Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          9IyzMhLen63C4a2P/PmGuvK/SHfdBKxiZzZDU6Me2fg=
Subject key identifier:   3B:80:7B:2F:49:BF:9E:BA:D4:6C:5D:B8:2A:2A:2E:EC:95:C6:D3:F7
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       428CE6F9CB842DAD753B4A1DB29079CF7E592DBB
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Mon 08 Jun 2026 17:47:04 +0000
ROA not before:           Mon 08 Jun 2026 17:42:04 +0000
ROA not after:            Mon 07 Jun 2027 17:47:04 +0000
asID:                     64120
IP address blocks:        2803:f080:2e80::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8c:e6:f9:cb:84:2d:ad:75:3b:4a:1d:b2:90:79:cf:7e:59:2d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Jun  8 17:42:04 2026 GMT
            Not After : Jun  7 17:47:04 2027 GMT
        Subject: CN=3B807B2F49BF9EBAD46C5DB82A2A2EEC95C6D3F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:56:34:6f:91:64:d8:c3:c7:28:99:33:4a:
                    9d:5c:1c:d5:64:01:20:68:57:7e:0c:43:7c:d6:af:
                    d7:a4:6d:fd:18:65:43:bf:59:a1:48:c1:b6:d6:86:
                    af:a9:da:33:93:91:29:75:49:2e:3e:08:a4:84:8b:
                    e9:4e:be:59:56:d9:16:11:a7:03:be:17:81:06:37:
                    60:92:10:37:87:0e:68:05:da:8d:cf:bc:d9:9f:0c:
                    6d:f3:53:08:91:78:58:76:91:d3:ca:52:f8:43:c8:
                    be:4a:d4:d0:80:b8:d3:b5:95:49:0e:5c:92:5b:14:
                    95:38:37:c7:f6:24:69:15:e6:df:ba:c5:8f:46:6c:
                    9e:1a:02:67:42:01:f7:fd:cc:b9:51:db:c3:8d:b2:
                    87:93:21:cf:8f:95:e8:53:6c:e1:99:c1:8e:ca:82:
                    bb:2d:1c:ce:18:e0:e6:7c:0a:1d:24:e0:b7:32:38:
                    a0:f1:54:bf:26:87:8d:43:66:42:5d:71:59:89:7c:
                    54:be:09:e5:01:76:40:d0:84:48:74:6a:a3:93:88:
                    83:f9:d7:93:d8:56:e4:66:9b:2d:e4:53:21:1e:91:
                    7a:35:61:c1:84:d1:2d:2c:cc:9a:d5:3a:44:cc:5e:
                    8c:a2:aa:79:68:20:b3:96:02:92:7a:63:69:13:7d:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:7B:2F:49:BF:9E:BA:D4:6C:5D:B8:2A:2A:2E:EC:95:C6:D3:F7
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2e80::/43

    Signature Algorithm: sha256WithRSAEncryption
         30:f4:28:c5:2e:db:94:e9:84:16:12:21:25:91:6a:fb:b8:44:
         41:f1:e7:28:dc:4c:60:14:92:59:e1:7f:84:9b:05:ed:cb:af:
         bb:f4:d9:91:ea:ff:4b:50:76:1f:e2:c3:2c:5c:a6:33:32:0b:
         ca:ba:bc:6e:a9:2d:cb:32:62:2d:8e:00:63:a7:8a:5c:48:d8:
         a8:f2:59:be:d6:1a:60:45:ea:f7:af:c8:4c:42:c9:1e:1c:4b:
         7f:61:57:09:43:c7:cc:92:d0:41:b7:06:10:aa:ed:1e:c5:f3:
         7a:67:ee:23:f4:30:76:ef:b8:45:36:43:9a:6c:b8:56:54:a5:
         cc:dc:62:f0:2c:ab:a9:80:94:83:03:37:2e:9e:f7:19:7b:60:
         0e:24:28:66:02:8e:62:d2:91:60:83:6e:82:4c:5a:a9:12:df:
         da:77:5f:f7:f1:1c:4b:c6:59:c6:d6:15:75:a0:a5:d2:27:7e:
         8c:f0:52:a9:21:b2:ed:cd:b3:0a:88:92:b6:15:5c:89:bb:74:
         5d:ad:d4:c8:55:43:73:88:48:e7:6e:56:04:52:1d:a5:db:3c:
         fe:25:9a:95:f6:54:9e:e3:d4:a0:6a:fe:a7:26:67:23:6d:e0:
         ff:aa:93:e7:9c:60:b2:ba:2e:9b:88:93:87:70:68:15:26:4a:
         d6:8a:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:55:08 2026 by rpki-client