Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/323830333a343239303a3a2f33322d3334203d3e20323732383533.roa
File:                     323830333a343239303a3a2f33322d3334203d3e20323732383533.roa (raw, json)
Hash identifier:          PM9fq0No0lvO1kO4EfA8vHFMq8S+Jmr9EeXfUlBWy54=
Subject key identifier:   1D:D1:15:11:87:CF:79:A5:6B:A4:C7:A9:A5:6B:CE:5C:7A:2A:8D:D5
Certificate issuer:       /CN=BB53203F85A93FA4B10F62E703E81BB2C18359E2
Certificate serial:       29CECCA091CEA9CCFE583922B6ABA94D9B70805A
Authority key identifier: BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/323830333a343239303a3a2f33322d3334203d3e20323732383533.roa
Signing time:             Sat 28 Mar 2026 14:45:00 +0000
ROA not before:           Sat 28 Mar 2026 14:40:00 +0000
ROA not after:            Sat 27 Mar 2027 14:45:00 +0000
asID:                     272853
IP address blocks:        2803:4290::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 11:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ce:cc:a0:91:ce:a9:cc:fe:58:39:22:b6:ab:a9:4d:9b:70:80:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB53203F85A93FA4B10F62E703E81BB2C18359E2
        Validity
            Not Before: Mar 28 14:40:00 2026 GMT
            Not After : Mar 27 14:45:00 2027 GMT
        Subject: CN=1DD1151187CF79A56BA4C7A9A56BCE5C7A2A8DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:2e:83:68:be:d8:1c:f3:51:a9:e6:68:7c:
                    b8:43:a1:01:1f:26:64:7e:b1:f8:9a:c8:03:a5:73:
                    fd:64:56:73:a1:0f:37:15:2c:2b:c3:61:07:1b:a3:
                    f7:62:41:b8:89:9f:85:38:67:f9:51:ee:b4:20:3f:
                    5c:e8:ea:d0:53:c2:a0:0b:2f:78:7d:05:5a:45:6f:
                    b9:8a:9e:91:00:82:af:8e:9c:8e:95:27:02:f5:4d:
                    49:d4:96:47:a8:69:97:15:18:62:15:83:cd:a5:1e:
                    c3:b4:07:57:0d:d7:5f:35:a6:37:d2:06:71:fe:48:
                    bc:b2:e7:0a:cf:cb:6f:ba:fb:27:3f:a9:30:3d:4d:
                    c3:e4:e0:31:fd:c1:52:63:48:c0:39:d8:9e:20:17:
                    9d:6c:27:79:e4:77:01:b1:49:6b:5f:46:af:9d:53:
                    99:a8:07:d5:77:d4:09:84:43:cf:60:f0:9e:2b:1c:
                    5d:8d:64:7f:11:33:7a:b2:36:3c:13:8c:15:0b:8b:
                    19:fd:16:9b:0d:b4:90:e1:32:72:31:9f:33:7e:28:
                    49:0c:66:1c:0f:8f:69:ff:29:cc:b0:05:a7:af:19:
                    06:3a:45:26:7e:c8:8f:89:5c:4b:fd:94:ac:a8:e6:
                    24:0f:1d:79:7f:53:14:fa:c7:77:50:66:6c:c9:76:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D1:15:11:87:CF:79:A5:6B:A4:C7:A9:A5:6B:CE:5C:7A:2A:8D:D5
            X509v3 Authority Key Identifier:
                keyid:BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/323830333a343239303a3a2f33322d3334203d3e20323732383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4290::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:62:bc:05:ef:51:06:d8:ae:61:ea:b8:f0:df:9a:e7:17:0d:
         a4:85:2f:e0:83:0e:09:4c:f6:fa:e1:6b:32:5a:3f:7d:66:80:
         ca:b9:3a:c4:08:f5:93:af:cf:4f:0d:1a:b6:2d:e0:c4:c3:ce:
         9c:8c:bf:96:43:92:38:9a:83:a3:ff:c3:48:5d:92:76:6c:48:
         9d:04:eb:97:02:0b:b6:b6:e6:f8:81:75:df:73:60:30:7b:8e:
         58:38:29:b1:53:ff:f3:4c:62:42:2c:62:03:b2:82:bc:f5:4d:
         8b:f0:45:9e:00:37:e9:a5:d3:c2:e1:93:67:1f:56:47:63:59:
         62:a5:64:a4:19:b9:bf:2f:81:9f:02:12:69:d9:43:1d:3b:3d:
         5b:fc:af:71:93:83:9c:ca:1e:f2:00:53:fb:b8:d7:0f:25:ae:
         de:68:7a:ef:77:70:a7:e0:6a:76:fb:dc:de:a6:e0:22:87:51:
         80:d9:40:43:3c:02:5b:cb:7e:c6:c5:39:2a:3d:4a:c5:aa:16:
         36:45:a1:7a:12:41:ab:4e:21:c8:44:70:1f:34:b0:a7:06:ed:
         7b:53:33:85:76:5b:a3:68:52:58:66:5e:2b:2f:81:c0:f1:c0:
         8c:8b:32:20:e7:4d:fd:60:08:81:ab:60:bf:06:9c:c0:c5:04:
         ab:16:0b:9b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUKc7MoJHOqcz+WDkitqupTZtwgFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI1MzIwM0Y4NUE5M0ZBNEIxMEY2MkU3MDNFODFCQjJD
MTgzNTlFMjAeFw0yNjAzMjgxNDQwMDBaFw0yNzAzMjcxNDQ1MDBaMDMxMTAvBgNV
BAMTKDFERDExNTExODdDRjc5QTU2QkE0QzdBOUE1NkJDRTVDN0EyQThERDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VC6DaL7YHPNRqeZofLhDoQEf
JmR+sfiayAOlc/1kVnOhDzcVLCvDYQcbo/diQbiJn4U4Z/lR7rQgP1zo6tBTwqAL
L3h9BVpFb7mKnpEAgq+OnI6VJwL1TUnUlkeoaZcVGGIVg82lHsO0B1cN1181pjfS
BnH+SLyy5wrPy2+6+yc/qTA9TcPk4DH9wVJjSMA52J4gF51sJ3nkdwGxSWtfRq+d
U5moB9V31AmEQ89g8J4rHF2NZH8RM3qyNjwTjBULixn9FpsNtJDhMnIxnzN+KEkM
ZhwPj2n/KcywBaevGQY6RSZ+yI+JXEv9lKyo5iQPHXl/UxT6x3dQZmzJdsnDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUHdEVEYfPeaVrpMeppWvOXHoqjdUwHwYDVR0j
BBgwFoAUu1MgP4WpP6SxD2LnA+gbssGDWeIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDMyMThGODcwQjRCOERFNEVDNzFGOEFFOTMxQjA2NDQ0
QkFBNzM3QTRGNzYwNjAwM0MxMjVDRkE1NDk0MDNGLzAvQkI1MzIwM0Y4NUE5M0ZB
NEIxMEY2MkU3MDNFODFCQjJDMTgzNTlFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjUzMjAzRjg1QTkzRkE0QjEw
RjYyRTcwM0U4MUJCMkMxODM1OUUyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQzMjE4Rjg3MEI0QjhERTRFQzcxRjhBRTkzMUIwNjQ0NEJBQTczN0E0
Rjc2MDYwMDNDMTI1Q0ZBNTQ5NDAzRi8wLzMyMzgzMDMzM2EzNDMyMzkzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMjM4MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDQpAw
DQYJKoZIhvcNAQELBQADggEBAChivAXvUQbYrmHquPDfmucXDaSFL+CDDglM9vrh
azJaP31mgMq5OsQI9ZOvz08NGrYt4MTDzpyMv5ZDkjiag6P/w0hdknZsSJ0E65cC
C7a25viBdd9zYDB7jlg4KbFT//NMYkIsYgOygrz1TYvwRZ4AN+ml08Lhk2cfVkdj
WWKlZKQZub8vgZ8CEmnZQx07PVv8r3GTg5zKHvIAU/u41w8lrt5oeu93cKfganb7
3N6m4CKHUYDZQEM8AlvLfsbFOSo9SsWqFjZFoXoSQatOIchEcB80sKcG7XtTM4V2
W6NoUlhmXisvgcDxwIyLMiDnTf1gCIGrYL8GnMDFBKsWC5s=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:33 2026 by rpki-client