Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/323830333a366464303a3a2f33322d3438203d3e20323734313930.roa
File:                     323830333a366464303a3a2f33322d3438203d3e20323734313930.roa (raw, json)
Hash identifier:          FyHs8/qedCG7TW5irjx4zXXJxZBIHwee31p3mZ/BQ6U=
Subject key identifier:   D6:BF:B8:5F:6D:26:64:A8:9A:41:44:19:D5:76:EA:2E:FC:6B:D1:4B
Certificate issuer:       /CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3
Certificate serial:       749DEB058B9AECA3E517C6E82DE3F2E23CD68918
Authority key identifier: 3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/323830333a366464303a3a2f33322d3438203d3e20323734313930.roa
Signing time:             Sat 01 Aug 2026 18:19:27 +0000
ROA not before:           Sat 01 Aug 2026 18:14:27 +0000
ROA not after:            Sat 31 Jul 2027 18:19:27 +0000
asID:                     274190
IP address blocks:        2803:6dd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9d:eb:05:8b:9a:ec:a3:e5:17:c6:e8:2d:e3:f2:e2:3c:d6:89:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3
        Validity
            Not Before: Aug  1 18:14:27 2026 GMT
            Not After : Jul 31 18:19:27 2027 GMT
        Subject: CN=D6BFB85F6D2664A89A414419D576EA2EFC6BD14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:5c:e9:f9:3f:ad:1c:dd:e5:38:6c:e2:95:
                    58:8b:e3:29:0f:9c:60:dc:aa:44:c5:b7:c6:11:dc:
                    4a:ba:34:de:3b:4e:b1:22:d2:b5:e5:ff:79:1a:2f:
                    f7:1a:c1:c8:70:ba:33:c1:0d:b3:5c:84:28:46:67:
                    ee:28:94:a8:5d:ef:28:00:47:fa:f1:4a:cc:bd:21:
                    c2:f8:ff:6b:07:8d:42:0c:99:8b:f4:ec:d6:9e:c3:
                    d2:36:c2:e9:01:f8:c8:9b:6c:4d:c6:ef:41:1e:07:
                    54:81:59:2e:24:4f:e2:ef:fd:c1:12:0c:f9:56:8f:
                    62:2a:cd:a7:3b:a3:9f:20:ca:50:94:da:96:a3:c4:
                    cf:ab:30:98:63:92:5b:36:d9:0e:e7:d8:ff:1f:5d:
                    58:af:5f:8e:ba:3a:7e:2e:bc:a9:1b:5e:a8:6e:8a:
                    d7:f4:1b:11:f6:aa:27:19:13:3a:7f:2b:a9:f5:54:
                    14:2e:00:66:47:e6:ef:8b:ac:b0:6f:23:d0:b7:3f:
                    0e:ef:36:bc:d9:d3:7e:78:af:64:9c:27:0a:91:5f:
                    e3:f5:71:c8:bc:73:a2:db:b7:48:37:db:cb:46:81:
                    18:78:b5:c6:fc:98:d8:30:f9:39:9e:9c:b4:2d:3f:
                    c8:db:0e:d5:01:49:4c:88:91:5b:73:0c:0e:c9:df:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:B8:5F:6D:26:64:A8:9A:41:44:19:D5:76:EA:2E:FC:6B:D1:4B
            X509v3 Authority Key Identifier:
                keyid:3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/323830333a366464303a3a2f33322d3438203d3e20323734313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:e3:3f:91:bc:f2:ab:36:ef:c2:c5:0c:00:05:c1:e4:d6:cb:
         a9:40:9a:73:70:ec:07:5c:52:2d:c3:1c:1d:c1:e6:86:7c:79:
         2b:19:2b:85:e7:88:1b:7a:4f:28:68:4f:c4:4e:bf:15:6b:62:
         1f:85:28:00:6e:27:b5:19:07:82:2a:d0:12:c7:7d:41:b0:f0:
         a0:26:3b:b9:90:80:bb:30:1b:38:c4:31:1c:50:2f:16:5e:d2:
         89:61:5c:cd:7e:5a:0a:c7:43:34:e7:6b:3c:41:63:3a:9d:c4:
         06:3e:4d:f0:98:57:6c:02:29:74:53:35:6a:1a:ac:47:35:7c:
         52:19:e7:54:30:5b:34:23:dc:89:53:35:67:c6:38:86:61:c2:
         86:3a:c9:6c:f3:06:a1:81:fa:b5:92:a0:19:b4:2e:51:f1:e8:
         16:67:4f:3c:84:41:81:ea:c6:f3:1d:c0:f6:15:74:d8:2f:f5:
         73:18:b2:2c:74:1b:33:f0:1b:70:72:08:d6:0b:3f:12:c7:06:
         97:6a:cd:0c:e4:05:78:27:14:82:c5:f4:22:f5:26:7e:38:57:
         cc:de:4d:d7:f9:5d:5a:91:7d:df:a2:a6:92:b2:46:ed:c5:04:
         98:1a:60:21:fa:59:fe:62:19:06:db:a8:13:c5:7f:7a:02:a4:
         df:0f:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:36:09 2026 by rpki-client