Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a363334303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          VuDjRPBmzDIUl4HksyNDaQTT6TVi3keO9ZNqZ/S93ks=
Subject key identifier:   FC:36:04:C5:4C:DC:2F:FE:E7:FA:3E:54:9E:99:72:57:EE:E3:79:42
Certificate issuer:       /CN=3D8CF3696583CC1AFB700F202360AEB49355D862
Certificate serial:       2A708CB604F9149080804734B6E34262692A506A
Authority key identifier: 3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Fri 10 Apr 2026 23:20:01 +0000
ROA not before:           Fri 10 Apr 2026 23:15:01 +0000
ROA not after:            Fri 09 Apr 2027 23:20:01 +0000
asID:                     52468
IP address blocks:        2803:6340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 06:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:70:8c:b6:04:f9:14:90:80:80:47:34:b6:e3:42:62:69:2a:50:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8CF3696583CC1AFB700F202360AEB49355D862
        Validity
            Not Before: Apr 10 23:15:01 2026 GMT
            Not After : Apr  9 23:20:01 2027 GMT
        Subject: CN=FC3604C54CDC2FFEE7FA3E549E997257EEE37942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:01:cc:07:4c:3a:8b:a1:d7:82:d6:e2:28:
                    58:7b:7b:93:ae:ec:3d:e4:e5:d9:38:54:87:64:e0:
                    a7:f1:cf:44:7e:06:77:c2:7c:ea:12:91:af:c1:3f:
                    26:6f:c3:5e:35:e2:0e:11:d7:75:cc:f8:d9:a8:01:
                    5b:c7:07:62:63:b0:54:2a:9a:91:a2:f9:28:69:a1:
                    2a:a1:08:86:b9:2d:ac:43:d6:c9:07:bd:b6:6f:74:
                    e7:a9:ce:fd:51:f3:9e:a6:ce:4b:90:15:8a:2b:17:
                    ef:f3:21:6d:cd:22:b5:a7:68:61:b4:c3:42:e6:31:
                    1d:a7:89:ba:ec:7a:92:3b:bd:17:b1:4a:98:8d:9c:
                    b9:c9:5c:57:dc:d6:51:d7:9b:9d:c3:60:a9:23:26:
                    bb:01:e5:c0:d5:ef:8a:e1:38:03:50:39:fe:f2:4d:
                    da:b2:ae:3a:cc:33:25:43:f0:21:8a:f1:15:6a:3d:
                    f4:74:3e:59:e1:7d:de:87:91:d1:04:18:bc:f2:a5:
                    b0:15:89:9f:fa:ea:99:2c:50:5d:c9:b0:34:30:e6:
                    66:c8:d0:a5:73:94:d4:fc:b2:28:7b:f1:21:cf:e8:
                    9e:c5:f1:bd:74:69:c5:e2:e3:67:05:72:a2:6a:28:
                    9c:29:1f:a2:00:70:31:6e:e1:1c:2c:d8:72:c5:26:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:36:04:C5:4C:DC:2F:FE:E7:FA:3E:54:9E:99:72:57:EE:E3:79:42
            X509v3 Authority Key Identifier:
                keyid:3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:13:9d:34:6d:89:e9:45:2e:04:cc:f2:d3:36:4a:ad:8f:f1:
         6b:51:3a:80:29:89:4d:1b:c2:2e:48:c2:7f:b5:d2:f2:57:d3:
         84:75:6d:83:95:b4:de:d4:88:19:20:f9:09:77:68:c4:1a:df:
         e5:7a:5e:af:48:8e:a1:2a:6f:34:eb:dd:08:2c:0c:73:26:55:
         41:47:66:2a:e0:6a:07:17:7b:e6:6d:8d:4e:37:20:67:79:3c:
         03:40:09:72:ea:01:c4:a2:52:c1:3e:8c:7b:3c:4c:2e:03:58:
         32:2b:a3:43:c2:53:c0:81:55:33:54:cb:44:2a:1c:29:12:1d:
         c0:1f:7b:00:e8:c1:c0:61:a3:c0:f3:1d:8a:21:23:dc:93:37:
         e0:0f:1f:3b:61:0e:a4:fc:35:42:84:bd:de:19:ab:1d:b3:a8:
         4e:64:52:db:bc:dc:80:d1:40:ad:6b:b7:56:65:41:ca:73:9f:
         29:7d:9f:b7:f7:4d:56:2f:a2:6c:44:2c:b7:ec:9a:97:54:cb:
         c3:82:27:e0:be:a5:4e:94:0c:49:d3:3a:19:42:ba:6e:b2:1d:
         9f:2f:d1:6d:b7:cb:db:e8:ee:97:57:a8:9a:9e:98:63:8c:59:
         51:fe:2b:a1:a4:62:c6:b6:7f:9d:c1:e7:dc:64:8c:42:d6:6b:
         2a:97:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:27 2026 by rpki-client