Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135710AFAD5A5C7EC10795E57FA5039913B227CD339028AC8FD92B47285FBA9D/0/323830333a333339303a3a2f33322d3438203d3e20323733303234.roa
File:                     323830333a333339303a3a2f33322d3438203d3e20323733303234.roa (raw, json)
Hash identifier:          oQb/6ArnGzFD7nBx46ep3AxXNFSoIQgkCXpV0UiOS3U=
Subject key identifier:   63:C3:D1:DB:92:00:5D:39:10:42:BA:84:73:8F:9F:88:E7:9D:14:3D
Certificate issuer:       /CN=E35225A0171F3513D60D140E879C743819496FF8
Certificate serial:       56FC9C3F40B3C1EC994FB5F726BE12D2059867A2
Authority key identifier: E3:52:25:A0:17:1F:35:13:D6:0D:14:0E:87:9C:74:38:19:49:6F:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35225A0171F3513D60D140E879C743819496FF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135710AFAD5A5C7EC10795E57FA5039913B227CD339028AC8FD92B47285FBA9D/0/323830333a333339303a3a2f33322d3438203d3e20323733303234.roa
Signing time:             Thu 12 Feb 2026 12:55:00 +0000
ROA not before:           Thu 12 Feb 2026 12:50:00 +0000
ROA not after:            Thu 11 Feb 2027 12:55:00 +0000
asID:                     273024
IP address blocks:        2803:3390::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/135710AFAD5A5C7EC10795E57FA5039913B227CD339028AC8FD92B47285FBA9D/0/E35225A0171F3513D60D140E879C743819496FF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/135710AFAD5A5C7EC10795E57FA5039913B227CD339028AC8FD92B47285FBA9D/0/E35225A0171F3513D60D140E879C743819496FF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35225A0171F3513D60D140E879C743819496FF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 14:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fc:9c:3f:40:b3:c1:ec:99:4f:b5:f7:26:be:12:d2:05:98:67:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35225A0171F3513D60D140E879C743819496FF8
        Validity
            Not Before: Feb 12 12:50:00 2026 GMT
            Not After : Feb 11 12:55:00 2027 GMT
        Subject: CN=63C3D1DB92005D391042BA84738F9F88E79D143D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:28:9c:e2:49:fc:d6:1b:48:9e:8f:7a:0b:
                    68:0d:99:1a:e6:a8:7f:66:dd:21:18:8c:bd:8c:ff:
                    8e:d3:c8:e7:bc:f7:e8:a7:2f:0a:43:07:7f:85:98:
                    1e:be:fa:d8:86:03:56:39:a8:b9:c7:1e:c6:b7:ab:
                    ab:f6:05:ef:1a:83:6c:7f:01:4d:89:2f:b7:7b:ff:
                    75:ff:02:83:38:e5:56:e8:3c:f2:57:d8:a2:86:ea:
                    10:e2:bb:8f:83:e1:83:74:b8:88:1f:12:e3:7f:fe:
                    38:d3:64:4b:50:a3:b1:b1:c1:1d:c4:49:87:ce:35:
                    61:75:ca:ab:92:ab:f8:6e:d9:9e:4a:f6:c5:32:7d:
                    33:f2:0b:4c:8b:86:dd:0a:d9:c1:23:0c:ab:ce:f4:
                    9e:c6:85:6b:d9:a3:73:42:d3:02:dd:78:fb:b0:20:
                    6f:dc:56:46:94:c9:3c:e7:66:bc:ba:c1:6d:aa:09:
                    71:2a:82:b0:1e:19:c3:7b:fd:cd:57:fc:80:39:4a:
                    57:03:db:1a:87:05:bc:15:be:ee:7e:98:b0:5e:10:
                    24:fd:95:e0:49:2b:65:09:71:9f:42:80:fc:85:bb:
                    c3:4f:4b:e9:a0:52:fe:5e:13:94:00:b9:5f:68:f4:
                    29:d8:d8:ee:4c:4a:18:44:d8:fc:d6:3e:c6:37:be:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C3:D1:DB:92:00:5D:39:10:42:BA:84:73:8F:9F:88:E7:9D:14:3D
            X509v3 Authority Key Identifier:
                keyid:E3:52:25:A0:17:1F:35:13:D6:0D:14:0E:87:9C:74:38:19:49:6F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135710AFAD5A5C7EC10795E57FA5039913B227CD339028AC8FD92B47285FBA9D/0/E35225A0171F3513D60D140E879C743819496FF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35225A0171F3513D60D140E879C743819496FF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135710AFAD5A5C7EC10795E57FA5039913B227CD339028AC8FD92B47285FBA9D/0/323830333a333339303a3a2f33322d3438203d3e20323733303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3390::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:4d:69:86:61:d3:2d:5c:9a:e8:3a:e7:80:22:e1:3b:b5:c3:
         7e:e3:a8:1f:03:8e:ba:d7:56:c4:62:f9:f5:53:28:98:c4:10:
         5e:85:7f:4d:a4:2b:8f:f0:30:f5:b1:b6:d4:d3:a5:26:5f:ae:
         87:be:2e:a5:e6:18:b9:bf:f3:c9:3e:36:10:ea:a4:67:e0:03:
         86:71:c3:5a:49:8a:4f:cd:c5:b7:49:3b:3d:4d:2c:35:46:77:
         bf:24:9b:cd:2f:69:59:c6:9b:81:d1:19:68:2b:dd:7a:cb:ae:
         0b:60:1a:e0:d0:53:5f:9a:11:f2:50:21:41:82:28:c8:27:e4:
         8e:44:28:dd:74:4b:4c:9a:78:60:60:0e:1b:e5:e0:2e:bf:25:
         bf:b7:c2:2d:af:7f:e8:7e:94:33:55:24:7d:b4:0b:cf:c3:20:
         9f:46:ff:4f:20:b5:ce:49:2e:65:26:c6:2c:c0:0c:37:b1:69:
         aa:a6:f5:b5:b3:cf:16:7c:3c:03:95:2e:9b:47:53:f3:d3:c6:
         c1:01:5c:bf:db:5a:34:4a:4e:8a:78:62:5d:10:f0:3e:c9:ef:
         4c:49:46:0a:ea:59:4d:98:2c:d2:cf:1a:2d:b5:9b:ad:57:d3:
         13:95:88:4f:cc:54:96:30:72:15:10:e0:ed:6c:76:93:97:a7:
         92:61:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:53:23 2026 by rpki-client