Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a3a2f33322d3336203d3e20323734303739.roa
File:                     323830333a356164303a3a2f33322d3336203d3e20323734303739.roa (raw, json)
Hash identifier:          Nor+WxgMBvti/FWPmkXCrLBTSHPfLFJMfbWdDGvu5Ck=
Subject key identifier:   03:C3:98:E2:33:04:17:FB:3D:41:63:44:00:2F:F6:65:19:0B:D6:4D
Certificate issuer:       /CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
Certificate serial:       60DBE238D57C04B1A09E376E90ED51751218DE55
Authority key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a3a2f33322d3336203d3e20323734303739.roa
Signing time:             Tue 24 Mar 2026 00:35:00 +0000
ROA not before:           Tue 24 Mar 2026 00:30:00 +0000
ROA not after:            Tue 23 Mar 2027 00:35:00 +0000
asID:                     274079
IP address blocks:        2803:5ad0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:db:e2:38:d5:7c:04:b1:a0:9e:37:6e:90:ed:51:75:12:18:de:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4
        Validity
            Not Before: Mar 24 00:30:00 2026 GMT
            Not After : Mar 23 00:35:00 2027 GMT
        Subject: CN=03C398E2330417FB3D416344002FF665190BD64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:7f:09:31:cd:0c:8f:bc:54:4b:73:ca:9a:
                    67:d3:e5:f8:ea:7c:47:68:64:07:bd:15:0f:8d:81:
                    f6:66:20:01:98:cd:50:b8:48:21:fa:1d:c7:d6:9c:
                    00:b1:6f:8f:5c:77:08:44:47:6a:f1:30:c4:50:bd:
                    03:b8:97:fc:fe:bb:70:10:0c:29:1d:35:a2:18:d6:
                    52:98:0c:39:cc:a2:ea:61:07:9c:7c:2d:b8:ac:37:
                    a3:e3:5a:a2:bf:52:20:e3:9f:26:25:18:6b:6e:35:
                    55:27:f0:64:d7:4b:81:47:ab:b3:d7:de:74:89:40:
                    ca:52:cd:58:7c:27:bf:06:c7:4e:e9:75:17:2e:c3:
                    38:12:dd:66:d0:05:80:02:80:3b:c2:2f:ac:d5:27:
                    ef:6e:fe:e9:29:61:61:73:04:b8:67:15:93:5f:f2:
                    f4:72:f7:a1:0f:7c:18:a6:d9:42:d3:6b:35:ae:08:
                    73:05:1e:f2:6e:e3:7b:8f:07:70:84:bf:c6:8b:09:
                    3c:98:1f:7a:d4:e0:32:5d:98:96:09:d3:9c:34:7b:
                    ea:af:4e:aa:1c:39:f2:69:65:1b:93:1d:09:52:28:
                    f7:40:fe:c3:09:2a:b4:30:0f:04:ee:8d:00:df:27:
                    54:34:ea:b2:2d:49:e4:bf:a5:32:af:d7:c0:e2:c9:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:98:E2:33:04:17:FB:3D:41:63:44:00:2F:F6:65:19:0B:D6:4D
            X509v3 Authority Key Identifier:
                keyid:51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a3a2f33322d3336203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:39:ee:2f:b1:03:af:ce:49:86:eb:c8:11:93:6b:b0:ba:78:
         09:6b:ce:78:47:76:f3:c2:e6:c5:e4:bf:b6:54:b3:62:47:f3:
         24:14:99:7f:4e:9c:eb:d9:ce:f0:c2:e4:52:6e:0a:1f:07:b1:
         0b:3d:96:15:5f:d5:04:0f:61:3e:44:7a:b5:f3:ac:6c:f7:9b:
         14:a3:cf:6e:40:16:71:9e:d3:f7:e9:60:c9:8a:73:d4:c7:83:
         80:fe:b1:a4:de:73:a0:f6:17:f5:7d:e4:1b:42:fa:c9:61:c8:
         93:4b:19:de:04:62:30:03:a8:78:5b:5f:7e:ba:74:9c:fc:2e:
         c9:6f:17:12:88:fd:f9:bd:7f:c6:f3:c8:4b:cd:da:44:b1:95:
         bb:e7:b9:ef:b2:85:9b:12:b0:2a:b7:79:49:c3:2d:0a:9c:25:
         8c:62:35:68:22:af:bc:50:92:c9:08:93:3c:f7:c3:bb:80:43:
         82:df:e1:9b:e1:85:2a:e0:43:ce:2f:e6:61:a5:93:cb:68:23:
         3c:92:ed:59:34:9f:84:49:da:da:50:57:4f:74:f8:98:ea:f8:
         b4:54:1f:e5:7a:64:7d:21:e1:4c:54:26:49:e2:bd:de:d4:bf:
         b0:11:36:5a:33:67:18:1c:ce:66:ed:b4:72:5f:3d:99:95:ef:
         72:69:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:56:43 2026 by rpki-client