Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/323830333a663331303a3a2f33322d3438203d3e20323733393436.roa
File:                     323830333a663331303a3a2f33322d3438203d3e20323733393436.roa (raw, json)
Hash identifier:          LXB5wwLemmBxS4djaibqvX3ac32cfl28hc0jn7mJiII=
Subject key identifier:   B4:A6:CC:D9:2A:D4:1D:2C:0F:E5:16:5C:E2:8C:10:55:A3:89:E0:39
Certificate issuer:       /CN=F703CFFB535FEE1646CAB72A418F7A397899234D
Certificate serial:       3D6E49E96C2FAD8BB2DF7E68CC07D071ECEC1738
Authority key identifier: F7:03:CF:FB:53:5F:EE:16:46:CA:B7:2A:41:8F:7A:39:78:99:23:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/323830333a663331303a3a2f33322d3438203d3e20323733393436.roa
Signing time:             Fri 24 Apr 2026 16:39:55 +0000
ROA not before:           Fri 24 Apr 2026 16:34:55 +0000
ROA not after:            Fri 23 Apr 2027 16:39:55 +0000
asID:                     273946
IP address blocks:        2803:f310::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/F703CFFB535FEE1646CAB72A418F7A397899234D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/F703CFFB535FEE1646CAB72A418F7A397899234D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6e:49:e9:6c:2f:ad:8b:b2:df:7e:68:cc:07:d0:71:ec:ec:17:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F703CFFB535FEE1646CAB72A418F7A397899234D
        Validity
            Not Before: Apr 24 16:34:55 2026 GMT
            Not After : Apr 23 16:39:55 2027 GMT
        Subject: CN=B4A6CCD92AD41D2C0FE5165CE28C1055A389E039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:f9:b5:02:03:d6:19:30:a2:20:e5:ce:67:
                    68:45:8b:c0:a5:cb:87:f5:aa:21:a3:d8:f7:5d:05:
                    62:80:1e:9e:53:60:d5:9c:a0:c0:3a:bd:63:73:56:
                    4e:31:cd:3a:b1:50:eb:ac:d7:e0:c7:83:58:e5:b0:
                    97:e8:a4:94:fc:26:a9:cc:73:67:10:6b:7a:9c:e8:
                    b1:c6:5b:c8:d1:1c:4e:93:87:c2:3d:f8:80:1f:73:
                    ae:84:4c:eb:b4:4f:21:8d:8d:5c:60:22:a6:f9:b1:
                    03:af:46:1f:3e:0e:d9:a8:28:1c:ff:03:9c:a9:7a:
                    7d:78:c4:fc:d1:de:ac:d4:23:f2:fb:4d:c3:96:e0:
                    08:6f:2a:68:f4:d9:28:10:16:2e:06:2b:78:c0:b7:
                    e5:f8:80:a7:91:00:e8:1f:2d:41:dd:29:03:f8:1a:
                    ac:ba:39:88:bc:b9:d0:e1:f3:3e:59:6a:2f:77:9b:
                    7b:05:03:cd:d3:11:02:ad:de:df:4e:74:28:7f:df:
                    ad:5c:8c:2a:fe:28:9d:6f:3c:e4:bf:aa:65:f7:ac:
                    81:b2:7c:0d:55:e6:ee:86:ec:e0:f9:82:5a:bf:4f:
                    49:3e:f3:89:d6:a9:40:7e:71:f8:1a:6e:39:7e:7a:
                    60:2c:fa:0c:02:f8:c1:46:10:6b:ed:a5:10:b9:5c:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A6:CC:D9:2A:D4:1D:2C:0F:E5:16:5C:E2:8C:10:55:A3:89:E0:39
            X509v3 Authority Key Identifier:
                keyid:F7:03:CF:FB:53:5F:EE:16:46:CA:B7:2A:41:8F:7A:39:78:99:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/F703CFFB535FEE1646CAB72A418F7A397899234D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/323830333a663331303a3a2f33322d3438203d3e20323733393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f310::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:f8:df:5e:47:dd:f4:21:bb:8b:a2:94:33:b7:ba:40:2c:
         a1:f1:e3:9a:23:06:1b:35:d5:bc:3d:50:13:31:34:2a:4c:8c:
         91:d5:9a:de:69:e4:41:8b:df:7e:7b:9c:77:b0:54:8e:2e:f6:
         97:2b:4a:c7:86:b5:d7:83:2e:ab:6f:78:76:21:df:39:9b:e8:
         5f:05:eb:c9:57:5e:38:29:db:be:01:36:37:3f:e0:cd:44:0e:
         49:43:59:8b:a4:94:ea:79:c3:a5:b8:42:f0:6d:5b:bb:ba:1a:
         d1:46:56:94:05:bb:71:a3:0e:ad:e2:99:34:e6:87:d1:9b:b4:
         6d:2d:89:a4:67:54:af:3f:03:5f:96:30:f5:4d:c4:09:e7:fc:
         80:0c:56:c5:8f:2f:1f:fb:30:5c:02:20:2f:b1:a3:8a:d7:82:
         1a:6d:9b:ac:ff:41:3b:c9:40:bd:cd:e2:dd:a6:73:35:e4:d5:
         0d:8b:26:17:6c:e3:bc:0b:48:86:ac:40:82:31:b7:c7:fc:03:
         17:1f:bd:bd:9a:19:70:52:ea:42:bc:b8:80:b4:9f:b4:90:92:
         c2:fc:d1:9e:4b:04:2b:21:ff:e8:8c:29:d0:3d:62:34:6f:35:
         dd:57:ae:41:9d:ff:b3:67:7b:20:d2:f8:10:aa:ee:6a:af:c3:
         ea:c6:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:37:44 2026 by rpki-client