Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          cFs4cvIusotWJlcry0qujrO/wYA8MbMBAJpeNODgqnY=
Subject key identifier:   2B:D6:16:2F:C7:8F:65:A7:59:14:37:D5:5D:32:C5:48:AD:55:FF:A4
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       5481AD82683CFECB66AD929C8DB198CEAD8DD44F
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 30 Apr 2026 04:40:18 +0000
ROA not before:           Thu 30 Apr 2026 04:35:18 +0000
ROA not after:            Thu 29 Apr 2027 04:40:18 +0000
asID:                     273858
IP address blocks:        2803:3550:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:81:ad:82:68:3c:fe:cb:66:ad:92:9c:8d:b1:98:ce:ad:8d:d4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Apr 30 04:35:18 2026 GMT
            Not After : Apr 29 04:40:18 2027 GMT
        Subject: CN=2BD6162FC78F65A7591437D55D32C548AD55FFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:96:e5:44:cf:13:40:ab:8f:ef:11:3a:7b:
                    a8:ea:ff:72:fd:fd:ce:01:2a:60:67:7f:32:9d:e0:
                    4e:2f:b4:c8:aa:c8:27:d3:a7:4c:e0:b6:a6:b5:ce:
                    6d:88:99:3c:ff:4b:74:ec:a9:1d:82:16:fa:24:20:
                    ad:53:21:42:f3:fd:d3:dc:76:08:1a:88:b9:83:63:
                    3a:7a:cf:b0:c8:aa:d3:80:dc:60:c5:93:40:11:ad:
                    4b:c3:41:d4:8d:fe:f4:d6:cf:a8:fb:6e:68:a2:e1:
                    7d:30:f2:f4:85:f0:0f:03:e7:73:ec:f2:13:8f:1c:
                    b7:14:1a:3e:cc:df:77:3f:92:51:27:bb:9c:f7:f6:
                    76:03:5f:ec:b7:23:75:b4:f6:72:ce:9b:fe:66:b0:
                    32:dd:7a:14:cd:c8:c8:cd:45:cd:a7:b8:96:03:c8:
                    84:dc:0d:42:95:de:d3:aa:fa:7d:f9:c5:06:d5:f5:
                    37:69:51:5a:ce:e0:2a:55:31:d0:2c:1c:1b:8c:95:
                    db:c2:c0:d1:c7:4b:7e:cd:9c:33:76:9c:1c:65:09:
                    91:ed:f6:4e:18:9d:7e:62:2b:41:67:b6:14:ca:14:
                    5d:da:3b:c0:e9:b1:51:82:67:ef:63:93:b7:fc:6f:
                    96:b6:6c:b0:34:b0:9b:11:62:d6:fc:c6:26:1a:51:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D6:16:2F:C7:8F:65:A7:59:14:37:D5:5D:32:C5:48:AD:55:FF:A4
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3830303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:36:3d:0c:d3:70:a6:8f:04:0f:c3:8c:95:23:8e:fa:87:
         69:18:f7:2c:0e:0e:3b:6c:b4:d3:9c:43:23:df:0b:b2:4e:f3:
         6d:4c:f1:93:0b:06:70:fa:6a:6c:d3:6a:6b:b8:d9:dd:a2:c1:
         f3:69:c1:65:03:d8:a8:2b:59:95:2d:a7:0a:bf:79:f6:9e:8b:
         2d:1e:27:bd:c8:12:75:b9:f3:5e:c5:7c:54:71:27:e4:90:df:
         74:e9:ab:b6:73:cd:4c:68:05:9d:e8:2a:57:07:ce:0b:3f:98:
         f2:aa:19:83:b1:d4:f4:04:e8:59:53:8b:73:4e:97:a8:3d:7d:
         53:42:6f:c9:dc:7b:2a:05:e6:2e:ec:22:f4:a2:c8:e8:2e:3b:
         1f:7d:13:56:8d:db:09:67:95:21:46:b4:83:44:5f:27:bc:86:
         88:6b:af:dd:e6:41:18:a3:cc:4a:91:67:56:f3:24:40:da:6c:
         e8:70:e0:fa:ef:92:4c:e0:86:8f:e3:47:62:ad:78:3e:e1:65:
         d1:7e:3c:83:eb:79:99:62:8b:6d:d9:60:c8:b7:62:e8:77:2d:
         96:ff:e4:f8:e9:7d:11:0e:a2:5c:22:69:78:6f:34:b6:b5:84:
         c0:fe:f2:56:a0:3e:7c:77:1e:c2:32:03:70:d4:58:26:d4:14:
         62:fe:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:34:59 2026 by rpki-client