Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a31303a3a2f34382d3438203d3e20323634373430.roa
File:                     323830333a663463303a31303a3a2f34382d3438203d3e20323634373430.roa (raw, json)
Hash identifier:          pDt6UN5N5JJp7igz3EkS5FXJL+Ph8ujBD0xIcddjPeI=
Subject key identifier:   10:0C:2F:A0:8E:51:F2:26:EA:C3:71:2E:5C:78:79:03:28:80:AC:01
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       63A4697CC08E1CB52A206CB5CFCA4A5B4EDDC32A
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a31303a3a2f34382d3438203d3e20323634373430.roa
Signing time:             Thu 02 Apr 2026 19:10:00 +0000
ROA not before:           Thu 02 Apr 2026 19:05:00 +0000
ROA not after:            Thu 01 Apr 2027 19:10:00 +0000
asID:                     264740
IP address blocks:        2803:f4c0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a4:69:7c:c0:8e:1c:b5:2a:20:6c:b5:cf:ca:4a:5b:4e:dd:c3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Apr  2 19:05:00 2026 GMT
            Not After : Apr  1 19:10:00 2027 GMT
        Subject: CN=100C2FA08E51F226EAC3712E5C7879032880AC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:ff:19:e4:61:cc:b4:74:ac:4a:18:9c:9a:
                    fe:2d:de:e6:b4:8d:68:20:7e:bf:9d:58:49:03:45:
                    b2:4b:a1:f1:a0:c2:70:9a:c9:b4:91:4f:97:87:68:
                    f3:45:59:9c:61:bb:8f:b4:65:8a:66:4f:23:c8:de:
                    2c:c2:93:c5:73:3a:7f:81:d2:52:de:6f:2f:c1:0e:
                    0c:20:a0:a4:a8:e0:0d:a2:c3:cc:56:b8:d3:aa:d5:
                    81:74:96:25:a0:7b:56:4b:ed:c6:73:f5:2b:5a:72:
                    d6:22:d3:a9:1b:46:6b:0b:cb:52:61:0d:bf:34:cb:
                    2b:df:9f:be:72:d6:27:1c:6c:e4:03:14:5b:19:9f:
                    ed:34:b4:74:3d:31:57:97:64:5e:09:fd:d4:4f:62:
                    61:bf:77:c3:89:45:d5:80:1c:bd:3d:61:5c:60:3c:
                    c8:46:75:cd:58:1c:50:41:51:06:a9:c1:32:b9:f2:
                    2f:d8:41:f6:50:db:cc:72:3d:3c:2f:12:7f:21:6b:
                    c7:08:ae:94:66:4d:27:a3:3d:bd:32:93:78:c5:45:
                    4e:d7:28:e0:bf:12:c9:6f:44:e9:39:8c:2f:60:ae:
                    3f:4d:a0:71:28:c0:59:35:cf:7f:ce:92:e8:21:a3:
                    91:9b:c5:ba:ac:57:66:43:a8:b0:7e:e1:30:14:5b:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0C:2F:A0:8E:51:F2:26:EA:C3:71:2E:5C:78:79:03:28:80:AC:01
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a31303a3a2f34382d3438203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f4c0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:2f:67:05:79:7b:76:86:16:a6:5a:4f:44:a9:3b:8e:bd:
         96:bf:65:8b:67:42:7e:98:f1:01:44:89:d0:89:18:b5:5e:42:
         ed:40:16:1c:3b:01:1d:a9:20:a8:d6:44:96:b9:d5:4b:53:68:
         6e:3e:0e:de:47:c0:42:29:63:0d:00:57:36:4d:51:49:05:6c:
         2c:e5:49:23:f4:9c:92:c7:80:63:c1:8e:8e:a1:ef:1e:d1:96:
         52:81:c9:be:1d:c3:46:5f:d9:19:22:db:1f:40:02:cc:52:0b:
         3c:55:d1:6c:3c:24:e6:aa:a4:fb:e0:ce:f5:98:ea:41:c2:f1:
         7e:6f:30:a6:eb:de:d9:f4:37:3e:23:4b:62:19:fd:ba:4b:22:
         d5:47:b8:97:be:91:9e:16:b8:89:bd:a7:cc:45:f4:6c:f0:03:
         0e:8f:27:f0:6d:9d:fa:45:31:50:2c:be:eb:01:a8:99:16:54:
         c4:29:a9:a7:60:21:c2:c1:23:68:6a:0b:71:39:fd:ac:4d:27:
         75:9f:67:78:a0:5d:4d:3a:86:19:6e:44:0e:a1:95:58:21:92:
         47:3b:01:3e:94:1c:13:30:29:85:f3:0e:e5:dc:21:19:c2:40:
         b2:74:e5:d3:1b:1a:8b:20:51:74:0e:b4:a0:c6:7c:f5:50:7f:
         d0:b9:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:46 2026 by rpki-client