Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9370C2E2AB3DBE53F75C81680D61AB5A7A5815786A3557DACCC81A9F510C09E0/0/323830333a343331303a3a2f33322d3332203d3e20323732303630.roa
File:                     323830333a343331303a3a2f33322d3332203d3e20323732303630.roa (raw, json)
Hash identifier:          gYL0Ibo2dSr682RMxRxhuCX5cPdHqJYlAJ1hNoCMIow=
Subject key identifier:   AF:91:BD:8D:7D:5D:D2:A0:63:B0:52:36:9A:E8:FE:63:E8:87:4A:0C
Certificate issuer:       /CN=3B8D604A8648FA0CF330FEDAFE26E73BFD785612
Certificate serial:       7A25D2F8F9DE762BF3746EDA665A75A437AFA971
Authority key identifier: 3B:8D:60:4A:86:48:FA:0C:F3:30:FE:DA:FE:26:E7:3B:FD:78:56:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D604A8648FA0CF330FEDAFE26E73BFD785612.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9370C2E2AB3DBE53F75C81680D61AB5A7A5815786A3557DACCC81A9F510C09E0/0/323830333a343331303a3a2f33322d3332203d3e20323732303630.roa
Signing time:             Thu 23 Apr 2026 16:39:46 +0000
ROA not before:           Thu 23 Apr 2026 16:34:46 +0000
ROA not after:            Thu 22 Apr 2027 16:39:46 +0000
asID:                     272060
IP address blocks:        2803:4310::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9370C2E2AB3DBE53F75C81680D61AB5A7A5815786A3557DACCC81A9F510C09E0/0/3B8D604A8648FA0CF330FEDAFE26E73BFD785612.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9370C2E2AB3DBE53F75C81680D61AB5A7A5815786A3557DACCC81A9F510C09E0/0/3B8D604A8648FA0CF330FEDAFE26E73BFD785612.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D604A8648FA0CF330FEDAFE26E73BFD785612.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 06:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:25:d2:f8:f9:de:76:2b:f3:74:6e:da:66:5a:75:a4:37:af:a9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B8D604A8648FA0CF330FEDAFE26E73BFD785612
        Validity
            Not Before: Apr 23 16:34:46 2026 GMT
            Not After : Apr 22 16:39:46 2027 GMT
        Subject: CN=AF91BD8D7D5DD2A063B052369AE8FE63E8874A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:3c:fe:b9:ee:0a:9a:6b:41:77:13:53:4f:
                    6c:12:ea:ed:27:01:80:04:d8:b6:bd:6c:64:68:75:
                    b7:70:d8:8e:0d:eb:73:66:12:87:f1:47:00:96:d0:
                    12:66:85:08:99:47:b0:52:63:8c:7e:39:ce:60:80:
                    a6:0f:08:22:70:87:85:91:d0:fc:4d:48:29:0d:e9:
                    48:57:9a:e6:29:ce:41:1d:29:53:e2:e3:ef:bc:72:
                    3c:be:8d:6e:2f:21:65:1a:58:a8:0b:1c:27:88:29:
                    64:00:e0:07:31:e7:bb:6a:7c:da:7d:8f:b1:80:8f:
                    07:b0:17:76:c5:08:d8:bd:12:3f:e5:9c:3c:1d:a4:
                    91:a5:a1:1f:47:da:07:9d:b9:67:64:33:15:2e:e9:
                    f8:5f:7e:f8:02:3f:e6:e4:f8:08:7b:44:70:2a:1b:
                    6f:5f:9a:9a:f0:b3:1f:ff:25:73:49:16:2d:0f:9b:
                    8e:ee:db:98:5b:63:aa:56:e6:2b:31:bc:1f:94:d5:
                    92:7a:52:4d:60:14:65:8a:17:83:c8:ca:5c:e5:13:
                    b4:65:93:0a:ed:b4:d6:e1:f3:4c:1f:48:e5:df:0d:
                    24:be:7a:cf:b1:75:3a:d5:d2:3f:a5:5e:db:76:85:
                    b6:88:1b:ae:d2:3f:d0:3f:fe:56:10:96:17:9d:4a:
                    f8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:BD:8D:7D:5D:D2:A0:63:B0:52:36:9A:E8:FE:63:E8:87:4A:0C
            X509v3 Authority Key Identifier:
                keyid:3B:8D:60:4A:86:48:FA:0C:F3:30:FE:DA:FE:26:E7:3B:FD:78:56:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9370C2E2AB3DBE53F75C81680D61AB5A7A5815786A3557DACCC81A9F510C09E0/0/3B8D604A8648FA0CF330FEDAFE26E73BFD785612.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D604A8648FA0CF330FEDAFE26E73BFD785612.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9370C2E2AB3DBE53F75C81680D61AB5A7A5815786A3557DACCC81A9F510C09E0/0/323830333a343331303a3a2f33322d3332203d3e20323732303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4310::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:af:5f:54:1b:39:10:e3:6e:71:bc:5a:6c:9c:84:33:56:72:
         41:bf:0d:dc:e5:97:dc:e3:b4:a4:4c:92:74:d0:fc:c0:1d:3b:
         1d:f5:36:c7:5f:4e:63:11:88:df:aa:70:81:e3:20:3f:ab:3d:
         06:d1:d0:94:c0:40:75:8a:d2:6a:f5:c0:f8:d6:12:88:13:c3:
         f9:d3:1d:4c:4b:13:48:cf:69:a1:75:5b:9e:b5:a7:bd:ab:f3:
         15:25:89:0a:f7:2b:18:9c:22:37:36:cb:c4:da:41:26:2e:cd:
         14:f7:77:24:34:40:c6:74:ce:ac:58:53:01:29:2f:12:8d:e7:
         0c:9c:52:94:bc:24:7c:8a:d0:9e:c6:6f:68:ce:f7:7b:01:94:
         12:95:9b:b1:45:a0:94:01:db:82:90:3d:fb:06:69:a3:0e:f3:
         ce:23:d6:41:77:13:69:f1:5b:35:d8:43:20:86:01:2e:94:d8:
         13:79:64:6f:78:14:d5:e8:76:0b:0c:6a:5d:83:b6:86:5e:5b:
         ed:ee:6b:cd:bd:a8:42:94:e0:2c:11:a7:c7:e8:d0:e7:7f:8e:
         e1:17:78:9d:6a:1b:62:ad:eb:6f:49:d9:17:25:55:95:6a:21:
         5f:54:ed:c6:af:85:fa:1a:95:5d:8b:48:00:a9:b5:3e:be:74:
         09:37:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:33:50 2026 by rpki-client