FCACD316F0A5714B241F9BED96E35BBB38E3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87FCACD316F0A5714B241F9BED96E35BBB38E3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49CDCBFD59D3ED1252589BCC22C046E54866690F362227482409BAD5D07106C8/0/323830333a333135303a3a2f33322d3332203d3e20323733383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3150::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:c9:b0:d5:13:a3:19:f7:40:73:22:bd:76:b7:e0:14:58:a1:
         50:49:ce:ec:6a:d4:32:91:fd:07:37:cd:04:fa:c4:2d:10:2d:
         d1:3a:47:0c:fd:5f:66:bc:37:54:97:35:76:bf:9a:f2:d6:a5:
         3a:2f:94:70:ab:18:d0:a5:cf:88:6d:70:8e:fa:2f:0a:b4:89:
         ce:fb:7b:3b:90:43:af:37:8a:e7:7c:e1:41:4c:06:ef:92:96:
         ca:06:bb:c2:8a:f8:00:dc:66:1d:92:be:22:d6:cf:22:af:3d:
         0b:c5:1e:8f:57:43:3b:94:62:57:c7:27:62:dc:de:d4:dc:9f:
         7b:1a:a4:6c:d5:b8:93:e2:96:dc:6b:62:6d:98:a7:ab:4d:52:
         97:e9:b0:91:2e:6c:ca:8c:e0:c5:eb:22:d0:47:be:f5:a4:15:
         17:61:01:46:0e:cf:9a:9e:88:d1:2d:f3:75:d0:f6:ae:74:66:
         85:6e:20:26:8b:5a:85:39:dc:4e:6c:c5:19:0a:f8:a1:18:2a:
         ab:a4:da:6e:d6:4a:9e:f7:ef:e7:62:56:ae:08:a3:9b:62:61:
         72:74:6c:09:a7:ae:76:61:4d:a9:46:18:d7:58:23:1d:49:cd:
         0d:fe:b7:0a:0b:7a:cb:8d:6a:39:ce:bf:f2:58:4d:6f:e8:3d:
         ca:a4:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:38:32 2026 by rpki-client