Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          olzIwKdyX7MapcN2ERNashwG4y4tyn9V/JVJroEDA3I=
Subject key identifier:   5D:58:D1:A9:89:1D:06:0B:1A:68:5A:F5:48:4C:3A:8D:BE:D9:26:B3
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       3A9105F5239E26DD6003BB93A38D954279967888
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 20 Mar 2026 03:35:18 +0000
ROA not before:           Fri 20 Mar 2026 03:30:18 +0000
ROA not after:            Fri 19 Mar 2027 03:35:18 +0000
asID:                     272869
IP address blocks:        2803:7290:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:91:05:f5:23:9e:26:dd:60:03:bb:93:a3:8d:95:42:79:96:78:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar 20 03:30:18 2026 GMT
            Not After : Mar 19 03:35:18 2027 GMT
        Subject: CN=5D58D1A9891D060B1A685AF5484C3A8DBED926B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:dd:18:b0:14:48:e4:db:4c:00:b3:5b:13:
                    ef:92:4b:95:55:f2:2f:1c:f8:d4:47:f8:06:e9:7f:
                    8c:7f:c0:e9:e6:cd:98:f1:63:5a:6c:23:62:1a:ef:
                    4e:01:79:45:8e:e7:a6:79:c2:d3:c5:33:4f:08:b2:
                    92:46:06:16:3e:ff:cc:ab:bf:37:d8:a4:d3:fb:00:
                    0d:2e:d9:c9:dc:bf:a1:a1:15:8a:a8:c5:1a:26:7a:
                    b8:2c:95:a7:31:24:fe:22:09:b0:36:a8:09:2d:ee:
                    85:bc:96:43:58:85:65:96:b6:e6:be:05:cf:b6:00:
                    46:c8:7e:87:92:d2:a6:20:1a:e9:33:1b:78:97:67:
                    0e:39:7c:e2:2e:40:c9:9e:7f:d9:14:93:42:50:e6:
                    3a:29:55:44:8a:42:ee:20:f2:8b:97:4d:aa:0d:87:
                    55:10:5d:08:14:30:ff:fd:9c:c9:b2:30:66:53:7a:
                    9b:76:ea:ba:f2:17:fb:ad:49:16:e0:16:88:71:43:
                    30:b2:a2:ef:21:27:45:af:82:a8:60:c0:06:e0:7c:
                    8a:22:12:5b:d6:86:8e:73:9a:91:94:87:fa:f3:da:
                    43:49:8f:50:ba:36:03:73:99:b9:92:90:d0:62:df:
                    c4:d5:c3:dd:05:1d:a0:10:eb:d0:35:b4:71:64:25:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:D1:A9:89:1D:06:0B:1A:68:5A:F5:48:4C:3A:8D:BE:D9:26:B3
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:47:44:73:73:59:b3:0d:ff:10:5c:1a:c3:b0:51:dc:d7:92:
         08:e2:60:89:5a:d2:f2:af:20:52:69:ae:5a:1c:e0:a7:5e:87:
         8b:0b:62:19:cb:e7:f7:20:90:e9:02:98:0f:9b:11:86:9b:17:
         03:f4:53:c3:51:1e:62:a0:ad:5e:e3:73:29:ae:ad:93:28:28:
         c8:5f:53:c1:a1:59:7d:0e:25:19:16:1b:06:ce:63:eb:b3:c7:
         28:c7:09:ec:4a:86:79:02:dc:ce:5f:63:b8:a5:12:c2:f0:88:
         dc:32:b6:6b:5e:28:e3:98:be:df:9c:df:89:d7:01:d2:e7:bb:
         f1:cf:5a:b2:ee:21:22:3e:b5:6f:9f:9f:09:2b:cc:50:58:c6:
         96:b4:28:03:49:87:33:88:12:b8:be:d1:92:78:d1:4a:5d:e9:
         06:f9:a5:9b:ed:38:bd:e3:93:22:9a:55:af:fc:26:8d:a8:2e:
         95:08:90:f3:84:4a:61:f2:88:fc:00:5a:80:59:3c:91:1d:f0:
         7d:0b:5b:cd:9e:cd:30:f7:49:ca:db:26:4f:14:fa:5c:33:84:
         48:17:56:22:ee:ef:ac:da:4b:ba:6e:dd:81:04:11:78:14:4d:
         91:3c:02:17:23:35:8e:0a:fe:39:62:19:38:dc:1c:1a:84:ed:
         16:7b:62:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:38 2026 by rpki-client