Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa
File:                     323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa (raw, json)
Hash identifier:          UZ5KVcZozgFG9xXFhGplfPO+xCKF/eEo9y49VQVL3Ns=
Subject key identifier:   96:5D:B0:99:A5:83:FD:F6:93:F6:CD:D6:ED:55:E9:CA:C7:7D:28:9A
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       5D29270D4E8ADC4009C4D24E0D51EF0844F01A18
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa
Signing time:             Thu 16 Apr 2026 16:39:07 +0000
ROA not before:           Thu 16 Apr 2026 16:34:07 +0000
ROA not after:            Thu 15 Apr 2027 16:39:07 +0000
asID:                     270075
IP address blocks:        2803:c3e0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:29:27:0d:4e:8a:dc:40:09:c4:d2:4e:0d:51:ef:08:44:f0:1a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Apr 16 16:34:07 2026 GMT
            Not After : Apr 15 16:39:07 2027 GMT
        Subject: CN=965DB099A583FDF693F6CDD6ED55E9CAC77D289A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:e6:c8:c8:ce:8e:aa:9e:1d:e1:15:c4:3b:
                    69:0d:9c:c5:cc:06:0d:2b:6d:89:e8:a3:db:2e:54:
                    3a:28:47:3f:6b:92:c2:56:b7:af:ec:10:d8:63:20:
                    a4:31:12:6e:d6:1a:e2:bb:c7:90:36:be:09:36:5c:
                    f1:9f:11:ee:69:a5:50:f3:9c:00:8f:61:6f:67:d2:
                    c9:7f:3c:8c:01:20:17:19:df:df:26:f0:2d:ec:96:
                    94:cf:99:77:63:43:38:91:de:0e:c4:f1:64:a4:44:
                    2b:d6:09:71:0c:7a:06:40:50:5c:bf:5a:a0:a0:b2:
                    15:f4:11:67:86:6b:a5:4e:84:d5:b6:14:6e:50:d5:
                    3c:cd:6e:c0:53:04:6d:a1:51:0b:4a:55:b7:77:04:
                    35:54:2f:36:0e:96:7a:6b:87:ae:2f:71:f0:89:05:
                    47:ea:0e:fb:78:c5:d7:e0:c8:b5:5f:15:15:b9:69:
                    59:a7:2a:38:d7:10:a1:ce:cd:24:e8:56:dd:1d:57:
                    ac:df:c2:41:6e:39:59:a7:01:18:45:ee:4c:26:50:
                    0f:d6:52:6f:43:b9:2b:b1:7a:33:dd:83:1e:f8:54:
                    c0:74:68:22:a1:43:6e:21:7f:36:3c:df:10:92:f2:
                    1d:14:b1:47:b9:87:45:82:a9:10:0e:5d:57:7c:a4:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:B0:99:A5:83:FD:F6:93:F6:CD:D6:ED:55:E9:CA:C7:7D:28:9A
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a313030303a3a2f33362d3336203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:48:d6:ea:ef:ad:8f:80:a5:37:f1:0f:d0:a6:a4:f0:6d:
         4f:48:bc:4d:f5:85:f6:9f:ac:01:d0:5b:e8:8c:e9:df:34:45:
         87:3a:da:76:dd:73:f7:b1:56:c9:2a:7a:38:a1:19:ea:91:a0:
         b9:b0:e2:0a:20:04:a2:96:29:f1:91:9c:7a:db:4f:2b:41:8c:
         57:be:09:f3:56:e1:c2:56:6d:3d:a6:77:fa:33:9b:e0:02:be:
         18:1e:0a:34:e3:24:72:a0:51:8b:a8:49:56:85:a5:bb:a1:68:
         a9:1d:00:f7:a8:93:73:33:f2:3c:ba:72:d9:61:b3:3e:5b:3f:
         b3:e5:45:2a:4a:17:0e:ab:d1:c4:0d:d2:a7:e2:a8:39:f4:4f:
         b3:e9:94:d3:e5:40:f6:7b:f1:13:cf:22:8a:a1:38:42:39:81:
         2d:91:07:b7:e0:8d:f2:7c:92:c3:2a:65:aa:1f:dc:ae:9d:07:
         46:4a:d9:3a:d9:f2:fe:c1:94:fe:ee:51:85:15:24:62:17:7d:
         00:25:ac:20:84:31:f3:2c:e2:76:c8:4c:ec:fe:78:4f:09:38:
         ed:ef:de:12:b3:13:c6:01:01:9c:0b:a6:36:a2:ce:d8:c3:c5:
         cd:e3:d8:8d:10:8c:60:55:13:69:37:3e:ef:68:ea:0c:45:bd:
         cd:52:4b:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:41:56 2026 by rpki-client