Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3430203d3e203532333831.roa
File:                     323830333a6130303a3a2f33322d3430203d3e203532333831.roa (raw, json)
Hash identifier:          4Gel5BuD5qwEpBXMsyUrqo4PtNyPG1kJMpGlR9pZvJA=
Subject key identifier:   34:DA:0A:0F:7D:41:12:EE:13:F9:68:C3:AC:30:AD:C3:22:44:D2:C6
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       06D7CC08E2639927BB3014185A146BE9D5D7355E
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3430203d3e203532333831.roa
Signing time:             Fri 06 Feb 2026 12:50:00 +0000
ROA not before:           Fri 06 Feb 2026 12:45:00 +0000
ROA not after:            Fri 05 Feb 2027 12:50:00 +0000
asID:                     52381
IP address blocks:        2803:a00::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d7:cc:08:e2:63:99:27:bb:30:14:18:5a:14:6b:e9:d5:d7:35:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Feb  6 12:45:00 2026 GMT
            Not After : Feb  5 12:50:00 2027 GMT
        Subject: CN=34DA0A0F7D4112EE13F968C3AC30ADC32244D2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:92:12:45:f5:53:1d:7b:43:7d:90:1e:da:
                    83:c2:5c:df:77:8c:de:d3:d0:f7:58:9e:53:66:40:
                    f9:9a:35:59:b9:4a:b0:a8:82:5b:f8:ea:f5:07:ce:
                    d7:d2:57:2d:ae:05:97:e0:3e:af:24:e5:0d:77:9a:
                    19:af:9f:63:07:87:9b:5c:7f:c0:2e:fa:e8:ad:2c:
                    ae:c5:7b:96:65:6d:da:1e:33:c2:73:5f:c0:69:45:
                    65:dd:03:b4:80:e7:a8:20:e2:64:37:32:a3:3d:2f:
                    b3:db:d8:a2:9f:db:ef:2c:5b:77:2f:61:b4:7f:e3:
                    a0:bb:c1:1c:58:4b:10:24:64:2a:01:a7:1e:c6:21:
                    50:7f:ab:7a:05:8b:ec:e0:df:7c:b1:2e:08:94:80:
                    07:a0:a6:d1:e4:bd:b2:f4:62:84:16:49:c1:66:be:
                    f0:88:4c:a4:e7:21:51:26:49:ab:79:4a:6c:08:58:
                    73:6a:5c:58:16:56:48:02:18:52:8c:57:15:86:e7:
                    4b:51:32:30:2e:65:3b:9e:17:9a:24:60:df:bc:02:
                    4f:fe:ce:59:5a:a5:22:24:7b:72:d4:a9:98:d5:6a:
                    95:ec:05:24:34:33:c4:8a:cd:db:e0:23:f1:56:ca:
                    58:e7:a8:03:ab:7c:e9:84:e6:16:09:dc:3a:ca:e9:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:0A:0F:7D:41:12:EE:13:F9:68:C3:AC:30:AD:C3:22:44:D2:C6
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3430203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:56:1a:0f:6d:6b:69:7b:1b:5e:7a:35:c5:b2:a9:c1:38:
         76:c6:1f:8c:3a:16:5b:4c:6a:8d:28:75:cc:a9:8f:d7:74:7b:
         41:46:c9:e2:f2:5a:23:07:a1:e6:9b:02:0c:d0:95:34:1f:c5:
         1e:03:0f:ae:ee:c8:e8:d9:f4:5d:6e:f3:e2:5c:75:dd:08:9c:
         b7:eb:47:8f:15:2d:5c:58:77:bd:f4:17:00:48:92:23:ec:ae:
         be:c6:03:54:b8:7e:d4:38:a0:06:b9:6c:cf:c0:c5:9f:f4:16:
         d8:09:7e:60:85:bc:57:03:41:52:77:f4:83:5c:94:b1:05:fa:
         99:87:1a:8b:d7:27:08:4a:60:4c:15:65:47:19:fb:d3:3b:87:
         6c:d5:e9:4d:8a:5a:30:47:9f:7a:f4:1b:8c:97:73:5d:ec:ff:
         be:d2:44:1a:4b:7c:f8:55:fc:22:3a:ae:06:d7:56:68:4b:6e:
         b0:17:dc:16:d9:d4:8a:fa:37:f4:4f:bc:3b:08:a3:37:0a:c5:
         0d:c9:62:e3:37:d3:fd:0e:e3:8c:2e:26:d5:c0:dd:0e:e4:23:
         f0:3e:30:9b:83:86:e1:db:d8:17:d0:7f:9b:85:ee:25:0d:d7:
         68:43:33:e3:cd:90:dc:9a:5a:73:df:c0:7a:3a:db:f3:68:8f:
         a3:05:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:23:32 2026 by rpki-client