Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/323830333a633431303a3a2f33322d3332203d3e20323731383531.roa
File:                     323830333a633431303a3a2f33322d3332203d3e20323731383531.roa (raw, json)
Hash identifier:          NCFm3j6bVr1TeGdNmzBu+XDUEoxTKaSP424uW10mYBk=
Subject key identifier:   15:FA:D7:5C:B1:62:7A:A5:24:F6:D6:8B:48:54:14:9C:03:AF:28:8D
Certificate issuer:       /CN=4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC
Certificate serial:       6E53045ED868D1A8B735DAA52E2301812BB1C16F
Authority key identifier: 4F:3C:DC:59:71:3B:A7:8E:CE:BE:5D:1D:61:6E:DE:AA:81:6A:00:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/323830333a633431303a3a2f33322d3332203d3e20323731383531.roa
Signing time:             Tue 10 Feb 2026 01:15:00 +0000
ROA not before:           Tue 10 Feb 2026 01:10:00 +0000
ROA not after:            Tue 09 Feb 2027 01:15:00 +0000
asID:                     271851
IP address blocks:        2803:c410::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 23:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:04:5e:d8:68:d1:a8:b7:35:da:a5:2e:23:01:81:2b:b1:c1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC
        Validity
            Not Before: Feb 10 01:10:00 2026 GMT
            Not After : Feb  9 01:15:00 2027 GMT
        Subject: CN=15FAD75CB1627AA524F6D68B4854149C03AF288D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:48:5d:d0:02:e7:99:5c:bf:54:96:b7:bf:ee:
                    85:02:3e:ba:82:83:70:93:83:6f:52:1d:ba:36:70:
                    a9:6c:da:ca:e9:15:d2:c7:ab:87:01:be:ad:36:6f:
                    4f:8b:2d:43:c1:77:6c:d3:8b:ac:b2:01:0b:ae:a4:
                    10:3a:dc:25:67:48:e6:dc:30:63:fd:85:5f:f4:24:
                    65:1d:53:ae:e1:92:fe:3a:c3:c1:f8:a8:af:58:f5:
                    3d:f3:99:cc:b0:eb:87:be:c1:26:82:5c:75:40:e6:
                    53:9a:5c:09:9b:a2:32:89:64:5e:50:8a:2c:34:c1:
                    5f:c9:4c:0c:2b:e3:a7:a0:a2:0d:f2:c6:f6:4b:c7:
                    c5:c2:f6:c0:c6:cd:3a:93:6e:fe:e1:e4:63:6b:9d:
                    41:9d:81:43:bb:6c:d6:4b:fd:a0:1a:1e:54:ed:5c:
                    0f:f8:fe:13:f0:96:22:44:a2:96:cc:f2:ec:f8:c7:
                    4f:65:d7:90:00:a4:05:a1:7b:2f:06:ae:17:87:e4:
                    77:8d:60:92:85:9f:6e:45:be:70:b0:81:be:10:48:
                    84:49:1d:75:46:24:fa:15:2e:15:b9:47:cc:f7:5e:
                    fa:e3:1e:38:04:fe:61:12:68:8e:75:ac:57:a9:89:
                    ee:c2:60:4b:46:69:4c:c4:96:64:11:8e:ec:ae:98:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FA:D7:5C:B1:62:7A:A5:24:F6:D6:8B:48:54:14:9C:03:AF:28:8D
            X509v3 Authority Key Identifier:
                keyid:4F:3C:DC:59:71:3B:A7:8E:CE:BE:5D:1D:61:6E:DE:AA:81:6A:00:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/323830333a633431303a3a2f33322d3332203d3e20323731383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c410::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:62:d7:32:7f:34:2d:c9:af:58:f1:e2:83:9b:01:42:1d:d6:
         90:4d:dc:41:4b:6a:41:8e:56:cf:3a:b9:12:d5:26:7a:01:e7:
         4d:1f:04:4b:c2:66:96:36:69:c2:27:8c:c6:1c:f9:00:f1:20:
         65:97:26:1e:b6:c2:02:5e:28:77:e4:4b:f0:27:da:60:74:88:
         1d:14:52:63:83:7e:68:01:4c:c9:29:17:d7:bc:80:5d:d4:d1:
         28:9b:ed:fa:80:58:5e:ab:55:ac:c3:da:dc:7d:1e:a7:c9:dd:
         44:d7:8e:c5:9f:78:20:54:ae:33:75:2c:b8:d8:22:93:05:10:
         a9:1a:d4:a4:15:76:e1:d6:de:cd:80:f6:12:fb:38:04:a5:60:
         95:0c:1e:94:dd:a4:12:f4:6d:c4:bd:bb:c7:6f:55:d0:f8:29:
         17:48:53:69:e6:c3:ec:89:36:0d:9a:ea:48:79:11:27:c0:b4:
         b1:df:2a:59:c6:cc:47:99:7d:89:e5:87:10:09:01:6c:c6:2d:
         0f:ad:74:71:84:e1:d6:98:b7:f5:47:d0:3c:bd:d9:b8:85:93:
         15:3e:d3:30:77:31:a5:a5:ab:ab:35:6f:82:77:bc:37:6b:25:
         ec:97:a9:87:56:58:c2:f3:20:e1:85:62:fe:0c:08:d7:11:28:
         f1:52:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:05 2026 by rpki-client