Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa
File:                     323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa (raw, json)
Hash identifier:          ydbdQdbjAi9dE7d1wmmMcFco/JIL0tsMSbuhcbCuIXQ=
Subject key identifier:   E3:2A:03:F1:03:AF:D8:3C:54:4B:97:9E:C6:C0:9E:09:80:13:C2:B9
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       74AC3ED7599DC8CA8FF3007A6A75C0C5C111F69D
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa
Signing time:             Thu 07 May 2026 17:00:00 +0000
ROA not before:           Thu 07 May 2026 16:55:00 +0000
ROA not after:            Thu 06 May 2027 17:00:00 +0000
asID:                     270075
IP address blocks:        2803:c3e0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ac:3e:d7:59:9d:c8:ca:8f:f3:00:7a:6a:75:c0:c5:c1:11:f6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: May  7 16:55:00 2026 GMT
            Not After : May  6 17:00:00 2027 GMT
        Subject: CN=E32A03F103AFD83C544B979EC6C09E098013C2B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:d9:c5:da:1c:ed:11:b6:3b:c1:10:b1:72:
                    aa:5e:7b:13:29:5e:69:6f:d7:6a:4f:70:c9:0f:ba:
                    32:de:e7:bf:8d:b9:ea:45:c1:7b:0b:a5:48:95:66:
                    f8:bd:14:02:9d:d2:c7:9a:6d:24:a5:78:ef:fc:3a:
                    1e:69:d0:ba:f3:b1:54:8f:43:bf:df:e5:d3:99:d6:
                    40:d8:d2:f1:e3:ce:9e:c8:f8:ae:8a:79:95:2c:4d:
                    1c:19:4c:bd:5a:42:b0:1a:be:c9:60:5f:cd:df:8b:
                    b4:16:60:a9:7e:58:bb:ce:c4:e0:52:36:10:34:71:
                    af:c1:22:52:e2:cb:17:3a:cc:b9:2e:bc:3a:26:d0:
                    76:48:45:37:03:cc:a3:01:af:ad:91:7f:0c:9e:8b:
                    b6:8a:5b:1d:be:cd:a2:7a:b7:b7:94:12:b4:77:ee:
                    d3:1e:b0:09:a1:51:05:ed:da:f3:7f:b5:2d:cd:a2:
                    de:03:31:71:b7:f8:97:6d:a4:a9:7e:a8:ce:fc:0a:
                    10:64:72:d5:81:8f:04:2c:c8:e8:ec:ad:76:d3:15:
                    9e:f1:c8:f3:8a:ce:0e:1c:79:73:6c:58:19:55:33:
                    ae:81:52:76:a0:52:6b:8d:31:3b:60:67:65:66:4b:
                    6f:87:0e:8c:07:77:c2:9a:5b:72:53:b2:fa:b8:93:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:03:F1:03:AF:D8:3C:54:4B:97:9E:C6:C0:9E:09:80:13:C2:B9
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:36:11:16:99:45:78:89:c2:d4:b9:06:68:eb:90:82:36:ee:
         16:41:26:4b:15:1c:04:57:97:5a:da:58:7c:33:56:8b:2d:2d:
         4b:d1:6b:9b:03:79:fe:db:2b:e0:22:2d:d9:de:a8:9b:7a:0a:
         11:b2:bf:1c:26:be:8e:fb:d9:15:8e:e4:2d:7d:b8:aa:8d:ed:
         2b:eb:e9:38:cd:0c:70:83:9c:af:78:41:44:da:56:e7:aa:24:
         e6:83:0d:0d:0b:dd:df:81:5b:f1:5b:5a:06:f9:1f:f6:a1:24:
         f6:b4:f5:8e:c3:1b:94:3b:3b:83:1e:81:71:28:1d:bc:57:bc:
         6c:61:6b:bc:6f:8f:24:41:16:a9:a0:ee:dc:c8:a0:28:2d:b5:
         ad:40:72:be:ad:35:b0:e2:91:de:81:de:45:97:14:21:82:dd:
         92:d2:e7:76:16:26:62:83:09:be:00:3d:73:20:2d:54:89:5c:
         fb:94:7a:69:58:2a:49:7c:e6:53:38:c8:e6:92:3a:46:5b:cf:
         e9:d8:fb:d8:fb:9a:56:f1:47:68:a1:19:fd:28:29:20:df:43:
         8b:98:73:3a:78:65:79:87:42:b9:03:3f:9d:08:c2:95:b3:bd:
         43:b7:58:fd:d4:5f:27:71:d1:6f:fb:d1:9e:8b:ae:56:f9:97:
         15:9a:dd:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:45:53 2026 by rpki-client