Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33332d3333203d3e20323730303735.roa
File:                     323830333a633365303a3a2f33332d3333203d3e20323730303735.roa (raw, json)
Hash identifier:          X1D3oUmPKN9kMu0vVtKijW7mqVo5dTqo7u9j5soKQJc=
Subject key identifier:   E9:7B:61:FF:5E:F0:88:29:9D:8E:28:0F:4A:C0:BA:D4:0A:73:83:24
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       3A2B2958681E58284CCFD879C8E437AD9B33B015
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33332d3333203d3e20323730303735.roa
Signing time:             Thu 26 Feb 2026 22:10:02 +0000
ROA not before:           Thu 26 Feb 2026 22:05:02 +0000
ROA not after:            Thu 25 Feb 2027 22:10:02 +0000
asID:                     270075
IP address blocks:        2803:c3e0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2b:29:58:68:1e:58:28:4c:cf:d8:79:c8:e4:37:ad:9b:33:b0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Feb 26 22:05:02 2026 GMT
            Not After : Feb 25 22:10:02 2027 GMT
        Subject: CN=E97B61FF5EF088299D8E280F4AC0BAD40A738324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:df:45:e9:21:59:41:27:64:b7:59:a5:27:
                    cc:2f:10:29:25:a0:68:d0:8d:7c:73:94:43:62:42:
                    4a:93:b2:cc:24:dd:0b:94:19:d6:f3:90:50:96:18:
                    68:75:f5:ee:40:2b:0e:d9:3c:cf:9f:b9:41:56:44:
                    32:2e:ca:8a:f8:33:61:6c:8c:25:d6:3f:ef:4f:e5:
                    2d:de:f9:76:70:1f:62:9b:fc:c2:f3:6e:f1:8a:48:
                    c4:8a:c0:4c:18:f7:99:a3:8a:89:5f:a4:f9:63:5f:
                    4f:b4:bb:78:16:c9:7d:af:46:75:dc:41:d2:1f:08:
                    ce:f6:38:4e:be:86:3c:44:44:fe:c8:0a:f9:eb:a9:
                    38:71:53:ba:15:32:2e:77:80:a5:f7:3d:c8:49:66:
                    52:1d:a1:50:b2:de:65:9a:1f:fd:cb:ef:f8:7f:8f:
                    cd:e8:b6:1d:29:8d:ca:f8:c0:b9:f2:ae:1d:6a:f0:
                    08:98:b3:cd:e4:2c:7e:6f:e5:95:db:f2:4f:76:a0:
                    ca:ec:48:5a:f9:1e:74:bd:2a:a4:e0:ed:e4:e2:98:
                    fe:bb:a5:0a:5d:e1:ef:68:9d:88:cc:64:75:c4:48:
                    0f:d3:a0:cf:1e:1e:7f:48:3c:e2:dd:42:8c:4f:98:
                    b3:91:63:0e:8e:bb:0e:33:c1:60:7a:3f:bf:5e:0c:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7B:61:FF:5E:F0:88:29:9D:8E:28:0F:4A:C0:BA:D4:0A:73:83:24
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/323830333a633365303a3a2f33332d3333203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:15:4f:03:b8:5f:3c:63:ce:40:a2:e1:bf:d8:d0:7e:22:
         79:39:51:0a:b8:ea:eb:d1:1f:fa:cc:0d:30:72:e5:96:b8:e7:
         db:c3:c0:7b:c0:3e:20:cc:13:b4:1a:a6:61:53:f8:0e:33:77:
         3a:c4:5a:b1:7d:49:28:7a:ea:19:2f:89:5b:45:99:db:6a:13:
         7e:66:91:e7:7b:dd:81:a3:cc:62:cd:ae:a3:d0:16:22:a2:bc:
         ff:60:cd:42:fc:16:b6:60:1d:1f:26:e7:ee:77:44:69:db:41:
         9f:ba:6a:d0:03:49:31:77:8b:88:9a:d7:33:f9:2e:13:e8:0b:
         4b:2f:31:79:de:91:1a:19:96:39:a1:72:1e:cb:d9:f0:7d:01:
         c5:b0:5a:1d:0e:04:61:f2:1f:be:58:0b:45:fe:49:ca:b9:00:
         d3:8d:0a:31:40:83:2a:a5:1a:55:bf:13:a6:99:dc:7b:0c:2b:
         68:1e:13:2d:19:8c:c0:04:3b:d8:87:04:51:98:ec:2e:36:64:
         d1:fe:c7:25:78:21:3f:dc:e7:7b:1d:a0:8d:e3:31:5b:1a:61:
         ac:65:0e:75:cc:e4:e3:5c:63:93:14:4e:1e:13:bc:e2:1f:53:
         3a:79:0c:c0:bf:e5:43:4e:d3:2b:14:90:af:f8:82:56:28:be:
         c7:e3:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:40:58 2026 by rpki-client