Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a323030303a3a2f33362d3336203d3e20323730303735.roa
File:                     323830333a633365303a323030303a3a2f33362d3336203d3e20323730303735.roa (raw, json)
Hash identifier:          Mo9n1hcjQ6LXETwHw+37lFs5v/qxkHQS5iJfTDJh+P8=
Subject key identifier:   E3:4E:28:8A:08:88:07:2A:87:79:B9:EE:C3:AC:6D:28:E4:0D:29:BA
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       7705C61932BCD545EAF674132342DC43BB32344B
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a323030303a3a2f33362d3336203d3e20323730303735.roa
Signing time:             Thu 16 Apr 2026 16:39:08 +0000
ROA not before:           Thu 16 Apr 2026 16:34:08 +0000
ROA not after:            Thu 15 Apr 2027 16:39:08 +0000
asID:                     270075
IP address blocks:        2803:c3e0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:05:c6:19:32:bc:d5:45:ea:f6:74:13:23:42:dc:43:bb:32:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Apr 16 16:34:08 2026 GMT
            Not After : Apr 15 16:39:08 2027 GMT
        Subject: CN=E34E288A0888072A8779B9EEC3AC6D28E40D29BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:e9:98:44:a2:31:35:91:0c:a3:06:95:46:
                    65:ca:f8:72:bb:2c:fe:91:af:ec:15:83:b3:c4:97:
                    34:1d:3c:83:f3:dc:55:13:a4:b8:86:09:27:a9:fa:
                    fa:c9:7b:c0:97:a1:dc:22:b9:20:9d:4b:b7:35:3a:
                    cf:1c:1f:0e:e9:ce:84:1e:3a:65:cb:61:4b:2b:7f:
                    f7:01:f1:a2:07:36:c8:81:c0:ed:23:5d:a2:ff:86:
                    64:eb:68:80:00:c5:e8:85:be:67:70:2a:8f:9b:ae:
                    72:4e:60:02:2d:17:e2:a7:a3:29:5d:23:f7:bd:42:
                    06:97:60:bc:3b:bc:81:0f:77:81:06:3a:45:1f:0e:
                    a9:dd:07:89:1e:43:38:17:b2:10:f1:e4:79:26:40:
                    b6:48:72:34:25:8e:81:b3:84:76:16:72:8f:68:d7:
                    08:cc:da:bc:51:c2:dc:e6:8e:82:51:4e:9a:f5:49:
                    00:dd:aa:48:48:0b:eb:41:32:6f:7a:54:aa:59:4a:
                    12:7c:33:a3:09:d9:60:87:21:31:8f:09:66:30:0f:
                    a6:03:d4:06:d8:8a:38:42:8e:28:e6:30:f9:5c:3e:
                    b2:59:fc:a4:33:7d:cc:7a:70:25:a5:a5:af:fc:57:
                    02:b1:af:2c:21:48:5f:27:f7:4f:b8:92:2c:b2:87:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4E:28:8A:08:88:07:2A:87:79:B9:EE:C3:AC:6D:28:E4:0D:29:BA
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a323030303a3a2f33362d3336203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:7d:3e:f0:b2:f3:e0:fc:e2:d5:be:62:fb:81:2b:db:c0:24:
         f8:42:5b:8d:a1:26:b2:a1:4f:1f:89:78:33:d3:78:d7:51:a6:
         39:58:f7:e0:a2:c3:72:cf:dc:fe:8b:4a:23:65:64:4d:f0:e0:
         b7:b7:b5:17:49:27:41:23:cb:5b:2b:43:36:c2:68:c1:01:1f:
         b2:83:41:d4:2f:7e:ee:a7:2e:d1:4f:d0:36:c6:7c:dc:23:41:
         e6:af:a9:16:9b:41:a8:54:03:fd:7a:d9:02:c2:94:e3:00:b2:
         29:ee:6c:0a:c0:bf:f5:e8:8b:09:4e:74:c0:ee:55:0f:f6:44:
         3b:65:c8:d0:92:13:bb:5e:f0:ca:2d:45:32:d1:c8:79:2e:a1:
         7d:ab:27:bf:17:ca:15:9c:83:41:08:8f:77:27:a4:52:8b:4f:
         13:41:2d:e6:7c:11:a0:4c:71:73:f5:f8:b4:c5:63:ce:29:49:
         92:10:6f:cd:e7:13:26:93:ec:3f:f1:49:2b:64:45:ad:fc:e2:
         79:24:94:d4:db:b6:90:02:72:93:42:57:bd:4c:d1:0d:87:1c:
         aa:01:f1:21:a9:3d:b1:36:d6:b1:c3:30:f1:6d:31:ee:fe:a4:
         d8:a8:d6:e4:99:d0:8e:41:2d:ed:6c:39:51:45:f9:5d:8b:9b:
         2c:c2:98:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:41:05 2026 by rpki-client