Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          Wjm6BzjbZ9O4h1BrHEFDV0jo90Et4jUYmRqDPnIsV1k=
Subject key identifier:   F0:3E:DC:45:A3:DA:54:77:3F:A2:79:95:05:87:1C:AE:59:DC:EA:18
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       133A226E52625723FB404164BA4EBF85B3C338EE
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 20 Mar 2026 03:35:17 +0000
ROA not before:           Fri 20 Mar 2026 03:30:17 +0000
ROA not after:            Fri 19 Mar 2027 03:35:17 +0000
asID:                     272869
IP address blocks:        2803:7290:1a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3a:22:6e:52:62:57:23:fb:40:41:64:ba:4e:bf:85:b3:c3:38:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar 20 03:30:17 2026 GMT
            Not After : Mar 19 03:35:17 2027 GMT
        Subject: CN=F03EDC45A3DA54773FA2799505871CAE59DCEA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:57:d2:4f:5c:ec:83:4a:a3:f4:60:3f:47:
                    dc:22:40:57:6f:29:a4:1b:28:36:35:84:55:cb:b0:
                    15:d0:cc:31:6a:b1:bf:6b:cb:f5:9e:ac:73:4d:81:
                    0f:a3:82:51:50:c6:d8:13:be:d7:8c:a5:ac:db:1b:
                    a4:45:15:5b:c1:fe:8f:ea:8f:b7:85:76:b9:e7:fb:
                    3e:4f:54:19:95:fa:4f:8c:7b:c7:88:32:d6:0b:b7:
                    35:5e:84:7a:fa:27:9c:aa:8d:aa:50:dc:6f:2c:1a:
                    ce:fb:23:bf:d7:b9:f6:9e:88:eb:5a:7c:d5:a0:0b:
                    5d:11:57:1b:35:9b:52:9b:80:56:bf:ca:44:02:be:
                    a0:39:a5:26:d9:2e:f7:b0:8e:b4:56:34:a1:9f:6e:
                    a4:d9:29:f9:a8:48:df:d2:3b:8f:b7:30:f7:3b:1f:
                    cc:28:2a:60:36:73:a9:32:6f:23:4d:23:c4:80:3b:
                    ad:11:21:53:4d:8d:57:a7:d4:64:60:15:10:dd:70:
                    95:db:f2:bf:67:77:07:ad:89:9f:8e:24:09:a7:ab:
                    13:bb:31:88:ae:f3:e3:69:76:dd:30:bc:27:d6:6d:
                    a9:39:f8:df:e7:08:ec:ce:18:46:bb:12:2c:0c:41:
                    1f:64:c6:22:94:3c:83:5b:09:ee:9a:20:9f:57:73:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:DC:45:A3:DA:54:77:3F:A2:79:95:05:87:1C:AE:59:DC:EA:18
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:c9:c6:c6:1f:7e:56:f5:b5:b5:e3:42:12:14:fc:fa:dc:
         ad:68:76:25:c0:b5:de:86:8e:d0:59:cf:86:fb:0e:c4:3e:34:
         81:dd:57:8b:ea:2e:5a:03:3d:48:79:2e:db:b1:74:7e:b8:54:
         a5:44:c1:5f:7e:5f:bb:00:58:4a:22:72:16:00:c9:dd:24:e8:
         95:b7:ad:a5:1e:41:85:0a:ea:1e:5c:c2:2c:05:b1:0e:da:65:
         7a:b1:fc:d3:e9:81:30:cb:04:9e:e6:d9:93:db:2e:37:dc:75:
         7d:4f:cd:5d:93:72:68:77:82:2b:65:13:b0:44:85:3b:45:b2:
         5f:f4:14:02:bc:d6:32:1c:b1:08:6e:2b:8f:bf:88:58:77:76:
         00:d1:30:9f:1e:f4:7b:ff:3e:0f:b0:ad:0c:ae:48:f2:de:24:
         85:3f:76:53:bc:37:45:59:50:da:4f:65:32:91:39:c9:5a:b0:
         f5:cc:c9:48:f3:14:78:7c:b4:25:3e:67:c9:cf:9a:d3:7a:ec:
         5a:76:b6:83:2a:ec:78:e7:e3:5a:d2:d3:58:4d:30:48:00:3e:
         62:d2:1a:f9:98:a0:8a:00:86:e4:5f:e8:36:24:b9:26:88:80:
         e7:4d:ec:b6:95:fa:7f:32:30:68:23:f7:ec:90:7c:64:9f:37:
         47:9c:2f:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:36:25 2026 by rpki-client