Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/323830333a333465303a3a2f33322d3438203d3e20323639383938.roa
File:                     323830333a333465303a3a2f33322d3438203d3e20323639383938.roa (raw, json)
Hash identifier:          WAzAnbr9S14GzNl3GgXUDVDlduF3NPAShgF8DUA5MjA=
Subject key identifier:   8D:C7:A8:43:B2:0B:5C:11:CF:FD:F8:ED:99:E0:F9:38:61:C9:BB:17
Certificate issuer:       /CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
Certificate serial:       0275B4B292BA949D472F8E12E9A42FEFA75415D6
Authority key identifier: 42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/323830333a333465303a3a2f33322d3438203d3e20323639383938.roa
Signing time:             Sun 26 Apr 2026 15:40:00 +0000
ROA not before:           Sun 26 Apr 2026 15:35:00 +0000
ROA not after:            Sun 25 Apr 2027 15:40:00 +0000
asID:                     269898
IP address blocks:        2803:34e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 11:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:75:b4:b2:92:ba:94:9d:47:2f:8e:12:e9:a4:2f:ef:a7:54:15:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
        Validity
            Not Before: Apr 26 15:35:00 2026 GMT
            Not After : Apr 25 15:40:00 2027 GMT
        Subject: CN=8DC7A843B20B5C11CFFDF8ED99E0F93861C9BB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:e6:1a:46:42:f0:30:a1:66:a4:5b:3a:ab:
                    88:b5:83:33:18:4d:c0:bc:c7:0b:1d:56:42:df:41:
                    1c:4b:a2:f7:dc:da:0e:6f:ec:67:e6:67:91:55:72:
                    07:3d:84:57:40:14:7b:ab:83:5f:7e:67:b7:42:23:
                    2d:bf:be:da:41:49:5b:be:fd:4e:bd:f1:2c:d5:c8:
                    b6:85:f7:26:91:5b:5e:68:28:bc:b0:db:fc:6a:e7:
                    26:e7:64:d1:f2:d9:2e:f0:f6:37:8e:85:af:c7:97:
                    f9:82:32:0a:56:fb:7d:cf:4c:5f:a7:c6:82:54:77:
                    4f:43:7c:c3:56:7a:6a:91:0c:7c:aa:a9:03:33:46:
                    fe:95:cd:89:a5:f5:7c:1c:d6:09:f8:27:2e:8a:6f:
                    ea:93:82:87:e0:34:7f:fc:03:af:20:e3:12:71:1b:
                    83:6e:5b:fe:9b:28:d3:26:05:1d:5f:08:3b:00:c9:
                    c4:1b:5f:44:dd:97:3b:ca:f9:09:22:ff:e0:40:8a:
                    0f:f4:e9:8d:fc:33:49:11:80:f5:ca:aa:78:46:e4:
                    1d:3b:49:8a:45:f2:52:59:dd:99:a0:ae:8b:a2:41:
                    0b:19:3d:f5:1c:3f:e9:de:cb:9b:f9:fb:1a:08:64:
                    4f:7a:47:f2:9e:53:b8:c1:f8:9f:a9:a4:f3:5e:69:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C7:A8:43:B2:0B:5C:11:CF:FD:F8:ED:99:E0:F9:38:61:C9:BB:17
            X509v3 Authority Key Identifier:
                keyid:42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/323830333a333465303a3a2f33322d3438203d3e20323639383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:34e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:26:16:b5:69:9f:26:0d:17:a8:5d:20:43:d9:39:f4:7b:
         4d:0d:95:bf:d4:ae:d0:66:e5:0b:06:0e:a3:c2:93:bd:e9:36:
         66:66:31:f9:55:aa:f3:3c:74:1b:0b:7c:0c:40:92:7f:6d:b2:
         60:c6:69:24:d9:23:6a:aa:fe:81:9b:8c:06:3b:88:01:84:e4:
         81:0f:bb:cb:96:d1:13:54:30:b4:3d:ec:c7:cf:96:c2:d0:db:
         18:58:f4:78:7a:34:60:c6:49:01:72:e8:f2:e3:1e:dc:8d:75:
         81:19:a7:75:b5:0e:6e:c1:5a:84:fd:d3:34:4d:25:50:11:2c:
         da:60:4f:14:57:7a:77:90:12:bd:1e:87:6d:2d:72:f2:22:e7:
         2d:a5:61:91:0c:df:e4:79:37:85:ae:9d:b1:28:92:b1:ad:11:
         2e:c2:a1:18:e7:ca:43:79:ad:f7:1f:10:17:3e:40:6f:98:ab:
         85:57:e7:53:72:df:78:f5:b5:4b:0d:ea:26:d1:76:ae:a7:f7:
         d3:09:ef:3e:6f:39:9b:4c:0d:a4:88:8a:5f:9b:ac:e7:47:64:
         df:4e:23:98:0c:7e:31:79:ac:5f:2e:7a:8d:66:0b:dc:c0:ff:
         f6:e2:46:8e:44:32:a5:56:d3:29:6e:21:52:61:c0:fd:03:ca:
         5d:68:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:35:58 2026 by rpki-client