Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/323830333a613235303a3a2f33322d3332203d3e20323733313630.roa
File:                     323830333a613235303a3a2f33322d3332203d3e20323733313630.roa (raw, json)
Hash identifier:          8FvZHGGIjgfaFpnOwE7Z88ZlAGi2eU0t3427SfR77eA=
Subject key identifier:   15:59:71:3A:FD:09:94:EB:ED:B8:11:85:8A:A0:7C:84:95:22:3B:66
Certificate issuer:       /CN=FFA82F2543024DC455E9D4141D3E8161CA368E8D
Certificate serial:       16C635DB63824756702C45A1AC41F6BD83A52C3C
Authority key identifier: FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/323830333a613235303a3a2f33322d3332203d3e20323733313630.roa
Signing time:             Sat 07 Mar 2026 01:33:14 +0000
ROA not before:           Sat 07 Mar 2026 01:28:14 +0000
ROA not after:            Sat 06 Mar 2027 01:33:14 +0000
asID:                     273160
IP address blocks:        2803:a250::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c6:35:db:63:82:47:56:70:2c:45:a1:ac:41:f6:bd:83:a5:2c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA82F2543024DC455E9D4141D3E8161CA368E8D
        Validity
            Not Before: Mar  7 01:28:14 2026 GMT
            Not After : Mar  6 01:33:14 2027 GMT
        Subject: CN=1559713AFD0994EBEDB811858AA07C8495223B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:99:13:7f:c3:0b:f9:6b:36:f5:a1:70:fc:
                    b3:34:74:80:80:6b:97:da:16:31:94:8e:8d:f3:be:
                    5f:fa:b0:3a:3c:df:53:66:15:3e:00:29:e9:93:b8:
                    04:ff:ba:88:f4:28:7f:d5:09:ff:ff:58:e0:93:da:
                    af:49:dc:6f:f8:ed:e6:41:5c:92:81:27:ae:e3:4e:
                    5f:71:74:50:94:cd:92:17:9f:14:19:1b:65:89:cc:
                    58:7e:df:e2:58:82:67:e5:0f:b7:2a:fa:3b:e9:2e:
                    04:44:a1:0f:83:45:e0:a2:ec:5b:55:b9:58:3a:1e:
                    d6:32:59:7f:81:46:a1:84:dc:c6:4f:81:c3:3a:13:
                    46:78:c0:00:d8:34:05:d4:28:5a:9d:ec:32:31:70:
                    89:25:d4:ea:94:8f:e3:53:49:9d:a7:86:f2:91:ff:
                    8c:00:ec:7f:89:66:7d:cc:03:28:ac:e2:ee:be:6e:
                    4b:06:cc:45:d3:dc:53:02:ac:0b:be:6d:9b:65:79:
                    74:7b:4f:53:4f:21:17:97:5a:4d:2c:66:d2:11:9b:
                    d2:56:2a:22:c1:df:7d:58:3b:ac:58:86:4b:f5:03:
                    5e:a3:a2:1b:cb:7e:70:3d:da:d7:92:63:96:9d:9b:
                    bf:1a:78:23:c3:c3:31:ee:c3:7c:8c:ae:46:b5:bf:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:59:71:3A:FD:09:94:EB:ED:B8:11:85:8A:A0:7C:84:95:22:3B:66
            X509v3 Authority Key Identifier:
                keyid:FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/323830333a613235303a3a2f33322d3332203d3e20323733313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a250::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:fa:ae:86:ae:5c:12:66:ca:56:8d:78:e2:2e:bc:8e:d3:
         d1:bd:20:2b:a9:59:dc:fa:4e:e4:3a:bb:b0:4c:3a:4d:b2:15:
         34:8d:05:55:ec:54:f0:31:50:60:a4:a3:e2:7e:a1:de:d7:4f:
         91:3a:73:d4:d8:b6:e2:f0:8d:6e:dc:96:eb:d7:94:ca:ca:71:
         65:63:68:b1:e8:68:2f:6c:f6:6e:4d:69:2b:f9:a3:a4:ba:9b:
         08:1d:41:f3:7b:40:18:c0:7c:8a:58:ed:b9:ab:40:f4:86:68:
         d4:53:38:cd:f5:81:46:08:a7:5a:b1:04:88:9f:86:7d:ef:db:
         e6:4b:4a:97:67:28:d2:66:71:60:65:eb:ed:46:c8:a4:4d:83:
         43:27:60:6a:cc:86:7d:65:94:27:7d:c5:09:3c:da:77:97:9f:
         16:f5:08:b9:83:30:b9:8f:64:2c:35:45:cd:46:00:c1:41:3a:
         a2:a2:17:5c:99:44:e2:c8:15:3b:8f:76:a7:82:08:28:40:47:
         74:56:e7:a5:86:8d:15:29:05:ed:25:bb:9b:fe:0a:49:37:b2:
         7b:ae:b2:35:33:df:35:df:e7:0c:39:24:6b:66:7a:8c:ac:3f:
         10:29:f5:c2:f4:5c:97:6c:c9:45:b8:e8:3e:86:68:12:68:6f:
         f2:38:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:58:29 2026 by rpki-client