Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383061303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383061303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          EU5NgblraeHlLut776aexF5fK4WKxnUa4t1J5Ri9iuE=
Subject key identifier:   71:CC:FE:D0:B6:A2:2C:E4:E7:41:E6:A0:59:FA:32:53:48:46:4C:77
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       31138763956B12AA202197F9D1B6130A6089C2E2
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383061303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 31 Mar 2026 03:36:56 +0000
ROA not before:           Tue 31 Mar 2026 03:31:56 +0000
ROA not after:            Tue 30 Mar 2027 03:36:56 +0000
asID:                     64120
IP address blocks:        2803:f080:80a0::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:13:87:63:95:6b:12:aa:20:21:97:f9:d1:b6:13:0a:60:89:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar 31 03:31:56 2026 GMT
            Not After : Mar 30 03:36:56 2027 GMT
        Subject: CN=71CCFED0B6A22CE4E741E6A059FA325348464C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:54:6e:3a:53:ff:3f:a2:0f:66:8e:4d:ab:06:
                    5e:23:02:86:45:21:76:27:d9:36:fd:97:d3:cb:b5:
                    dc:4d:ae:6b:2a:a9:f8:cc:ce:24:3e:ac:99:be:eb:
                    76:18:67:42:27:6d:05:4c:5c:cb:0c:89:0d:13:b3:
                    fa:01:bf:fc:c1:9b:88:86:bf:79:b8:a9:de:6e:96:
                    51:05:6c:b5:07:d7:4d:a5:38:aa:d2:3a:af:ce:59:
                    d2:78:d2:e1:bf:32:28:e4:ac:7a:e9:eb:fa:67:e2:
                    7d:0c:51:54:e4:d7:35:98:ae:82:ab:67:1a:3f:ab:
                    36:82:b2:e6:6f:48:8b:d0:ec:2d:b3:be:2e:2f:92:
                    00:f4:29:84:e3:2e:08:a2:d6:28:e1:f7:d5:fa:71:
                    99:ed:42:92:26:d2:8f:bd:df:17:85:8b:7f:f5:cc:
                    15:8f:7a:7b:14:76:d6:81:ab:94:4b:d4:9a:19:1f:
                    76:69:78:04:d0:15:39:0e:26:65:39:c6:99:9f:f2:
                    2a:92:45:60:21:1e:49:69:fc:2b:c0:ef:bd:f5:fc:
                    b3:88:92:e6:c5:5c:43:df:2d:6c:3b:52:ef:a0:2d:
                    a3:4f:ba:b7:e3:b6:88:2e:5d:c0:6d:63:65:0a:e6:
                    e9:3b:99:77:7b:06:8d:cd:70:e7:61:f7:ad:f1:a0:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CC:FE:D0:B6:A2:2C:E4:E7:41:E6:A0:59:FA:32:53:48:46:4C:77
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383061303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:80a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         11:a0:be:d3:01:ed:36:df:8c:9c:30:48:73:e8:d0:b9:62:c0:
         68:c1:5a:59:8f:ce:73:a6:c9:c4:b4:d7:86:2f:40:f4:eb:07:
         7c:80:20:0d:d2:9b:0a:f1:b5:07:45:47:84:8f:6c:75:3e:a2:
         df:56:4e:c0:26:45:1b:52:be:7c:4c:39:22:02:2c:c2:12:00:
         81:40:80:ab:ef:bd:1d:b2:2d:3a:25:c0:18:3c:26:95:bd:a2:
         78:13:b1:eb:82:22:3a:9c:8e:37:4e:6a:ff:ba:a5:4f:42:1e:
         e9:14:60:0a:4a:04:3a:90:b3:ce:51:47:53:3e:57:11:75:d7:
         fa:22:13:2d:fd:6f:05:67:f5:b1:8a:6d:5b:6f:d2:99:0d:50:
         ca:ca:c3:42:65:96:5b:ed:78:ca:54:32:5e:3f:57:99:0e:b4:
         c5:23:d0:87:0d:36:0d:28:a0:6b:20:ef:2b:12:f2:d8:e6:ee:
         35:df:c1:f5:c4:3b:ef:94:ca:2c:72:0d:4b:16:53:2c:7d:09:
         43:ac:d5:ad:f9:f4:ed:b5:a5:cd:cf:7d:42:f5:87:cd:b9:f8:
         30:13:9e:f8:76:42:aa:0f:6e:3c:79:6a:2b:13:78:93:64:27:
         e4:da:1c:4f:79:98:fe:e6:08:e5:8f:56:18:22:fb:22:27:42:
         24:dd:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:48:50 2026 by rpki-client