Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a383030303a3a2f33332d3333203d3e20323732303236.roa
File:                     323830333a363531303a383030303a3a2f33332d3333203d3e20323732303236.roa (raw, json)
Hash identifier:          2Vqb0PGAeN3UZyiMY/QQxnbNRNYfpNOYanQ2stxlPVA=
Subject key identifier:   AB:7A:18:D3:3A:CC:95:15:46:45:3C:FA:C1:02:04:38:F5:8F:56:99
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       53246ABBBFCF6EA7D9B28C4E8F39FAE502B47C1F
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a383030303a3a2f33332d3333203d3e20323732303236.roa
Signing time:             Sun 29 Mar 2026 04:36:28 +0000
ROA not before:           Sun 29 Mar 2026 04:31:28 +0000
ROA not after:            Sun 28 Mar 2027 04:36:28 +0000
asID:                     272026
IP address blocks:        2803:6510:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 01:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:24:6a:bb:bf:cf:6e:a7:d9:b2:8c:4e:8f:39:fa:e5:02:b4:7c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Mar 29 04:31:28 2026 GMT
            Not After : Mar 28 04:36:28 2027 GMT
        Subject: CN=AB7A18D33ACC951546453CFAC1020438F58F5699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:29:4f:0a:82:f6:fb:87:2a:c7:63:b8:b6:da:
                    c5:af:ce:9c:cc:f5:10:d9:21:6f:7e:aa:06:1d:69:
                    fa:c4:26:60:fb:2b:57:70:08:20:8b:81:59:d6:b9:
                    52:e5:4c:61:fd:65:1c:0b:f7:ba:b0:57:fc:01:77:
                    71:21:12:1d:5f:67:be:2e:13:a0:ee:f7:2e:40:a1:
                    3e:79:f5:6d:5b:4d:22:99:7a:f7:79:8a:ed:43:b6:
                    8d:6d:82:05:57:55:e1:66:12:5f:ca:c5:a7:fc:2d:
                    6d:14:15:df:aa:27:e3:ec:a5:30:7d:8b:fc:de:77:
                    86:95:2b:9a:d6:3e:02:a6:54:1e:c0:fc:30:18:cc:
                    fd:3c:f9:89:d0:9d:5a:1b:78:05:85:ca:5b:00:ba:
                    ed:8e:c1:39:76:ac:22:29:1f:e7:59:72:8a:93:2f:
                    16:c7:b7:9e:70:dc:ed:88:7c:13:7d:e0:b4:44:66:
                    19:ba:8d:9d:8a:35:f3:29:d6:7c:95:8b:bb:a9:8d:
                    79:96:e6:78:05:65:fd:4d:48:36:cd:ed:a2:14:38:
                    2e:7f:0d:84:f4:48:be:7f:30:df:41:f1:ae:0f:69:
                    4c:4b:5a:0d:8f:13:50:5d:10:a7:cd:c9:b6:51:90:
                    8e:5e:0f:4e:e8:4a:9d:cb:75:8b:b2:f7:fd:e2:25:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7A:18:D3:3A:CC:95:15:46:45:3C:FA:C1:02:04:38:F5:8F:56:99
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a383030303a3a2f33332d3333203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6510:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:93:e6:93:83:90:5e:43:ac:88:4a:e3:63:b1:18:14:3b:76:
         8c:37:71:5f:9a:1a:bc:10:4b:fb:28:ea:81:94:1d:52:a1:63:
         77:98:e6:98:b0:2e:76:57:5d:07:36:d6:6f:f9:d4:73:6c:bc:
         17:ec:64:49:ef:75:13:23:4e:f1:4d:be:22:63:28:b6:37:3d:
         27:25:28:20:fb:22:d4:ff:5b:7b:46:c1:8c:55:5c:5f:fb:73:
         c7:22:45:6a:5a:5a:4a:b9:06:46:ab:44:0c:0b:c6:d8:73:f2:
         04:96:42:82:fb:76:5b:f0:02:86:38:ec:84:e7:d4:a0:c1:3c:
         ae:57:93:92:2a:2a:c0:93:e1:f0:88:40:ea:4c:8f:a0:11:be:
         19:e2:e9:80:73:62:55:dd:43:99:23:cc:c7:8f:68:e5:81:d9:
         ac:5a:2e:5a:84:a6:b8:52:b2:69:6f:2e:de:54:f1:44:eb:de:
         a0:f1:dc:15:97:65:5c:66:35:bc:88:04:73:cc:90:eb:c1:53:
         4d:db:64:fe:6b:b7:11:6e:72:cf:3a:2b:7d:ce:38:57:0b:b0:
         35:4f:5d:a9:c5:f1:b2:97:df:05:2d:3b:92:9e:6b:89:d5:e6:
         f0:53:0c:0c:a5:f8:94:fc:66:26:6a:30:01:d8:c6:37:5c:38:
         d5:b5:28:68
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUUyRqu7/PbqfZsoxOjzn65QK0fB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MzQjdCNDY5Q0FDNDg1Qzc5NjQwNDMwRjY1RkI3RTU0
Rjk5QTg5MDAeFw0yNjAzMjkwNDMxMjhaFw0yNzAzMjgwNDM2MjhaMDMxMTAvBgNV
BAMTKEFCN0ExOEQzM0FDQzk1MTU0NjQ1M0NGQUMxMDIwNDM4RjU4RjU2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqKU8Kgvb7hyrHY7i22sWvzpzM
9RDZIW9+qgYdafrEJmD7K1dwCCCLgVnWuVLlTGH9ZRwL97qwV/wBd3EhEh1fZ74u
E6Du9y5AoT559W1bTSKZevd5iu1Dto1tggVXVeFmEl/Kxaf8LW0UFd+qJ+PspTB9
i/zed4aVK5rWPgKmVB7A/DAYzP08+YnQnVobeAWFylsAuu2OwTl2rCIpH+dZcoqT
LxbHt55w3O2IfBN94LREZhm6jZ2KNfMp1nyVi7upjXmW5ngFZf1NSDbN7aIUOC5/
DYT0SL5/MN9B8a4PaUxLWg2PE1BdEKfNybZRkI5eD07oSp3LdYuy9/3iJblbAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUq3oY0zrMlRVGRTz6wQIEOPWPVpkwHwYDVR0j
BBgwFoAUPDt7RpysSFx5ZAQw9l+35U+ZqJAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjUwOTExMTVDMURBMDMxQjc5MkVBREZGNTQ0OThBQTNB
Q0E1NjZFQUZDNzdGNjUwRUVCOUJGOEM2NzcwNzI4LzAvM0MzQjdCNDY5Q0FDNDg1
Qzc5NjQwNDMwRjY1RkI3RTU0Rjk5QTg5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzNCN0I0NjlDQUM0ODVDNzk2
NDA0MzBGNjVGQjdFNTRGOTlBODkwLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI1MDkxMTE1QzFEQTAzMUI3OTJFQURGRjU0NDk4QUEzQUNBNTY2RUFG
Qzc3RjY1MEVFQjlCRjhDNjc3MDcyOC8wLzMyMzgzMDMzM2EzNjM1MzEzMDNhMzgz
MDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzIzMDMyMzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgcoA2UQgDANBgkqhkiG9w0BAQsFAAOCAQEAQJPmk4OQXkOsiErjY7EYFDt2
jDdxX5oavBBL+yjqgZQdUqFjd5jmmLAudlddBzbWb/nUc2y8F+xkSe91EyNO8U2+
ImMotjc9JyUoIPsi1P9be0bBjFVcX/tzxyJFalpaSrkGRqtEDAvG2HPyBJZCgvt2
W/AChjjshOfUoME8rleTkioqwJPh8IhA6kyPoBG+GeLpgHNiVd1DmSPMx49o5YHZ
rFouWoSmuFKyaW8u3lTxROveoPHcFZdlXGY1vIgEc8yQ68FTTdtk/mu3EW5yzzor
fc44VwuwNU9dqcXxspffBS07kp5ridXm8FMMDKX4lPxmJmowAdjGN1w41bUoaA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 05:19:36 2026 by rpki-client