Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/323830333a623932303a3a2f33322d3438203d3e20323636363737.roa
File:                     323830333a623932303a3a2f33322d3438203d3e20323636363737.roa (raw, json)
Hash identifier:          P64nPBqQCrRIn31Ii1ZKixZ7m28iNPw5/0NhLnfpSm8=
Subject key identifier:   C2:F1:C3:37:38:4C:55:83:D1:EF:CC:39:C2:D0:D1:3E:5F:A8:02:EE
Certificate issuer:       /CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
Certificate serial:       40459BF6BC50273A62FCEE8C3F558A396FACC394
Authority key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/323830333a623932303a3a2f33322d3438203d3e20323636363737.roa
Signing time:             Thu 30 Apr 2026 21:40:35 +0000
ROA not before:           Thu 30 Apr 2026 21:35:35 +0000
ROA not after:            Thu 29 Apr 2027 21:40:35 +0000
asID:                     266677
IP address blocks:        2803:b920::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 20:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:45:9b:f6:bc:50:27:3a:62:fc:ee:8c:3f:55:8a:39:6f:ac:c3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
        Validity
            Not Before: Apr 30 21:35:35 2026 GMT
            Not After : Apr 29 21:40:35 2027 GMT
        Subject: CN=C2F1C337384C5583D1EFCC39C2D0D13E5FA802EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:69:4d:f4:30:28:a4:de:ff:45:27:96:5b:
                    61:b3:bd:96:ba:71:1d:2b:95:a8:75:5b:a3:79:29:
                    1c:a0:c9:4c:b6:a6:03:54:0e:7e:88:5f:37:05:d1:
                    17:49:5e:1f:12:31:e4:ba:ea:b0:24:2c:ee:cb:ed:
                    a8:50:f8:58:8b:08:30:e3:b2:ed:48:b9:c2:cf:ad:
                    ea:f6:8b:3a:17:60:d5:94:0b:7c:a6:a6:f8:26:6d:
                    bd:89:26:24:da:fe:93:9a:c2:3b:24:03:84:02:0a:
                    7d:dc:7c:a9:66:0e:79:a4:63:bc:a5:2d:d0:d9:43:
                    84:3b:35:c8:be:30:92:7c:7b:c9:75:30:f6:18:53:
                    ee:d2:dc:e0:d5:97:35:28:c8:af:61:85:49:4a:74:
                    51:06:36:3d:a6:8d:f2:d2:f6:98:86:29:f5:c2:d1:
                    84:55:37:93:52:0a:08:1d:fc:d4:2d:15:61:37:3f:
                    97:c0:bc:96:3e:e2:2e:3f:d9:95:c8:d4:c2:22:68:
                    5c:57:94:89:b6:20:39:5e:9a:b7:e7:8b:76:fb:4c:
                    29:ff:4d:ef:05:af:94:d2:55:38:fa:9a:b7:3f:e9:
                    35:e3:2a:d9:a0:1a:6e:21:6b:44:c5:3d:d2:65:bb:
                    3e:03:21:07:84:f5:d8:21:17:30:4c:47:93:b9:55:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F1:C3:37:38:4C:55:83:D1:EF:CC:39:C2:D0:D1:3E:5F:A8:02:EE
            X509v3 Authority Key Identifier:
                keyid:3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/323830333a623932303a3a2f33322d3438203d3e20323636363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b920::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:c1:9f:bd:f2:7e:cf:28:64:bb:cb:73:0f:e8:64:83:52:
         af:97:a4:2c:e5:46:7e:d6:58:86:c5:53:e8:2d:09:f7:43:14:
         06:c3:93:b2:11:75:62:9a:eb:a8:51:63:61:c1:0d:00:bf:ee:
         bd:04:35:b9:2e:a9:5a:2b:a5:26:43:cd:9c:d8:15:c3:61:e3:
         24:34:9e:fe:98:34:13:cd:c5:f9:21:71:aa:cd:f1:b6:57:d9:
         c9:1a:cd:da:e2:11:2c:3d:ff:fb:f5:b3:08:1b:c9:14:70:d4:
         65:f4:4b:c8:05:0c:4c:e1:7b:58:97:9a:be:c4:79:fb:92:b8:
         b3:d6:37:66:41:d6:79:20:46:fa:0c:45:09:14:8d:68:03:e0:
         54:1f:15:a8:bc:cf:c6:65:f1:0e:55:fe:c8:8a:dc:86:9c:e3:
         16:04:33:ed:5e:3d:55:c1:65:cd:1e:1e:e6:c1:22:6c:5d:b9:
         4e:8b:c0:f2:06:7c:d2:1b:e3:c6:ca:79:18:f8:53:c3:44:fc:
         79:2e:5a:63:90:21:a9:1f:b9:94:7e:06:47:ad:4f:d8:0d:7c:
         b6:73:42:80:2a:cc:3b:1f:0d:a8:95:ba:e3:f2:54:fe:b4:50:
         ef:20:50:e6:8c:9d:12:f0:fd:d7:c1:2c:cd:d0:cb:bb:84:44:
         71:03:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:21:27 2026 by rpki-client