Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/323830333a663634303a3a2f33322d3336203d3e203237363934.roa
File:                     323830333a663634303a3a2f33322d3336203d3e203237363934.roa (raw, json)
Hash identifier:          Yh3L/uWFGQbsZCaz5ugmtAh5PbrryhkdTSoBNwUeZBs=
Subject key identifier:   1B:70:8B:1B:50:DF:F2:C2:3C:83:68:4E:7E:37:7C:72:C1:AD:1B:A4
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       617132D6AA2D1CADF404961F0B7B2DEE2AD26C2F
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/323830333a663634303a3a2f33322d3336203d3e203237363934.roa
Signing time:             Thu 05 Feb 2026 20:10:00 +0000
ROA not before:           Thu 05 Feb 2026 20:05:00 +0000
ROA not after:            Thu 04 Feb 2027 20:10:00 +0000
asID:                     27694
IP address blocks:        2803:f640::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:71:32:d6:aa:2d:1c:ad:f4:04:96:1f:0b:7b:2d:ee:2a:d2:6c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Feb  5 20:05:00 2026 GMT
            Not After : Feb  4 20:10:00 2027 GMT
        Subject: CN=1B708B1B50DFF2C23C83684E7E377C72C1AD1BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:cc:aa:79:e3:40:9d:61:56:2b:42:85:44:
                    67:d2:8d:70:6c:07:f0:50:67:d0:ad:f8:db:b9:d3:
                    18:46:53:64:51:e3:99:10:d4:ca:31:a7:d5:77:f3:
                    03:8a:f6:a1:2a:9a:23:21:0f:43:37:58:72:2a:f9:
                    1d:ca:ad:75:58:92:9f:94:dc:a3:18:cb:fb:05:65:
                    7c:d6:58:e2:b8:e2:02:de:93:bb:51:bd:71:93:0f:
                    d4:9f:86:6f:13:01:c5:21:bc:e3:25:26:98:88:e2:
                    05:98:79:95:9f:f4:73:82:71:40:ed:03:d0:23:94:
                    6e:2e:d8:f7:7b:33:f1:f1:7b:bb:de:e3:3e:c4:94:
                    98:6d:32:dc:89:2f:b1:f1:39:4a:0a:e3:b0:e7:11:
                    c1:02:d9:ea:d7:43:df:0e:a9:ed:17:e8:d4:a5:4f:
                    d3:53:8d:49:6f:f2:74:b0:4f:53:11:ac:f2:c1:ff:
                    6b:6d:74:6b:b5:64:79:83:df:56:bd:c4:e7:af:4b:
                    9c:6a:15:ab:5f:3b:bc:fb:3b:28:2a:33:e1:1b:7f:
                    2a:13:de:23:2a:b2:a5:b6:c6:75:a3:f4:b6:92:30:
                    02:ea:8d:cd:7c:e8:28:c4:fc:d5:c5:ca:2e:04:0c:
                    48:36:2e:57:2d:f8:2b:c5:ec:0f:fb:9e:a8:4e:8e:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:70:8B:1B:50:DF:F2:C2:3C:83:68:4E:7E:37:7C:72:C1:AD:1B:A4
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/323830333a663634303a3a2f33322d3336203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f640::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:50:e0:da:51:ba:c2:ec:42:c8:11:93:9f:08:1e:c3:66:b5:
         9a:ad:03:65:dd:87:f0:b2:31:69:c1:fd:a6:87:7b:ad:ec:c3:
         fb:e9:9a:8e:1d:1b:a2:cc:80:ed:fd:f5:aa:e3:b1:35:22:6f:
         3a:bf:f8:6e:fb:96:77:d2:64:9d:c5:29:cb:b0:6f:92:03:0a:
         1e:ab:cf:86:5f:f6:fd:a6:87:a0:29:85:2f:49:7f:8b:3f:34:
         c0:9c:60:73:77:5b:e9:e5:2c:2d:70:0c:2e:59:55:7a:19:db:
         3d:03:33:8f:25:32:25:7f:fd:93:b9:8c:44:8d:08:8e:46:84:
         47:93:55:ef:ff:e8:65:fe:f6:e1:ae:67:b8:b4:6e:62:76:e6:
         5f:ba:96:41:71:8d:fc:5b:52:cb:f5:97:e3:7e:c8:ee:96:04:
         22:48:cc:77:0f:bc:40:3e:93:17:75:ff:98:96:8d:f8:4c:af:
         6e:7d:32:3c:16:da:a6:3e:82:c0:ad:89:8f:fe:64:d3:2c:ba:
         30:63:85:bf:fd:d8:14:21:02:25:61:47:7b:52:b0:54:cf:24:
         3c:62:a8:cc:83:71:68:40:a8:89:d1:d6:e3:c8:ce:ad:f0:7d:
         7e:a0:df:52:19:7d:af:37:bc:47:e3:ca:7a:6d:4b:52:03:00:
         00:b9:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:21:18 2026 by rpki-client