Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa
File:                     323830333a633535303a3a2f33332d3333203d3e20323733383437.roa (raw, json)
Hash identifier:          vK2C19rZKrTIQFyWCq7+7nn3XPUrG9BCJyXSna8sIjA=
Subject key identifier:   E3:66:3A:79:32:37:A5:15:EE:FF:7F:6C:AD:48:D2:62:61:0D:9C:38
Certificate issuer:       /CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
Certificate serial:       13DD20E0232CA4053755DF32DD0E2A5743EFFB50
Authority key identifier: E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa
Signing time:             Fri 10 Apr 2026 16:38:25 +0000
ROA not before:           Fri 10 Apr 2026 16:33:25 +0000
ROA not after:            Fri 09 Apr 2027 16:38:25 +0000
asID:                     273847
IP address blocks:        2803:c550::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 21:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:dd:20:e0:23:2c:a4:05:37:55:df:32:dd:0e:2a:57:43:ef:fb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4FA559F63807E8DD19FFF7624CD06DD42F2B765
        Validity
            Not Before: Apr 10 16:33:25 2026 GMT
            Not After : Apr  9 16:38:25 2027 GMT
        Subject: CN=E3663A793237A515EEFF7F6CAD48D262610D9C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:37:fa:2e:c7:6e:6d:78:c9:6d:a9:97:69:
                    a6:4a:42:2e:06:eb:07:47:a4:47:fd:00:b7:1e:b7:
                    dc:ff:c8:6a:2e:47:fa:25:47:2f:2c:6a:08:bb:7a:
                    05:1f:48:36:77:4d:df:0c:de:c8:88:e2:e2:a1:43:
                    78:85:3b:2d:dc:bb:02:3f:f4:47:b5:d0:ec:47:14:
                    f3:7d:83:86:7a:93:40:a7:75:1a:87:2e:61:77:eb:
                    84:96:df:b3:45:ae:88:7b:95:8a:fa:bc:be:37:80:
                    51:11:a7:62:c2:1a:3e:0e:d0:83:84:ad:d7:39:32:
                    f6:b7:b4:08:c6:20:6b:86:38:79:72:b9:24:b9:17:
                    ca:32:d2:9b:a3:bd:fd:6f:b0:a7:98:4e:c9:ed:1a:
                    97:7d:d0:82:a7:a5:d5:91:2e:be:71:ae:9a:af:8c:
                    43:96:f2:1f:4b:3f:2d:ec:33:45:b3:2e:e7:13:e4:
                    88:01:9d:cd:e0:a7:83:cb:57:86:44:0d:03:9f:0e:
                    0b:8d:cd:56:3d:2e:af:3b:15:95:9b:8e:6d:cb:3a:
                    f0:1a:b0:67:94:a5:f5:61:ac:62:0a:fc:29:38:73:
                    b3:53:65:a5:e3:19:7e:ce:8e:d9:42:42:2b:80:35:
                    d9:1d:4f:2d:2a:b1:1b:f4:aa:b9:46:3b:63:fc:25:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:66:3A:79:32:37:A5:15:EE:FF:7F:6C:AD:48:D2:62:61:0D:9C:38
            X509v3 Authority Key Identifier:
                keyid:E4:FA:55:9F:63:80:7E:8D:D1:9F:FF:76:24:CD:06:DD:42:F2:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4FA559F63807E8DD19FFF7624CD06DD42F2B765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D8A7AE4A0639A999ECFE2B8AB19580924F2AB8F8F32A860DD8D6D5F79BB2815/0/323830333a633535303a3a2f33332d3333203d3e20323733383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c550::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:29:5b:0a:f9:46:e0:68:2b:f6:10:bf:e2:f3:e4:c9:22:
         52:d1:58:41:f1:22:bf:47:00:ec:52:c8:f5:2c:8c:40:34:61:
         71:ad:4e:7b:23:1e:88:b3:44:39:86:fa:c8:67:8e:33:f2:b0:
         3d:70:b8:b7:f1:a8:e7:93:72:ef:06:9b:83:59:77:bb:7e:7b:
         86:37:87:4d:5d:4f:3b:ee:2e:67:52:23:51:13:dd:b0:00:6f:
         cf:25:b0:70:ab:38:01:da:5d:0e:18:68:87:d4:19:da:66:1e:
         bf:ea:b7:c6:4f:66:15:27:01:e5:34:20:30:06:32:33:64:c5:
         2d:5f:7a:dd:85:5a:23:16:dd:ac:4e:db:a5:fc:df:af:4d:e8:
         a5:d9:3a:7f:8d:76:77:10:16:51:d6:f5:c4:b5:7c:b8:d9:a8:
         9d:41:db:f6:2a:af:99:eb:83:67:30:95:81:a5:e9:43:a1:47:
         dd:ee:01:f2:52:9b:14:b4:5c:b7:e9:7a:70:85:a5:29:36:ef:
         4e:85:1a:40:37:03:ba:97:1c:74:d6:d5:11:ed:ee:36:1d:b1:
         f3:f1:87:00:14:3e:84:8a:a3:ef:ae:dd:3b:d3:c8:2b:8f:60:
         1d:91:85:e5:d3:e6:8c:77:9c:dc:2f:bc:fa:72:44:dd:9c:af:
         b9:91:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:42:38 2026 by rpki-client