Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a313030303a3a2f33362d3438203d3e20323635373232.roa
File:                     323830333a616463303a313030303a3a2f33362d3438203d3e20323635373232.roa (raw, json)
Hash identifier:          V1dglE0FJSUTL8H1VwYEGbQqsRTW4x3jY4tngeJLYrQ=
Subject key identifier:   08:E1:31:F1:6D:89:09:CA:15:25:4D:01:DA:51:A7:0E:86:02:1A:FE
Certificate issuer:       /CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
Certificate serial:       3B54CED81E90A8C4878018B5CD686DB2C56DFD62
Authority key identifier: FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a313030303a3a2f33362d3438203d3e20323635373232.roa
Signing time:             Wed 13 May 2026 15:42:18 +0000
ROA not before:           Wed 13 May 2026 15:37:18 +0000
ROA not after:            Wed 12 May 2027 15:42:18 +0000
asID:                     265722
IP address blocks:        2803:adc0:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:54:ce:d8:1e:90:a8:c4:87:80:18:b5:cd:68:6d:b2:c5:6d:fd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
        Validity
            Not Before: May 13 15:37:18 2026 GMT
            Not After : May 12 15:42:18 2027 GMT
        Subject: CN=08E131F16D8909CA15254D01DA51A70E86021AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:db:78:3a:9c:78:40:75:8f:32:96:a4:01:
                    b7:9a:a6:60:14:d1:a9:0d:f7:da:8d:ea:0b:1f:d2:
                    9a:94:7c:c8:cf:7b:45:de:e3:07:47:54:0d:98:36:
                    7b:ce:0d:11:16:a9:64:f1:b6:b3:48:fd:3e:34:a6:
                    db:b8:47:3b:59:35:38:a7:32:4d:20:6f:23:f0:bf:
                    6f:67:55:e7:b9:4a:35:38:5d:27:02:68:eb:90:7e:
                    79:2b:7f:05:fd:33:9a:ea:fa:9d:81:d9:dd:b3:35:
                    5b:17:12:e2:52:6b:92:50:37:7b:38:36:bd:0e:2a:
                    4a:04:4d:be:f7:41:fa:ec:7b:96:f4:a7:7b:1a:c3:
                    43:e4:cb:f8:a5:7a:c4:fb:bc:b2:72:22:58:d2:f1:
                    1c:09:b0:19:5e:c3:8d:42:f4:4d:d0:5c:47:84:29:
                    0a:f9:1c:08:e8:af:f5:42:ca:a5:92:58:bd:81:b4:
                    db:b1:24:c7:f7:dd:64:54:bc:2a:20:d1:50:73:81:
                    e5:aa:da:0a:79:e8:e4:26:8f:8c:c7:3b:e7:fc:09:
                    83:be:44:7c:d2:e5:50:4a:51:ac:aa:aa:07:16:97:
                    64:2f:82:b8:64:e6:4a:3f:c5:41:81:4b:6d:08:06:
                    6c:59:52:b2:3a:7f:7d:a5:87:9a:da:02:a7:cd:58:
                    4a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E1:31:F1:6D:89:09:CA:15:25:4D:01:DA:51:A7:0E:86:02:1A:FE
            X509v3 Authority Key Identifier:
                keyid:FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a313030303a3a2f33362d3438203d3e20323635373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:adc0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:9f:76:ed:74:7f:b0:7f:bf:91:21:2e:84:cb:b5:b5:97:
         42:66:6b:f7:68:58:5f:4a:02:04:92:cf:a8:0e:c8:82:b2:c9:
         a1:b1:eb:ad:ec:63:77:51:82:e1:a2:4f:ca:fc:29:06:12:fe:
         35:36:cb:dd:c4:f5:fd:b4:a4:42:02:03:a8:88:d4:bb:72:16:
         80:a4:2f:67:49:ca:36:37:b6:7d:2c:1a:2e:20:6d:b4:79:ab:
         b3:07:f1:de:8a:56:c4:ce:ca:fd:fa:d4:c2:7a:20:db:7c:e8:
         9a:d5:b6:d1:ee:58:fb:86:d1:7d:72:36:7f:61:35:6a:fb:5d:
         6d:ef:4f:71:24:5b:eb:3c:43:ed:be:de:c9:de:be:50:90:6e:
         78:1f:33:54:6c:77:b9:5d:fe:0f:7b:81:3d:7d:e5:42:85:d1:
         51:56:fc:ac:ac:16:c3:fd:af:62:0a:56:5f:6c:c4:84:5d:a9:
         fb:5a:53:a3:84:28:27:bc:9d:00:dd:79:5e:26:e9:2a:da:6a:
         a3:2a:79:c7:27:90:0b:6b:53:12:36:1a:90:e9:f3:17:9f:29:
         fa:56:3d:c4:48:0d:6a:92:4c:b9:f3:5a:9e:c9:3d:eb:a3:da:
         96:c4:53:d5:19:88:32:74:a7:ea:47:6b:9e:28:8c:ca:2b:41:
         99:63:31:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 10:53:11 2026 by rpki-client