Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e20323633373032.roa
File:                     323830333a343961303a3a2f33322d3438203d3e20323633373032.roa (raw, json)
Hash identifier:          6qPSXtTkvE3OijlAtWB9sDzIV6xO7Hgo6cig+T3kjVs=
Subject key identifier:   E1:07:E1:E0:0D:01:DD:A6:8B:BE:A4:98:A5:EE:AA:FA:4F:C2:DB:A0
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       10A23B8DEC6115D517CD4C423C4BE6196BF77466
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e20323633373032.roa
Signing time:             Wed 25 Mar 2026 16:35:54 +0000
ROA not before:           Wed 25 Mar 2026 16:30:54 +0000
ROA not after:            Wed 24 Mar 2027 16:35:54 +0000
asID:                     263702
IP address blocks:        2803:49a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a2:3b:8d:ec:61:15:d5:17:cd:4c:42:3c:4b:e6:19:6b:f7:74:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: Mar 25 16:30:54 2026 GMT
            Not After : Mar 24 16:35:54 2027 GMT
        Subject: CN=E107E1E00D01DDA68BBEA498A5EEAAFA4FC2DBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:72:17:18:bb:c6:bb:fc:08:05:de:6b:25:
                    85:e6:c2:78:ef:c9:de:1b:ba:e6:d8:db:5a:2c:2a:
                    ae:b1:50:7f:24:2f:a9:62:65:f1:cb:ff:44:ac:70:
                    13:ec:7c:2f:b7:e9:b1:fe:b4:2f:66:3a:46:e6:10:
                    18:06:58:98:d5:c8:5c:68:cb:d8:c2:5b:32:dc:70:
                    2a:34:f2:c8:86:f6:6d:a9:82:d7:04:a4:b6:e1:01:
                    ef:f4:77:11:75:52:b9:8e:80:71:25:e0:f5:bc:ee:
                    3f:c7:8f:ae:e4:e4:ff:3c:b5:47:4d:18:9b:93:87:
                    06:ac:ac:b9:cd:c2:7b:7e:4e:d7:5d:86:cc:1e:d9:
                    77:76:1a:7d:8c:ab:03:96:60:d1:ba:86:b8:c0:22:
                    a5:d4:0e:d8:b2:75:bf:77:81:38:3b:09:9f:39:65:
                    05:f7:31:ec:1e:1d:a1:8d:f5:1b:fa:a3:99:19:0d:
                    03:b2:42:e8:f7:54:36:96:9b:ee:79:1d:13:31:7b:
                    eb:9c:37:6b:87:a4:cf:ca:d8:4c:de:df:93:42:a4:
                    22:c0:48:d0:7a:69:c8:db:65:13:21:ce:3c:5e:fe:
                    30:c2:c0:99:4f:b3:e2:79:cb:28:31:7f:5d:84:e0:
                    d9:63:d3:05:3a:bd:fe:05:ae:d6:cf:d2:9e:2b:9e:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:07:E1:E0:0D:01:DD:A6:8B:BE:A4:98:A5:EE:AA:FA:4F:C2:DB:A0
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:49a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:93:12:67:35:9a:bd:37:ae:ad:c6:77:13:82:7b:59:a1:09:
         bd:a3:8d:05:18:35:3a:ed:15:ae:a9:46:39:c0:d4:ea:83:eb:
         0e:33:66:27:bb:e8:13:77:db:84:44:39:95:2e:ce:98:09:cf:
         fc:57:c6:96:40:86:4e:c9:6e:14:d0:2a:72:fd:be:8a:1d:09:
         1d:85:20:3c:60:e9:dd:0c:14:fe:42:0f:6d:2a:51:d4:73:a1:
         17:9d:d4:a9:f3:c3:a2:2e:32:ce:c1:11:9a:e0:73:35:21:d3:
         39:49:4a:b5:20:d2:15:de:a2:37:ef:24:91:85:28:36:a4:74:
         66:00:c5:41:e5:e2:f4:f1:b4:e7:41:51:a4:5f:d5:b2:55:04:
         0d:71:df:d3:1b:1b:45:5b:37:d9:76:f9:fe:15:83:e0:ef:46:
         7d:e0:ec:8e:32:d2:df:21:66:43:a0:50:24:7d:a9:6e:be:f3:
         cb:a1:f0:90:25:8f:a9:86:91:cb:75:22:ea:cd:67:8e:1a:59:
         1c:f6:c7:e0:4e:e5:2d:6b:30:fe:dc:f9:71:d6:76:4b:0a:a6:
         77:22:22:bc:3d:11:31:e1:33:e0:4a:9b:e8:ce:2d:48:50:78:
         b9:8a:23:04:9c:00:4d:19:6d:69:e8:c5:78:fe:18:9f:ab:79:
         78:37:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:29 2026 by rpki-client