Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa
File:                     323830333a373530303a3a2f33322d3332203d3e20323635373134.roa (raw, json)
Hash identifier:          dwdNqAXk+ag7z94vzLJ1ObqbVv9eAFsBrQIvNjTcXLw=
Subject key identifier:   89:96:93:86:A2:E8:0D:84:81:75:D8:2B:F5:60:FE:32:7E:F3:29:A4
Certificate issuer:       /CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
Certificate serial:       143A100423FEF02589D1BE0880BAB2F4D10AB699
Authority key identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa
Signing time:             Tue 14 Apr 2026 01:38:39 +0000
ROA not before:           Tue 14 Apr 2026 01:33:39 +0000
ROA not after:            Tue 13 Apr 2027 01:38:39 +0000
asID:                     265714
IP address blocks:        2803:7500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3a:10:04:23:fe:f0:25:89:d1:be:08:80:ba:b2:f4:d1:0a:b6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
        Validity
            Not Before: Apr 14 01:33:39 2026 GMT
            Not After : Apr 13 01:38:39 2027 GMT
        Subject: CN=89969386A2E80D848175D82BF560FE327EF329A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a4:8d:20:a4:48:17:28:01:c3:84:d1:20:91:
                    12:f1:32:d1:ce:71:2c:b0:01:99:ef:19:a7:98:7b:
                    a4:2c:65:31:8c:be:ac:c9:27:c4:41:d8:e5:6a:2f:
                    ed:34:1c:98:81:4c:bf:e7:05:a2:06:ce:a0:c5:8e:
                    82:db:a3:a0:65:50:34:c1:db:8a:98:7b:86:73:a5:
                    4f:c4:6e:de:d5:d7:1b:cf:bb:60:e2:1c:34:ff:25:
                    16:c0:ae:49:14:5e:25:bb:27:49:0e:4c:59:5d:d7:
                    ed:9a:d7:4e:d9:05:bf:ce:ee:4f:35:6c:09:2b:9d:
                    a9:dc:bc:6d:9c:9f:79:e9:be:95:aa:e1:ad:40:da:
                    5e:01:9d:1e:47:e3:51:98:8e:76:fe:14:70:2f:25:
                    07:ae:56:ab:cb:80:49:ba:09:73:08:0b:16:00:0e:
                    29:6d:90:d6:42:5b:34:c7:b3:e0:06:2a:82:f4:bd:
                    95:0e:50:9e:d7:13:de:81:7a:f8:b5:2a:6a:c2:65:
                    3f:67:70:5b:19:ff:be:c3:9a:ce:80:49:45:24:d4:
                    1c:82:c1:cd:a2:63:8c:82:e0:81:8d:f5:bc:ea:3a:
                    d2:99:1f:27:f8:47:03:7e:ab:1b:f5:8c:10:c7:9d:
                    a0:46:08:c8:e9:88:55:d3:9e:18:6f:4a:3e:4a:80:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:96:93:86:A2:E8:0D:84:81:75:D8:2B:F5:60:FE:32:7E:F3:29:A4
            X509v3 Authority Key Identifier:
                keyid:94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:e7:d9:27:83:ef:b3:e5:6e:84:fb:66:65:46:f7:2f:af:bd:
         7f:a8:e7:01:f8:ae:ee:75:b3:5f:54:f9:14:c5:1b:11:65:ab:
         09:0c:b4:ee:33:4d:ae:c9:6f:e2:e2:da:2c:51:7a:57:c6:85:
         33:2e:be:73:97:08:0a:69:d5:e6:dc:50:af:b9:48:97:55:49:
         93:d9:b0:e2:7e:00:f1:7a:b8:69:44:0b:ca:e8:81:71:74:d3:
         38:0c:b2:47:46:18:9c:72:20:b1:be:5b:da:9c:a4:94:55:4b:
         6e:bd:02:57:eb:8a:3a:e3:93:a6:a3:5c:54:4e:a6:6f:bc:42:
         05:c5:9d:7d:eb:23:79:1c:71:b0:22:48:aa:49:02:d1:ec:9a:
         5d:2a:d4:94:5b:9f:03:4d:d0:2e:b8:3a:85:a5:55:f6:fb:7a:
         e8:34:73:3f:7c:ec:e1:93:14:eb:ae:0f:44:22:37:69:1d:6e:
         4d:0d:fe:15:5a:79:07:4c:db:32:e1:dc:c8:66:38:70:c2:fb:
         86:07:b0:7d:74:d5:cf:b1:71:7e:f2:4e:11:ce:7b:b5:fe:7a:
         8d:57:37:a5:fc:41:bb:33:a6:0c:25:9b:1e:e7:e1:27:54:09:
         17:6c:58:33:93:b6:07:ce:d1:ea:79:ce:b7:77:9f:53:d5:33:
         58:2d:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:07:36 2026 by rpki-client