Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3730303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3730303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          JecxaHKQnZFzDjoT8EAuCDcpmirC3iZRK7xpGFx4jic=
Subject key identifier:   21:D2:23:F0:0C:D3:87:F8:54:5B:56:A6:CB:92:85:C6:E9:63:B2:A4
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       776B6FA5A343994EDF05DB539F4EC421215C1405
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3730303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 30 Apr 2026 04:40:20 +0000
ROA not before:           Thu 30 Apr 2026 04:35:20 +0000
ROA not after:            Thu 29 Apr 2027 04:40:20 +0000
asID:                     273858
IP address blocks:        2803:3550:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6b:6f:a5:a3:43:99:4e:df:05:db:53:9f:4e:c4:21:21:5c:14:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Apr 30 04:35:20 2026 GMT
            Not After : Apr 29 04:40:20 2027 GMT
        Subject: CN=21D223F00CD387F8545B56A6CB9285C6E963B2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:b2:d2:38:25:2f:e7:54:94:d2:0d:dc:e1:
                    79:7c:43:1c:54:ec:99:b5:31:d0:ba:70:02:df:bf:
                    ad:0a:1c:14:40:9f:f9:23:96:1b:ae:80:99:d9:fc:
                    d2:85:ba:64:56:c7:70:7a:a8:b1:db:2d:76:c3:f2:
                    a5:e1:49:75:db:86:d7:ce:57:80:2e:db:a7:25:91:
                    8b:43:d0:64:96:3a:9b:3c:78:de:d9:39:0c:74:6f:
                    ff:87:60:fa:97:af:c9:df:d9:93:e7:b9:5c:64:80:
                    3e:d4:e9:74:b9:07:c6:81:b6:fc:59:df:c8:6b:d4:
                    b0:e1:e6:a7:fc:bf:2b:1c:3c:c6:3a:1c:13:a5:70:
                    76:0f:1d:f8:cb:82:80:ec:d7:5f:82:5e:c6:8d:87:
                    ab:c4:94:a6:2e:60:56:c8:50:c0:44:e9:e8:7a:cb:
                    b6:b9:87:a9:61:1f:f1:71:83:c2:2d:ef:e7:57:81:
                    2f:4d:75:90:85:49:2e:44:62:7d:a2:70:9a:d7:36:
                    a3:95:33:b9:4a:14:34:62:79:42:f0:27:34:9f:cc:
                    cc:da:c3:18:72:e3:90:f1:73:2f:2d:2e:5c:0b:71:
                    d2:74:b1:d2:3d:a2:78:a9:48:19:f5:15:05:25:1e:
                    04:04:a3:a4:e6:36:08:89:f7:85:91:7e:06:80:42:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D2:23:F0:0C:D3:87:F8:54:5B:56:A6:CB:92:85:C6:E9:63:B2:A4
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3730303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:e0:92:32:e8:75:39:80:98:5c:8c:bf:d1:b7:be:25:d5:36:
         7f:62:24:7e:49:d2:78:8e:03:d8:08:9a:93:e8:76:f3:cb:be:
         e6:22:2e:2a:7c:df:73:57:0b:a8:0b:39:58:a1:18:53:32:77:
         f4:ed:ea:7f:d7:6e:38:4f:48:c3:74:20:5c:12:d1:1f:a3:aa:
         ab:76:b3:46:c7:02:d1:f0:33:6b:74:26:a0:45:b0:73:47:84:
         8a:23:ab:ae:9c:3c:07:3d:fb:df:ac:d3:8e:75:56:90:32:09:
         e3:24:bd:fa:60:e3:7a:33:18:07:da:df:50:c2:4d:16:10:19:
         44:40:f7:f3:e6:b8:ca:2d:08:dc:fc:5f:f8:1e:d5:e5:60:16:
         b8:b9:8f:ea:bd:f9:6c:15:bd:62:be:56:ee:d3:c8:17:41:65:
         30:56:0e:a1:93:36:c2:cb:48:64:2d:ed:b8:45:6e:c4:ff:71:
         1c:aa:67:cb:3d:5c:ea:39:ec:4c:b5:40:c9:af:63:65:01:1f:
         c8:34:78:ed:b8:fc:8e:91:5d:91:a5:e5:28:a1:02:a3:22:54:
         ac:5b:c2:0c:13:f9:d6:53:e4:ce:f9:89:23:c6:be:59:42:aa:
         3f:00:9c:0b:78:69:6e:e7:64:1a:40:c0:c4:78:d4:39:d6:ce:
         7e:89:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:35:21 2026 by rpki-client