Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          rpRK49qy6ino6v/08CdrsiapZmR3zPlC4WHzcv0p14c=
Subject key identifier:   59:F1:7E:A0:54:AC:69:74:B2:D9:57:5B:FF:C6:C9:5E:02:D3:26:78
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       5ADE8AD8E21ED63D6367FDC35260F94091D23B3D
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 31 Mar 2026 03:36:55 +0000
ROA not before:           Tue 31 Mar 2026 03:31:55 +0000
ROA not after:            Tue 30 Mar 2027 03:36:55 +0000
asID:                     64120
IP address blocks:        2803:f080:2c40::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:de:8a:d8:e2:1e:d6:3d:63:67:fd:c3:52:60:f9:40:91:d2:3b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar 31 03:31:55 2026 GMT
            Not After : Mar 30 03:36:55 2027 GMT
        Subject: CN=59F17EA054AC6974B2D9575BFFC6C95E02D32678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:62:3a:5b:aa:b1:63:a8:41:b5:12:09:cf:37:
                    96:d0:40:ad:1c:cc:30:af:9a:cf:61:19:86:3b:7a:
                    98:36:82:bf:be:a9:d6:15:96:64:21:8f:8b:0b:96:
                    83:08:e3:ae:3a:f8:20:d3:77:36:89:1a:9e:b0:a8:
                    f6:44:9c:b3:dd:f2:a4:59:8f:fa:1f:e5:2b:a2:83:
                    80:d3:22:cd:58:29:48:a5:c1:d4:88:01:7d:28:b9:
                    b1:b5:20:ac:c0:5e:c6:71:28:bc:55:0d:54:6a:1f:
                    98:67:15:84:61:f2:eb:bf:0c:16:77:8f:05:ce:85:
                    13:5d:8a:83:c2:c3:f9:ab:1b:d4:74:b7:bf:96:32:
                    4e:90:45:b0:b7:a9:64:22:8e:26:9a:ae:98:be:c8:
                    ea:98:04:16:3c:eb:77:97:4d:9c:e7:a9:55:5a:ce:
                    af:05:73:91:12:66:d9:b9:19:57:67:9e:27:10:9e:
                    26:5d:92:f0:bc:30:9e:1b:d4:49:de:ec:f5:ac:23:
                    7a:49:6c:3e:0d:9c:b8:69:be:ac:c8:b2:ac:3b:76:
                    86:ed:85:3a:35:96:d1:e1:67:3c:0d:a2:19:1e:4d:
                    2e:80:ab:3f:5a:0a:63:5c:24:68:cb:58:ed:c8:bd:
                    2d:36:4e:93:c4:cb:51:89:3b:b0:f1:3f:b4:a4:ad:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F1:7E:A0:54:AC:69:74:B2:D9:57:5B:FF:C6:C9:5E:02:D3:26:78
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c40::/43

    Signature Algorithm: sha256WithRSAEncryption
         94:7b:ad:f1:db:70:45:d0:ce:15:1b:b1:1a:db:ae:c7:c4:41:
         f9:d6:58:a6:ab:52:bd:71:b7:58:cc:bc:7f:15:1a:22:b9:9f:
         98:91:59:73:80:94:9a:e8:d2:54:12:0d:b1:68:b3:76:8e:fc:
         9f:be:d8:0e:41:90:8a:b6:2d:35:46:38:e4:12:11:4d:b8:fb:
         c0:0e:28:61:4b:b1:7b:05:b4:51:35:34:b6:09:ea:4f:e2:3c:
         04:8e:99:ed:3d:6a:4d:0e:c5:5c:c2:bc:03:ee:b2:be:9b:39:
         70:47:4b:05:59:d5:22:bc:f3:24:f5:10:09:2e:68:5e:54:ef:
         be:1b:f1:51:26:6f:38:c5:13:8b:45:be:34:e9:7b:d0:c5:33:
         38:d1:50:21:72:ca:af:3d:4a:a6:ce:c8:85:aa:c5:d2:de:8b:
         13:dc:10:c0:a7:05:a9:f0:a0:09:ea:35:bc:96:56:ba:8f:12:
         e7:e8:0a:99:f4:59:70:d4:c1:8b:f6:75:d7:4b:94:42:65:40:
         12:0d:29:ff:3e:02:ee:28:1f:80:02:5d:7e:00:d9:de:18:3d:
         53:a1:23:2a:98:79:c0:2a:9a:14:ef:f9:39:9b:8f:79:16:95:
         b6:47:55:0a:0b:56:ef:54:97:fa:ec:64:a7:07:f3:f1:4f:2d:
         8d:7f:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:50:12 2026 by rpki-client