Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/323830333a633935303a3a2f33322d3438203d3e20323733383334.roa
File:                     323830333a633935303a3a2f33322d3438203d3e20323733383334.roa (raw, json)
Hash identifier:          iFoG/7UimiG9JMBCaDoynEYjjVOdhVU2B5XK3ChnLyg=
Subject key identifier:   3E:B7:96:9C:29:08:53:12:B0:34:51:E2:8F:74:2A:92:A0:E1:B6:87
Certificate issuer:       /CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D
Certificate serial:       118551FD2C61509B176E0D5955229873D17F1388
Authority key identifier: E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/323830333a633935303a3a2f33322d3438203d3e20323733383334.roa
Signing time:             Thu 26 Mar 2026 23:36:11 +0000
ROA not before:           Thu 26 Mar 2026 23:31:11 +0000
ROA not after:            Thu 25 Mar 2027 23:36:11 +0000
asID:                     273834
IP address blocks:        2803:c950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:85:51:fd:2c:61:50:9b:17:6e:0d:59:55:22:98:73:d1:7f:13:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D
        Validity
            Not Before: Mar 26 23:31:11 2026 GMT
            Not After : Mar 25 23:36:11 2027 GMT
        Subject: CN=3EB7969C29085312B03451E28F742A92A0E1B687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:8f:9c:4d:85:87:d9:75:37:8a:c9:e9:67:
                    61:dd:c7:68:f4:30:4f:1f:05:17:79:14:7c:a8:81:
                    de:0e:83:0f:dc:b6:31:e5:a3:b7:26:db:bd:d5:5e:
                    64:79:87:ec:b0:38:dc:d2:21:f9:86:e9:dd:2c:d8:
                    94:54:ef:c1:9d:9d:76:28:c2:ca:66:bd:4c:38:52:
                    af:da:16:a9:0a:e9:a4:46:09:9a:1c:fb:e1:62:6e:
                    30:a7:1e:1d:ac:21:07:be:ed:f2:4c:c1:38:36:57:
                    99:41:6a:56:f1:e2:1d:d7:da:70:92:a2:a4:87:98:
                    d1:85:cc:c3:87:c2:d8:61:a6:88:ef:02:dc:0e:14:
                    97:8f:80:e7:aa:a7:ae:2e:f8:f8:0d:4c:ee:89:e8:
                    40:fc:cd:71:55:ff:5b:67:c3:8b:97:76:72:e8:52:
                    9b:05:f1:06:c2:5c:df:2a:23:c3:09:97:62:a7:d9:
                    ba:5c:2e:1b:ee:17:aa:3c:4a:b3:2c:15:98:72:83:
                    36:5e:40:f6:d6:5f:24:72:19:3d:17:11:76:59:3b:
                    35:7e:20:0e:61:24:44:5c:7d:a1:5b:5c:11:53:20:
                    14:3d:e2:7d:90:46:4a:e0:34:55:7d:a9:75:82:73:
                    8d:20:3d:08:c1:bf:ad:c5:a9:20:ec:1c:94:4b:af:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:96:9C:29:08:53:12:B0:34:51:E2:8F:74:2A:92:A0:E1:B6:87
            X509v3 Authority Key Identifier:
                keyid:E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/323830333a633935303a3a2f33322d3438203d3e20323733383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c950::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:0d:2d:cd:5f:d4:92:e3:c7:5f:e1:da:d8:ee:05:77:16:
         d8:28:f8:24:fb:3d:06:5a:52:fd:d4:f3:67:65:d9:ef:be:69:
         8e:63:6d:ae:de:7e:fc:c2:8e:3f:26:c9:37:20:48:2e:b1:d9:
         eb:e7:35:f5:31:d4:e2:51:9e:77:cd:e6:e0:0d:c7:54:2f:10:
         2b:50:f1:81:b4:44:8a:20:c5:06:b2:71:4c:1a:f9:97:2d:e1:
         82:0e:32:13:30:df:26:24:fc:9f:09:68:ec:38:15:b9:da:22:
         d9:cc:84:58:fa:54:ed:39:57:68:e1:e5:60:54:f4:54:81:67:
         dd:5e:81:33:1e:89:4e:4a:59:b7:32:b7:7f:73:c8:72:f7:66:
         0c:b2:e3:61:89:cd:5c:a6:fc:12:16:42:21:bd:79:32:48:10:
         25:59:6b:5c:f2:80:12:33:d0:8a:7c:24:4a:34:d1:74:32:2b:
         9b:59:79:c9:22:a8:73:a8:51:2c:b5:cd:0b:dd:a4:bc:e0:db:
         30:cb:1a:de:44:ee:99:a3:a7:19:6b:aa:a3:31:de:ae:2e:17:
         ba:1f:8f:98:87:1a:9d:2f:67:32:8d:ac:78:09:8b:a2:39:88:
         01:f8:11:35:9e:be:e4:b3:15:ad:6f:1a:fd:73:d6:8b:d3:51:
         53:6b:a6:b2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEYVR/SxhUJsXbg1ZVSKYc9F/E4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk2NUU1Q0Y5RTEwNzBBNENFMTBGNEE4QkUwMTgzRDgw
NDEzMDE0RDAeFw0yNjAzMjYyMzMxMTFaFw0yNzAzMjUyMzM2MTFaMDMxMTAvBgNV
BAMTKDNFQjc5NjlDMjkwODUzMTJCMDM0NTFFMjhGNzQyQTkyQTBFMUI2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Co+cTYWH2XU3isnpZ2Hdx2j0
ME8fBRd5FHyogd4Ogw/ctjHlo7cm273VXmR5h+ywONzSIfmG6d0s2JRU78GdnXYo
wspmvUw4Uq/aFqkK6aRGCZoc++FibjCnHh2sIQe+7fJMwTg2V5lBalbx4h3X2nCS
oqSHmNGFzMOHwthhpojvAtwOFJePgOeqp64u+PgNTO6J6ED8zXFV/1tnw4uXdnLo
UpsF8QbCXN8qI8MJl2Kn2bpcLhvuF6o8SrMsFZhygzZeQPbWXyRyGT0XEXZZOzV+
IA5hJERcfaFbXBFTIBQ94n2QRkrgNFV9qXWCc40gPQjBv63FqSDsHJRLr9JBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUPreWnCkIUxKwNFHij3QqkqDhtocwHwYDVR0j
BBgwFoAU6WXlz54QcKTOEPSovgGD2AQTAU0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOEEzQTVERTgwOERFNDg4M0ZFQjc1NEZDRDFFOUNDQTlC
OTdDMUFCMDFCMkU2RUU4N0VFMzcyQjBERDNBMTAyLzAvRTk2NUU1Q0Y5RTEwNzBB
NENFMTBGNEE4QkUwMTgzRDgwNDEzMDE0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTY1RTVDRjlFMTA3MEE0Q0Ux
MEY0QThCRTAxODNEODA0MTMwMTRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjhBM0E1REU4MDhERTQ4ODNGRUI3NTRGQ0QxRTlDQ0E5Qjk3QzFBQjAx
QjJFNkVFODdFRTM3MkIwREQzQTEwMi8wLzMyMzgzMDMzM2E2MzM5MzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM4MzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDyVAw
DQYJKoZIhvcNAQELBQADggEBAHDoDS3NX9SS48df4drY7gV3Ftgo+CT7PQZaUv3U
82dl2e++aY5jba7efvzCjj8myTcgSC6x2evnNfUx1OJRnnfN5uANx1QvECtQ8YG0
RIogxQaycUwa+Zct4YIOMhMw3yYk/J8JaOw4FbnaItnMhFj6VO05V2jh5WBU9FSB
Z91egTMeiU5KWbcyt39zyHL3Zgyy42GJzVym/BIWQiG9eTJIECVZa1zygBIz0Ip8
JEo00XQyK5tZeckiqHOoUSy1zQvdpLzg2zDLGt5E7pmjpxlrqqMx3q4uF7ofj5iH
Gp0vZzKNrHgJi6I5iAH4ETWevuSzFa1vGv1z1ovTUVNrprI=
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:18:41 2026 by rpki-client