Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa
File:                     323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa (raw, json)
Hash identifier:          TUT4i55jFYSPNePheCdClnnjIJN/j+IKOWQc+vYBSvA=
Subject key identifier:   F6:18:2F:26:56:FB:D3:A3:3B:AF:33:87:36:B0:BA:50:3A:F8:56:A0
Certificate issuer:       /CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
Certificate serial:       201A4D896936AEB8D2D4FF2012FAE81C22C9CA6C
Authority key identifier: D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa
Signing time:             Wed 11 Mar 2026 05:33:30 +0000
ROA not before:           Wed 11 Mar 2026 05:28:30 +0000
ROA not after:            Wed 10 Mar 2027 05:33:30 +0000
asID:                     64120
IP address blocks:        2803:e4d0:a000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:4d:89:69:36:ae:b8:d2:d4:ff:20:12:fa:e8:1c:22:c9:ca:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14
        Validity
            Not Before: Mar 11 05:28:30 2026 GMT
            Not After : Mar 10 05:33:30 2027 GMT
        Subject: CN=F6182F2656FBD3A33BAF338736B0BA503AF856A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:34:b2:ec:68:c1:8d:0f:dc:0b:86:90:9e:
                    d3:30:3c:85:ad:94:07:37:1e:01:16:57:5a:b8:23:
                    67:f1:e9:96:e7:57:fd:db:e4:dd:92:21:b9:e9:a0:
                    f7:0a:95:2c:26:0a:50:32:1b:2c:ea:73:69:85:3e:
                    03:79:48:a7:01:38:a2:2f:b9:4f:bc:f3:4f:ba:36:
                    84:34:ff:d8:87:f3:e5:1a:20:7e:e0:27:03:ca:e6:
                    d5:57:c2:f4:a4:b3:ee:4d:c3:7b:53:93:a9:18:ba:
                    e2:7c:c3:a2:f2:2c:92:8d:b3:17:b4:ff:6b:24:bd:
                    fb:55:19:ed:80:d8:39:45:2f:15:ea:cd:ff:fa:6a:
                    26:ff:ff:d0:04:c6:1f:48:28:17:ee:8e:f8:e3:66:
                    4f:ef:1d:4b:85:03:9f:13:bd:e6:e4:2d:69:08:30:
                    ee:85:fc:74:82:e9:0e:c5:3d:bc:78:2b:90:15:03:
                    a1:6d:be:95:50:17:70:d7:48:1f:1e:c2:03:a6:74:
                    1f:c3:f6:52:0d:c2:8b:02:d0:92:62:ee:09:0d:ed:
                    6d:be:ad:43:40:4b:ff:96:58:21:af:9a:b0:63:91:
                    e3:4f:47:5c:33:b0:24:64:17:e8:9d:74:c7:7f:2a:
                    ac:21:ee:d2:97:16:2f:f4:59:5b:75:a4:c7:82:0c:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:2F:26:56:FB:D3:A3:3B:AF:33:87:36:B0:BA:50:3A:F8:56:A0
            X509v3 Authority Key Identifier:
                keyid:D4:8C:B8:1C:EF:C9:0A:3A:EB:DF:CD:F3:EF:4C:2A:FD:3F:1D:9F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D48CB81CEFC90A3AEBDFCDF3EF4C2AFD3F1D9F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A5DC12EDFB42EE1855524369E7323048D91CC8D10DF89A9754DD12EAFC6C3A/0/323830333a653464303a613030303a3a2f33352d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e4d0:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a9:6f:da:f6:f4:fa:e0:4d:51:d1:78:0a:ae:34:59:46:04:b2:
         5c:d5:68:ea:9d:94:a7:01:f1:21:48:7e:39:d6:57:c4:9a:b9:
         19:35:6d:70:cb:71:5d:0b:1d:5a:77:50:b4:f7:7d:ec:8f:90:
         4b:1c:c3:f1:2d:9f:f2:60:a0:07:65:31:c3:89:73:3e:4e:b4:
         19:72:b6:02:86:ea:46:d3:41:18:2a:7a:ff:05:07:c6:13:3a:
         ba:2e:75:3a:d4:ea:bf:15:0a:91:80:27:c5:27:45:71:0f:ae:
         69:ca:6e:c7:2d:e5:32:f4:a7:b4:b7:7e:23:d6:c1:94:c9:cb:
         10:5a:51:fa:cf:72:ea:de:1c:e0:53:08:af:75:cf:13:6c:88:
         5e:e7:09:9d:56:9b:ca:6f:f0:33:52:0a:f7:32:54:6b:a9:e8:
         f7:0f:43:25:69:52:40:d6:2b:4c:4f:99:04:9c:dc:13:e6:8d:
         55:24:ee:5c:53:1f:4c:c4:81:70:5c:ec:8c:e6:3c:b7:35:2a:
         cc:29:c1:96:9c:d2:d1:02:0c:8a:7d:ae:38:17:24:18:a6:7e:
         cc:3b:ea:84:80:48:a5:87:31:e7:7e:52:1f:88:4a:d6:64:3c:
         c1:20:34:d0:ad:92:44:57:8c:16:b2:e7:5d:0a:ab:fe:4c:ed:
         55:3a:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:03:49 2026 by rpki-client