Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/323830333a393530303a3a2f33322d3438203d3e203532343330.roa
File:                     323830333a393530303a3a2f33322d3438203d3e203532343330.roa (raw, json)
Hash identifier:          yRaQY1hoxiQwhETjb9exjo3w9xV8rRrNI+EjZ3vgPOo=
Subject key identifier:   10:3F:FA:11:E7:B3:E3:87:3E:C8:E7:95:AE:F7:49:46:E3:94:96:A9
Certificate issuer:       /CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41
Certificate serial:       6072AF724FA88C06C74287A3273FF06C46C6CB03
Authority key identifier: 2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/323830333a393530303a3a2f33322d3438203d3e203532343330.roa
Signing time:             Fri 26 Jun 2026 16:50:02 +0000
ROA not before:           Fri 26 Jun 2026 16:45:02 +0000
ROA not after:            Fri 25 Jun 2027 16:50:02 +0000
asID:                     52430
IP address blocks:        2803:9500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:72:af:72:4f:a8:8c:06:c7:42:87:a3:27:3f:f0:6c:46:c6:cb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41
        Validity
            Not Before: Jun 26 16:45:02 2026 GMT
            Not After : Jun 25 16:50:02 2027 GMT
        Subject: CN=103FFA11E7B3E3873EC8E795AEF74946E39496A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:98:70:4a:21:07:1a:99:91:fd:ee:d7:69:
                    ee:85:ed:3f:23:27:c8:aa:b4:49:45:78:ce:92:3b:
                    ee:22:19:c5:ef:61:0f:48:8c:50:6b:c6:02:cc:13:
                    ac:f8:27:7d:5d:e9:c8:37:6a:11:9b:96:b7:7d:9a:
                    a8:bd:1c:a3:59:c0:2a:1a:7f:ba:af:41:6d:60:f1:
                    70:27:cd:ac:e8:55:cf:1b:90:51:9d:8c:f0:0e:62:
                    7b:99:00:d6:6d:43:3e:f6:39:c1:9a:7d:cf:b8:6a:
                    06:c8:f7:d0:64:13:e6:b1:3c:67:29:af:29:d9:91:
                    43:08:b9:d7:95:86:9b:a4:98:4b:90:d3:a0:ac:9b:
                    ac:4b:c4:25:74:d2:63:26:e4:1e:76:31:ef:5d:36:
                    b3:b6:ee:64:ea:b4:1e:86:5f:06:3b:83:ec:4e:a6:
                    fc:35:4d:94:05:69:c0:66:07:6a:34:08:2f:64:1f:
                    36:89:84:ef:2f:2c:c8:53:f8:ca:f4:2b:45:2a:0c:
                    e6:32:17:76:0b:43:bf:03:3c:5d:bf:6b:43:74:df:
                    d3:a6:95:65:73:34:c4:36:66:2f:8d:49:f9:aa:4e:
                    35:13:f1:9d:3a:ff:25:b5:71:a3:f0:62:42:b9:86:
                    1b:a2:03:79:fc:f4:ed:0f:34:8f:cf:fc:89:9b:05:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3F:FA:11:E7:B3:E3:87:3E:C8:E7:95:AE:F7:49:46:E3:94:96:A9
            X509v3 Authority Key Identifier:
                keyid:2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/323830333a393530303a3a2f33322d3438203d3e203532343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9500::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:23:39:29:ba:6f:f0:85:45:e5:b1:4f:9b:fe:18:72:2c:
         13:dc:f5:9c:ee:3e:ae:4c:ea:49:18:67:42:23:eb:b2:b6:f4:
         9e:ee:ad:e3:00:0c:61:c5:af:80:57:ff:5b:65:24:63:b3:2d:
         58:08:61:49:3f:d1:01:0d:d7:b6:bc:65:b2:90:3c:c8:46:95:
         91:67:aa:7a:87:dc:ef:ae:1f:24:15:8a:20:ed:75:b3:a0:e5:
         83:b1:ee:d5:f4:ce:9b:2f:57:b1:01:f8:09:a5:02:ea:1a:82:
         bd:3c:84:b7:ce:77:d7:1b:91:d7:e2:58:86:45:8e:e4:cf:40:
         c0:ac:da:28:b8:3a:b7:af:71:a1:f6:ac:4b:d6:49:71:81:1b:
         47:c4:04:1a:54:32:cf:0b:4c:f4:de:ed:85:0f:2e:81:41:65:
         36:24:41:3e:3b:9e:0f:94:ab:b2:6e:9d:7d:d1:b4:8a:6f:89:
         7c:cf:1a:49:91:03:da:1d:f2:2e:7f:3b:fb:76:ec:05:5d:20:
         b8:f6:5d:4e:04:ff:9b:b8:96:0b:b0:5d:df:3f:37:2a:3d:ae:
         70:3e:de:20:ab:05:71:5a:91:60:ca:4c:d6:e7:51:d3:72:e7:
         97:b5:8d:5b:1f:fa:d9:42:ee:36:9d:30:77:22:48:06:ed:0a:
         55:1f:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:46:40 2026 by rpki-client