Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a333030303a3a2f33362d3336203d3e20323730303735.roa
File:                     323830333a633365303a333030303a3a2f33362d3336203d3e20323730303735.roa (raw, json)
Hash identifier:          52LGQq3R+dvokoBAASjdJTBU1GNDMV075vOUVKgipOg=
Subject key identifier:   64:E9:43:6B:59:A6:CC:0A:DC:F2:E6:36:3D:B4:42:1A:BE:83:82:32
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       1F4E1F01B2A34D2611BA252C8C8F9B8A3D8957C6
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a333030303a3a2f33362d3336203d3e20323730303735.roa
Signing time:             Thu 16 Apr 2026 16:39:08 +0000
ROA not before:           Thu 16 Apr 2026 16:34:08 +0000
ROA not after:            Thu 15 Apr 2027 16:39:08 +0000
asID:                     270075
IP address blocks:        2803:c3e0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4e:1f:01:b2:a3:4d:26:11:ba:25:2c:8c:8f:9b:8a:3d:89:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Apr 16 16:34:08 2026 GMT
            Not After : Apr 15 16:39:08 2027 GMT
        Subject: CN=64E9436B59A6CC0ADCF2E6363DB4421ABE838232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:4b:8e:13:be:a8:95:f6:4a:aa:b4:3f:01:
                    d6:07:8b:50:ff:63:bb:dd:0f:a7:c3:db:14:ee:ac:
                    a2:08:e9:60:07:c1:c0:cb:6d:cf:f6:ab:36:22:ae:
                    80:01:e6:b0:a0:ac:a3:bc:d6:5f:2a:5d:07:c5:93:
                    23:90:7c:69:aa:f8:9d:0b:dd:b6:4f:6f:f6:bb:9d:
                    be:ed:d3:13:25:f7:0b:8f:0f:30:4a:ea:a5:7c:34:
                    2e:74:6e:33:21:04:6e:18:6d:6c:88:d5:5c:76:52:
                    f0:c4:8b:d4:fd:89:27:57:d5:76:64:ee:0f:84:8b:
                    9b:71:ec:6e:f4:21:53:5e:65:ad:cb:fd:d3:67:33:
                    94:76:aa:c4:bf:f5:62:2b:b6:31:26:c8:b1:f2:f9:
                    ee:ff:bc:33:96:d9:01:de:6f:04:a0:78:74:5d:9a:
                    05:aa:7b:9c:a5:17:38:7c:35:a6:77:ae:8b:18:8a:
                    c9:0c:1f:fc:29:ac:29:b6:cb:86:a6:3f:4b:b5:b6:
                    a3:72:b7:20:92:12:1c:06:fd:28:14:83:2f:ab:2f:
                    e9:95:76:38:7d:c9:d1:14:21:13:ed:cb:e8:e3:48:
                    37:8d:b2:c1:13:7d:e1:68:c0:43:ac:6c:4e:d0:56:
                    75:18:48:cf:93:eb:df:ac:08:b0:8d:20:7e:f6:b6:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E9:43:6B:59:A6:CC:0A:DC:F2:E6:36:3D:B4:42:1A:BE:83:82:32
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a333030303a3a2f33362d3336203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:c3:9a:73:f8:03:27:75:1b:9e:fc:e6:d2:a6:a5:85:22:d1:
         ab:a8:8b:ee:02:c6:42:bc:03:54:9e:b6:5a:3b:c4:7c:79:13:
         6c:99:3d:b8:4e:e6:e5:23:38:4c:b0:63:35:31:b8:71:55:d7:
         a6:a6:2b:63:21:3a:9a:88:56:f4:09:45:b8:e2:56:b6:ff:7a:
         cf:7e:ef:cf:ea:e4:3d:a2:35:05:10:bd:d6:d9:ff:ee:d6:5a:
         18:ae:67:42:ba:53:2f:4d:ad:e5:af:ab:a0:56:2f:b5:ca:9f:
         05:6f:81:77:7b:da:5c:d6:0e:92:17:8e:60:c5:4c:50:c5:69:
         bb:37:36:34:3e:6f:79:41:14:06:59:a7:e6:c7:7d:d4:5f:cb:
         81:66:23:55:b0:41:23:fb:47:0a:a4:35:59:17:ac:ee:04:80:
         34:a7:71:48:f0:8a:8b:6e:1c:61:61:11:03:ec:4f:c9:d5:4a:
         f3:09:15:59:7c:6a:b1:59:e2:a0:a4:08:d4:ca:c8:46:f8:88:
         59:9d:4a:52:45:fa:56:93:07:fb:78:a3:14:c5:3e:1d:e2:0e:
         5c:5f:27:12:26:c4:cf:30:9c:f6:4e:5a:b0:8a:fa:b1:c6:cf:
         c0:a9:3a:a7:be:b4:6f:3c:1f:b2:7f:ad:e6:5d:28:0e:50:85:
         bc:07:21:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:42:10 2026 by rpki-client