Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f34322d3432203d3e20323732303032.roa
File:                     323830333a323931303a3a2f34322d3432203d3e20323732303032.roa (raw, json)
Hash identifier:          AtaDvtL/5qu2d7ItYG4+0mq6HLZxgaIrSxFGX5WYZu0=
Subject key identifier:   04:5F:54:33:3A:4E:62:8E:64:8A:5E:F2:53:BF:B9:49:16:F3:81:0C
Certificate issuer:       /CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
Certificate serial:       626129AAF6BBF926A2A217E647C7C74A0A420369
Authority key identifier: 57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f34322d3432203d3e20323732303032.roa
Signing time:             Tue 10 Feb 2026 07:29:55 +0000
ROA not before:           Tue 10 Feb 2026 07:24:55 +0000
ROA not after:            Tue 09 Feb 2027 07:29:55 +0000
asID:                     272002
IP address blocks:        2803:2910::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:61:29:aa:f6:bb:f9:26:a2:a2:17:e6:47:c7:c7:4a:0a:42:03:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
        Validity
            Not Before: Feb 10 07:24:55 2026 GMT
            Not After : Feb  9 07:29:55 2027 GMT
        Subject: CN=045F54333A4E628E648A5EF253BFB94916F3810C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:34:33:88:c3:6a:c0:67:bf:e8:ec:b7:b8:
                    69:39:49:78:ae:c0:00:1c:87:d6:8c:84:60:9e:af:
                    d3:51:68:1f:4d:42:e6:80:b3:0f:fc:cd:dc:b8:76:
                    e3:13:90:06:68:9b:01:d8:f6:a4:51:e3:ba:c0:ec:
                    51:84:53:82:ea:97:0f:78:8c:19:a5:db:3d:82:54:
                    f7:cc:5f:21:9b:7c:83:cc:b8:0d:d9:28:3d:f8:30:
                    10:53:a8:49:83:c7:00:a0:ac:05:99:00:19:66:38:
                    81:0b:bb:14:ba:26:2e:4d:7c:00:53:ab:e9:74:71:
                    28:42:27:d3:5a:ca:24:29:b9:0e:b7:89:2f:da:cb:
                    87:0a:7f:2d:6b:fb:6a:dc:02:a9:39:43:eb:46:42:
                    50:74:83:23:19:5a:8b:3e:6f:91:b2:73:66:e4:44:
                    9a:8b:30:6d:28:ae:7c:7d:0b:14:40:ac:2b:4f:f9:
                    20:0e:de:1f:0c:3a:e7:63:55:8b:f3:48:79:ce:f5:
                    d3:60:61:5b:39:51:8c:ea:e7:d1:8a:34:9b:c9:40:
                    56:4d:7a:0e:69:91:bf:42:96:95:18:3a:27:29:37:
                    be:93:87:b7:7a:0a:21:73:a4:d2:18:d3:6e:47:a4:
                    42:9c:15:5a:e6:36:7a:4a:1b:15:c1:71:cf:5e:ac:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5F:54:33:3A:4E:62:8E:64:8A:5E:F2:53:BF:B9:49:16:F3:81:0C
            X509v3 Authority Key Identifier:
                keyid:57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f34322d3432203d3e20323732303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2910::/42

    Signature Algorithm: sha256WithRSAEncryption
         90:18:30:4e:3a:b2:bd:0d:af:e3:e7:f5:ff:bf:23:06:f2:e0:
         46:26:6a:c3:c3:b0:6e:5a:af:62:72:88:fd:51:23:bc:99:95:
         b5:48:f8:3f:0e:e2:58:02:8b:a7:ce:59:9e:6a:50:0c:b5:1a:
         16:6f:a0:47:36:37:d0:22:cc:82:90:eb:de:a2:5a:6e:37:2b:
         d0:d8:e2:03:91:e4:f7:e1:84:02:3c:64:89:05:05:4c:ab:10:
         a7:09:5d:2f:c9:e2:f3:c3:aa:93:3d:a1:07:f1:b1:e4:a3:51:
         44:5c:e5:d7:ad:27:7d:e6:1e:36:cc:f7:d3:3e:79:3f:02:ab:
         57:1a:91:d5:bd:99:1c:62:69:49:0b:d7:95:d2:b8:fb:db:ee:
         9d:b1:b7:d1:9f:9a:68:d0:08:4a:00:e6:f2:df:a7:9b:1e:b5:
         fb:05:9d:8e:f8:b2:e7:82:14:79:89:b7:93:1f:b9:b6:29:ce:
         87:61:59:ce:cf:62:3c:3e:38:67:d8:c4:88:73:e1:0f:c7:b0:
         c2:da:36:32:93:fd:41:62:be:11:c0:2b:2b:bc:4f:6c:bd:82:
         ef:56:b6:83:45:8f:56:35:b2:a8:a2:d0:77:c7:82:38:6a:ee:
         2b:92:77:e6:de:c3:02:63:7b:35:d5:05:3e:41:9e:3e:2d:5f:
         9f:b4:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:56:57 2026 by rpki-client