Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa
File:                     323830333a613231303a3a2f33322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          W0t5pkWCDBvfrcvEhZkrSZP2FqYDe0qKlEsPrjVOiyk=
Subject key identifier:   92:A9:8A:2B:08:61:67:A7:CF:74:74:C8:03:31:0B:BE:90:F9:88:42
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       525A5ACE98E4EDCDA2E6D6A66F7EA486764479F7
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa
Signing time:             Mon 30 Mar 2026 20:36:41 +0000
ROA not before:           Mon 30 Mar 2026 20:31:41 +0000
ROA not after:            Mon 29 Mar 2027 20:36:41 +0000
asID:                     3356
IP address blocks:        2803:a210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5a:5a:ce:98:e4:ed:cd:a2:e6:d6:a6:6f:7e:a4:86:76:44:79:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Mar 30 20:31:41 2026 GMT
            Not After : Mar 29 20:36:41 2027 GMT
        Subject: CN=92A98A2B086167A7CF7474C803310BBE90F98842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:46:4a:77:2c:1f:1d:06:ba:c6:2b:15:e5:
                    5b:22:25:5c:f5:b9:bb:56:62:cf:4f:cc:ad:04:d1:
                    88:aa:1e:c6:55:e7:f6:75:16:e1:e1:97:4d:93:78:
                    bf:ff:7b:b9:cd:d2:c4:84:e3:bc:1a:e0:0c:43:2a:
                    86:66:08:e8:50:d3:8a:cf:ab:1c:3b:ba:78:0c:83:
                    f6:26:99:5c:07:ce:69:6a:7f:72:83:56:25:ee:82:
                    1c:5f:3d:a9:2e:9a:35:d2:48:f2:f9:18:fd:85:f8:
                    51:d6:b2:68:4a:4d:94:47:a9:69:55:7d:26:c8:6e:
                    a0:85:e0:22:b1:0f:5d:cd:d9:16:c3:45:69:40:3a:
                    b4:ee:eb:74:04:f6:49:15:33:aa:18:b9:4d:c7:f0:
                    80:89:49:21:3e:fc:3a:68:04:cd:ef:56:10:fa:69:
                    9b:94:d2:8c:7e:2a:da:1f:58:95:d7:79:e7:5e:43:
                    cd:07:a2:70:ad:fc:68:49:69:c1:bc:4f:1a:d8:50:
                    b0:30:83:6e:7f:04:0b:a7:99:7f:1e:a5:45:bb:f6:
                    2d:d8:a9:55:65:a1:e6:bd:a4:60:1c:83:f4:e2:f6:
                    d8:44:d5:48:04:05:66:40:6e:f5:29:0d:f9:b6:18:
                    cc:d6:44:7c:e2:9d:4f:e4:99:a6:6e:4b:8e:be:99:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:8A:2B:08:61:67:A7:CF:74:74:C8:03:31:0B:BE:90:F9:88:42
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a210::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:7c:e7:6a:d7:d9:bf:a7:28:77:1f:95:02:0a:d1:df:77:
         c1:fe:7e:79:b0:f7:d1:83:58:18:e1:c3:b5:0b:63:49:af:06:
         56:a1:a7:6d:56:dc:9d:61:f9:3f:a1:71:e6:65:42:4b:e9:c7:
         0f:bb:dc:92:1e:2d:0f:6c:53:9b:d2:c2:3d:f4:d9:eb:48:12:
         c7:3f:ad:f1:46:a0:0b:0b:f2:80:4d:0f:5b:77:91:28:0c:d7:
         88:3e:63:d9:24:fc:c5:b4:1d:db:c3:57:73:4b:a2:30:3e:0d:
         bd:d3:47:96:95:84:cd:37:6a:ce:91:fb:6a:18:b4:0d:58:0b:
         82:ce:89:14:7f:b5:48:d6:82:95:03:b9:3b:2e:18:0a:bd:9a:
         f2:f2:66:86:fb:41:fd:68:1f:fe:b0:f8:b8:48:a8:2b:33:48:
         8d:0a:39:c1:6d:a8:b5:08:24:da:89:d4:05:1d:90:4e:77:97:
         ff:bb:6a:16:18:f8:6b:df:88:a8:a9:aa:7f:42:9b:df:8c:47:
         f1:24:c0:f3:aa:23:1e:e8:59:2a:f2:6b:af:05:09:8b:96:af:
         34:7a:4f:73:6f:40:06:d0:3a:6f:e3:94:e8:ae:43:ad:26:eb:
         a3:31:26:58:cd:b0:f6:69:e8:0f:6a:52:eb:52:4f:d1:83:cf:
         22:27:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:19:54 2026 by rpki-client