Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/323030313a313233303a3a2f33322d3332203d3e203133353739.roa
File:                     323030313a313233303a3a2f33322d3332203d3e203133353739.roa (raw, json)
Hash identifier:          WXo9Ht1iUjb8aI0JHFX1K6XqBtSfTnbD8rBI4DSpivA=
Subject key identifier:   A2:4D:51:8D:0D:37:B8:CC:E1:1B:8F:09:6D:A3:BB:1D:2E:C3:33:23
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       129A721A83E156577B0DC3867F634BF38C99EAA7
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/323030313a313233303a3a2f33322d3332203d3e203133353739.roa
Signing time:             Tue 02 Jun 2026 23:46:20 +0000
ROA not before:           Tue 02 Jun 2026 23:41:20 +0000
ROA not after:            Tue 01 Jun 2027 23:46:20 +0000
asID:                     13579
IP address blocks:        2001:1230::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 12:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9a:72:1a:83:e1:56:57:7b:0d:c3:86:7f:63:4b:f3:8c:99:ea:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jun  2 23:41:20 2026 GMT
            Not After : Jun  1 23:46:20 2027 GMT
        Subject: CN=A24D518D0D37B8CCE11B8F096DA3BB1D2EC33323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:97:73:4f:e5:af:53:b4:8b:90:a4:b6:7d:2d:
                    d6:cd:15:fa:4f:c2:fb:a2:5c:26:bc:f3:3e:94:56:
                    31:c4:95:eb:b5:66:e3:d5:27:5b:c3:46:7f:11:57:
                    45:11:a1:f7:ca:01:b5:95:97:5a:87:d3:82:46:87:
                    3e:38:ce:c9:23:b8:ac:19:1a:a0:76:76:9e:ed:b2:
                    0e:9b:5a:7f:90:4c:09:53:bf:40:01:84:ec:3f:5f:
                    af:b6:d6:73:9d:73:36:3f:da:76:3e:6a:aa:18:1a:
                    b7:9e:56:04:4e:4e:26:6a:f4:36:71:c9:f0:14:da:
                    22:cc:dd:e0:d8:54:ec:83:ba:db:84:ff:8f:c3:cb:
                    6f:69:e8:dd:e8:07:0f:c9:9b:9c:f4:08:f6:8f:6f:
                    50:9b:7e:3b:60:2a:dc:44:d4:8e:ee:73:65:bf:af:
                    75:f8:eb:09:80:63:ea:80:92:e1:b6:c3:c1:45:e4:
                    74:ec:6b:1a:68:ba:4a:ab:1b:86:ac:3b:a3:13:90:
                    e0:a3:a6:a0:bd:23:5d:3a:bd:d3:81:5b:32:7e:e5:
                    d7:44:b5:e2:91:ac:a3:65:1c:88:2b:a5:b7:6a:e9:
                    47:a2:32:bf:5d:03:a3:61:35:34:66:f8:d9:54:07:
                    28:70:59:61:9f:bf:ba:31:9d:0d:db:31:61:7e:97:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4D:51:8D:0D:37:B8:CC:E1:1B:8F:09:6D:A3:BB:1D:2E:C3:33:23
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/323030313a313233303a3a2f33322d3332203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1230::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:5c:91:fb:30:2d:d0:e1:59:b5:19:00:aa:cb:14:c5:4c:
         b3:01:50:3a:b3:a3:69:b1:0e:fa:03:ef:b1:fb:d8:a0:8d:7f:
         bd:5f:ec:a7:14:00:00:3e:a9:5c:6e:ac:38:25:be:39:d8:7b:
         7e:33:ed:58:d3:82:bd:aa:88:fa:12:1b:20:27:cc:33:78:ea:
         96:72:f7:a3:9e:cc:93:6c:94:2f:60:a3:0a:8a:3d:31:f7:5f:
         94:82:87:00:2d:e0:75:74:c4:92:23:fd:fc:97:74:23:a0:50:
         fa:02:f1:43:71:9f:4d:f1:3e:a9:49:c0:ed:5c:df:14:c9:25:
         30:13:eb:62:b4:21:ef:fe:9f:9c:4d:fe:83:48:3b:e4:d6:0c:
         46:06:ec:ef:6a:04:d9:b8:c9:1c:7c:be:73:c5:5b:25:96:6a:
         a4:66:f2:99:b6:51:f2:ce:ba:b2:dd:a8:2e:fa:8c:4d:a0:de:
         97:73:0f:a3:8c:5f:63:ac:4f:54:d8:34:1e:8c:bb:a9:e7:81:
         11:70:0d:eb:07:8d:d6:4c:f2:49:d8:47:60:e4:c5:55:cf:14:
         06:f8:aa:6c:4c:cc:1f:6e:0c:6c:19:a7:ab:0a:79:01:3d:02:
         97:20:c9:20:dd:75:d8:08:1a:0a:69:a8:67:b0:1c:00:4b:f8:
         99:19:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:45:39 2026 by rpki-client