Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a383030303a3a2f33342d3334203d3e20323732303533.roa
File:                     323830333a356431303a383030303a3a2f33342d3334203d3e20323732303533.roa (raw, json)
Hash identifier:          nwoqTqqOjRnX4NzMuG3AA7QNIm0RVG9ogabIzOUlT30=
Subject key identifier:   21:FA:68:FA:B9:91:C9:1B:D7:B7:CC:04:3B:A4:2A:A8:5C:7B:E6:A0
Certificate issuer:       /CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
Certificate serial:       28D9E064CB2B049595A9AF3F2A4B4A09B4194A7B
Authority key identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a383030303a3a2f33342d3334203d3e20323732303533.roa
Signing time:             Mon 23 Mar 2026 17:50:00 +0000
ROA not before:           Mon 23 Mar 2026 17:45:00 +0000
ROA not after:            Mon 22 Mar 2027 17:50:00 +0000
asID:                     272053
IP address blocks:        2803:5d10:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d9:e0:64:cb:2b:04:95:95:a9:af:3f:2a:4b:4a:09:b4:19:4a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
        Validity
            Not Before: Mar 23 17:45:00 2026 GMT
            Not After : Mar 22 17:50:00 2027 GMT
        Subject: CN=21FA68FAB991C91BD7B7CC043BA42AA85C7BE6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:91:11:4d:56:e6:10:26:04:87:1f:77:56:
                    89:b2:24:68:a3:60:5d:22:aa:b1:4a:0c:2a:db:c0:
                    1e:23:ff:7e:32:c9:2a:1a:2c:16:2b:5d:90:bf:e3:
                    eb:25:b8:5c:ad:2f:d1:3f:63:5a:41:5b:cd:19:ba:
                    6e:df:5f:5b:f4:db:b3:af:65:f6:ce:25:36:4e:ed:
                    72:ed:6f:39:19:45:ef:71:b2:cc:f2:ed:f3:84:4e:
                    10:64:1b:8e:49:a0:69:f6:c7:37:81:ab:64:18:5a:
                    3f:4e:2d:da:17:6b:4d:6a:f8:91:70:9f:86:92:15:
                    20:d1:52:df:fb:a2:aa:a0:ec:ce:70:da:e2:b6:da:
                    54:e3:d1:cf:a1:24:61:cb:e9:f0:7d:b6:3f:78:ea:
                    b6:b8:d3:ce:2e:5d:7a:88:00:43:f0:35:8f:5e:2f:
                    7a:17:47:3e:52:13:8d:35:56:b7:4d:fe:a5:f0:b4:
                    fe:d1:a6:9d:f3:b4:0f:c2:a8:fc:93:0c:93:4d:22:
                    77:42:45:5a:5b:2a:40:b0:95:8c:7c:36:83:c9:75:
                    56:08:98:ac:f0:d1:2d:82:55:62:21:3f:49:33:90:
                    db:e0:7d:1d:a0:f2:b5:e5:6b:01:31:05:50:c8:ce:
                    c4:f3:ec:e4:62:b0:82:c1:b3:d8:e5:59:2e:aa:54:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FA:68:FA:B9:91:C9:1B:D7:B7:CC:04:3B:A4:2A:A8:5C:7B:E6:A0
            X509v3 Authority Key Identifier:
                keyid:F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/323830333a356431303a383030303a3a2f33342d3334203d3e20323732303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d10:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:ec:63:df:53:68:84:7f:5e:f5:58:75:fa:68:0b:53:d1:9f:
         9f:1d:a0:05:da:13:3d:5d:f8:15:1d:3e:cd:b3:bf:83:5e:6d:
         7a:10:46:24:49:72:30:8c:0f:c5:16:f0:60:59:42:ee:4f:9c:
         c5:54:07:9a:78:41:ce:51:a4:0c:5b:34:b4:59:bf:30:29:09:
         67:3e:e8:c7:93:b7:ce:0a:f0:f2:f1:58:ba:58:9d:36:3b:45:
         32:f6:49:4e:3d:31:a0:76:f6:90:b9:8f:3b:d3:cc:46:66:e1:
         1a:a7:eb:16:69:6d:08:fa:ce:40:96:b5:44:3f:c3:78:74:92:
         cc:0f:f1:8f:f4:8c:0d:22:3b:2b:37:2d:16:d2:f2:69:56:29:
         28:93:3e:46:47:8c:9e:22:de:1a:e2:7a:df:99:04:88:6e:e8:
         af:aa:2b:3f:a7:37:34:28:dd:7f:fa:13:05:54:79:ae:42:81:
         a4:f9:17:e2:4f:32:54:1a:c9:07:73:e6:2c:6c:10:7c:ff:ad:
         8a:b4:97:65:36:d1:51:4b:f9:29:fa:ca:da:54:a8:a9:93:dc:
         af:47:84:42:b2:a5:9a:10:86:f9:b2:f6:17:b8:c0:46:42:1e:
         39:d2:f7:61:2d:7e:31:29:7a:f0:61:a0:29:d8:16:cf:7d:0a:
         8e:92:5c:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:08:33 2026 by rpki-client