Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/323830333a363234303a3a2f33322d3531203d3e20323633383036.roa
File:                     323830333a363234303a3a2f33322d3531203d3e20323633383036.roa (raw, json)
Hash identifier:          Sw7arR1iGxyp8FBXPkYyTCrwxImIEuhSQgJHR5zANWw=
Subject key identifier:   3A:C9:58:2F:1B:86:AC:23:E9:83:C1:7C:B6:E8:43:53:D9:3F:2A:B0
Certificate issuer:       /CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66
Certificate serial:       3E3C17E57D1EB7321C16AFC43064520179EC6718
Authority key identifier: 87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/323830333a363234303a3a2f33322d3531203d3e20323633383036.roa
Signing time:             Thu 12 Mar 2026 15:33:39 +0000
ROA not before:           Thu 12 Mar 2026 15:28:39 +0000
ROA not after:            Thu 11 Mar 2027 15:33:39 +0000
asID:                     263806
IP address blocks:        2803:6240::/32 maxlen: 51
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3c:17:e5:7d:1e:b7:32:1c:16:af:c4:30:64:52:01:79:ec:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66
        Validity
            Not Before: Mar 12 15:28:39 2026 GMT
            Not After : Mar 11 15:33:39 2027 GMT
        Subject: CN=3AC9582F1B86AC23E983C17CB6E84353D93F2AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:f6:eb:a3:1c:f5:0b:d8:dd:f2:ab:96:2c:
                    76:24:d1:d5:04:27:53:ae:a4:cb:20:05:69:8c:97:
                    fd:8f:8f:26:18:6f:b2:58:51:fb:4c:47:4c:73:10:
                    79:ea:85:a9:74:e3:11:ad:21:c1:68:c1:a0:cc:42:
                    34:eb:2e:91:8a:0e:6a:11:22:84:94:d4:cd:58:00:
                    b8:c7:ea:00:d5:6e:d2:a8:74:91:c8:46:45:4d:6b:
                    41:a7:48:b4:ee:1b:16:dd:20:b9:95:23:cf:d5:b0:
                    00:f3:23:1a:e0:f2:07:81:55:53:c4:6f:77:8e:23:
                    12:8f:0d:6a:33:4d:9b:cb:a9:3c:0f:cb:24:c6:c8:
                    0f:f7:c1:5b:d5:0e:87:b0:7a:79:b0:c2:1d:bb:e8:
                    66:43:75:47:a1:fd:69:68:67:e0:87:b3:3f:4b:b5:
                    f5:6b:75:7f:e6:99:1a:7e:c4:de:69:bd:3a:27:cd:
                    80:a8:4c:73:cd:36:89:a9:5e:9b:b2:5d:ea:e3:12:
                    8c:40:48:ac:f4:53:fc:b2:df:ab:30:26:b0:35:75:
                    78:b8:bb:ce:85:0e:16:b7:31:fd:69:6e:9a:5f:b5:
                    3a:7f:67:ab:dc:29:99:7f:b3:d9:d1:3b:d8:91:4e:
                    dd:82:e7:41:0b:d7:cd:37:bc:ba:6b:23:7b:b7:c1:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C9:58:2F:1B:86:AC:23:E9:83:C1:7C:B6:E8:43:53:D9:3F:2A:B0
            X509v3 Authority Key Identifier:
                keyid:87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/323830333a363234303a3a2f33322d3531203d3e20323633383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6240::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:29:24:17:52:89:a5:be:f9:8b:0b:41:68:3a:31:11:fe:d6:
         5d:98:a4:56:c2:39:3d:99:cd:bf:34:76:7b:3f:40:c3:78:ba:
         25:1f:39:56:a7:93:c1:1e:b3:1c:56:d2:a9:f8:c5:94:43:63:
         84:c1:9e:87:fa:b2:7f:5c:a9:65:d5:dd:0d:62:06:b4:18:0b:
         02:53:b0:36:8b:65:8e:c1:87:79:fa:72:55:ff:70:38:b8:66:
         43:22:16:3f:2f:c9:78:eb:fa:89:58:00:f2:eb:b2:86:e1:a7:
         b4:e1:f3:90:10:10:54:f0:c3:d7:44:f4:19:e1:97:00:9f:f6:
         e6:ae:b8:89:32:2d:f6:4c:3b:37:a7:4a:76:45:70:57:ff:bd:
         b5:00:63:8a:98:3c:f3:72:9b:8a:88:55:a1:6f:ef:5e:33:05:
         a7:51:33:13:40:e6:e5:1b:63:85:80:db:fd:07:25:09:4e:9a:
         1f:ea:35:4e:63:ae:6d:78:41:05:02:d9:b0:57:49:ce:81:76:
         b2:d2:40:e0:ba:3c:cb:7c:72:f9:8d:0c:bc:91:c3:09:51:3f:
         b1:9d:f7:3b:73:da:b4:2f:ac:84:16:85:e4:c1:4c:4e:37:a2:
         d9:e3:43:bb:3d:6e:d3:fc:b9:f0:b3:21:3a:86:84:e2:ae:be:
         94:ca:53:a4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUPjwX5X0etzIcFq/EMGRSAXnsZxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1OTQwQzRGOUI1Q0QzQzFFMTU1ODVBNEI5QjFGRjRC
REU5QkQ2NjAeFw0yNjAzMTIxNTI4MzlaFw0yNzAzMTExNTMzMzlaMDMxMTAvBgNV
BAMTKDNBQzk1ODJGMUI4NkFDMjNFOTgzQzE3Q0I2RTg0MzUzRDkzRjJBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Rfbroxz1C9jd8quWLHYk0dUE
J1OupMsgBWmMl/2PjyYYb7JYUftMR0xzEHnqhal04xGtIcFowaDMQjTrLpGKDmoR
IoSU1M1YALjH6gDVbtKodJHIRkVNa0GnSLTuGxbdILmVI8/VsADzIxrg8geBVVPE
b3eOIxKPDWozTZvLqTwPyyTGyA/3wVvVDoewenmwwh276GZDdUeh/WloZ+CHsz9L
tfVrdX/mmRp+xN5pvTonzYCoTHPNNompXpuyXerjEoxASKz0U/yy36swJrA1dXi4
u86FDha3Mf1pbppftTp/Z6vcKZl/s9nRO9iRTt2C50EL1803vLprI3u3wSztAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOslYLxuGrCPpg8F8tuhDU9k/KrAwHwYDVR0j
BBgwFoAUh1lAxPm1zTweFVhaS5sf9L3pvWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNEJBMzM2M0NDRUUwMDBEMjFFMTI2REQyQjQ3MDExNjc5
RDQ4NzY4REE4MUQ4NDIyMTg0N0I1N0M0RTAxMjJBLzAvODc1OTQwQzRGOUI1Q0Qz
QzFFMTU1ODVBNEI5QjFGRjRCREU5QkQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzU5NDBDNEY5QjVDRDNDMUUx
NTU4NUE0QjlCMUZGNEJERTlCRDY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzRCQTMzNjNDQ0VFMDAwRDIxRTEyNkREMkI0NzAxMTY3OUQ0ODc2OERB
ODFEODQyMjE4NDdCNTdDNEUwMTIyQS8wLzMyMzgzMDMzM2EzNjMyMzQzMDNhM2Ey
ZjMzMzIyZDM1MzEyMDNkM2UyMDMyMzYzMzM4MzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDYkAw
DQYJKoZIhvcNAQELBQADggEBAGApJBdSiaW++YsLQWg6MRH+1l2YpFbCOT2Zzb80
dns/QMN4uiUfOVank8EesxxW0qn4xZRDY4TBnof6sn9cqWXV3Q1iBrQYCwJTsDaL
ZY7Bh3n6clX/cDi4ZkMiFj8vyXjr+olYAPLrsobhp7Th85AQEFTww9dE9BnhlwCf
9uauuIkyLfZMOzenSnZFcFf/vbUAY4qYPPNym4qIVaFv714zBadRMxNA5uUbY4WA
2/0HJQlOmh/qNU5jrm14QQUC2bBXSc6BdrLSQOC6PMt8cvmNDLyRwwlRP7Gd9ztz
2rQvrIQWheTBTE43otnjQ7s9btP8ufCzITqGhOKuvpTKU6Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:50 2026 by rpki-client