Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          B0Rjq/LBSdsz38J3Dsk9OfKoFW7VAYb9q92LMaEHkOs=
Subject key identifier:   3C:4F:71:E6:11:A9:9E:BF:4F:A1:E8:D7:77:FE:E4:C8:22:9A:3D:6A
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       6A607A120E41ED48541CE5C76BB30E59F29C859A
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 31 Mar 2026 03:36:57 +0000
ROA not before:           Tue 31 Mar 2026 03:31:57 +0000
ROA not after:            Tue 30 Mar 2027 03:36:57 +0000
asID:                     64120
IP address blocks:        2803:f080:2c60::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:60:7a:12:0e:41:ed:48:54:1c:e5:c7:6b:b3:0e:59:f2:9c:85:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar 31 03:31:57 2026 GMT
            Not After : Mar 30 03:36:57 2027 GMT
        Subject: CN=3C4F71E611A99EBF4FA1E8D777FEE4C8229A3D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:f4:da:d5:7a:6f:9c:a2:3c:cc:e9:fb:6d:
                    ce:f3:4b:0d:c8:ff:70:37:1b:34:3a:3d:b6:66:a2:
                    6d:6d:25:f5:e6:42:b3:a1:e1:bb:c5:7f:16:b9:ff:
                    01:8d:68:8a:8a:2f:1e:b6:a5:13:9e:0a:c9:d8:11:
                    b7:c0:ce:83:b3:1a:91:24:1d:99:d6:03:ed:94:48:
                    7d:4c:38:27:8f:b3:1a:6d:92:62:85:60:1a:83:aa:
                    1a:b9:32:44:f7:6c:24:9e:ed:af:2c:7a:bb:59:46:
                    db:8a:39:0c:33:6d:28:e8:23:52:d4:5d:1b:27:7d:
                    a5:1a:69:88:9c:07:45:eb:5e:22:fe:69:ef:d9:d4:
                    2a:05:a5:81:80:1b:e7:4b:8f:8d:ea:34:fb:6b:a8:
                    f2:6c:6c:a5:e8:0e:13:0c:ca:40:ed:ad:9c:4c:64:
                    01:1b:82:45:2f:ac:66:e7:b3:a9:e3:02:0f:67:89:
                    cc:68:e3:c4:b3:5a:ec:23:7b:21:3f:9b:36:e1:8a:
                    ce:15:3c:fa:d6:49:69:64:98:39:a0:29:cb:82:3f:
                    ea:ab:ee:14:8b:36:9f:da:7b:07:b9:d9:7d:05:5c:
                    8f:e7:a1:9a:3d:30:32:54:9d:4b:bd:f7:fe:a0:cd:
                    c5:21:3e:5c:97:1d:43:dc:a9:61:c7:b9:0c:7b:1c:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4F:71:E6:11:A9:9E:BF:4F:A1:E8:D7:77:FE:E4:C8:22:9A:3D:6A
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c60::/43

    Signature Algorithm: sha256WithRSAEncryption
         80:95:9c:28:25:36:11:c6:14:f2:7e:ef:2a:1e:f0:fb:7f:5b:
         a9:a2:d2:42:3b:99:83:3c:f9:33:89:7b:95:f7:91:f1:ff:a6:
         1c:21:c0:ab:0f:13:4e:b2:7b:bf:c8:ef:2d:f6:56:43:6f:ba:
         58:fb:ca:af:39:37:f0:eb:7b:a8:00:b5:b1:02:1b:ce:ce:e6:
         cd:83:e1:b6:b0:65:f5:4a:0b:e2:7b:5a:ba:a7:07:21:b7:d1:
         0f:75:e4:46:b0:0d:19:d5:68:b0:cb:d0:02:c4:2b:ee:ee:76:
         21:c8:bb:25:48:47:88:f2:c8:be:0e:84:91:f0:df:e2:50:8e:
         2f:65:9a:35:76:3b:0a:c5:a6:85:a9:c8:20:2d:fa:28:82:cc:
         5c:a8:58:43:4a:45:25:68:4a:8d:35:a9:ef:48:07:e1:8d:50:
         b2:81:07:8e:dc:a7:97:76:19:9f:84:34:e0:7c:87:c7:71:35:
         29:ff:55:fc:74:6e:31:d6:32:d3:bf:13:5f:a8:9e:0d:f5:74:
         ed:b1:03:59:ff:b8:3e:b3:c2:df:c5:39:12:63:ac:7e:4c:10:
         78:74:9e:be:85:8f:67:a7:4d:94:4d:52:5a:b4:b6:a7:50:27:
         7a:c2:ff:91:d9:30:34:75:83:9e:64:45:5a:48:39:95:6f:ea:
         54:00:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:49:30 2026 by rpki-client