Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          Yn20xKLKOrsrhVN5V2u5D3cR+25C8Ml4CNHWA3XC2qM=
Subject key identifier:   43:2C:31:B7:8E:88:B5:52:7C:80:AE:8A:23:56:CF:EC:EE:E5:8D:DD
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       2335439F130D8ED1B1B6E5A402CD50C692EF4677
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:11 +0000
ROA not before:           Fri 30 Jan 2026 06:36:11 +0000
ROA not after:            Fri 29 Jan 2027 06:41:11 +0000
asID:                     262191
IP address blocks:        2800:b70:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:35:43:9f:13:0d:8e:d1:b1:b6:e5:a4:02:cd:50:c6:92:ef:46:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:11 2026 GMT
            Not After : Jan 29 06:41:11 2027 GMT
        Subject: CN=432C31B78E88B5527C80AE8A2356CFECEEE58DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:61:84:5f:52:18:f6:16:11:bf:97:04:10:
                    3b:21:4c:ae:40:a5:00:18:63:6e:bd:7b:b9:08:bd:
                    19:fd:5d:98:a3:af:20:6c:79:ee:3b:60:75:b1:5b:
                    2b:f8:73:91:ca:46:a8:45:32:71:24:0b:6d:34:10:
                    00:c2:7f:17:4c:93:26:28:d9:f1:86:f2:46:bc:87:
                    be:45:7a:20:bd:d1:ec:3d:85:8e:93:5c:e8:04:b5:
                    7b:38:ac:6d:1d:61:d3:c7:f5:c2:2f:55:63:99:a4:
                    14:55:a4:d7:0e:52:b7:44:5d:e0:e8:ce:43:e4:13:
                    db:81:e2:70:32:dd:b6:38:39:b7:ca:bc:e8:e9:f1:
                    db:91:c6:66:f7:73:af:f6:37:32:76:ac:3b:f5:f5:
                    57:89:56:d8:7b:c3:64:89:48:cc:21:f0:5a:64:74:
                    a2:7a:48:58:87:cb:1a:0c:9f:47:cf:8a:8a:6a:0a:
                    13:af:9e:53:2f:c0:bf:d8:bd:a9:2e:c4:dd:2c:46:
                    ca:58:9e:a0:d4:b3:e0:c1:ba:84:88:68:5a:c1:74:
                    1c:44:ce:51:08:34:d0:2f:9b:bf:d1:3b:51:ab:4d:
                    be:4f:29:f0:f0:e5:ee:8f:17:1a:6f:67:9b:f9:bf:
                    8b:e7:3c:e9:c1:52:a8:6c:d7:62:92:b5:86:3c:94:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:31:B7:8E:88:B5:52:7C:80:AE:8A:23:56:CF:EC:EE:E5:8D:DD
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:a6:8a:58:c1:de:41:8b:c3:39:02:32:f6:a9:4c:fe:25:c9:
         2f:27:be:96:e1:60:02:c8:5a:b5:a0:9f:20:66:6f:9a:dc:3a:
         1e:25:b7:37:d1:34:78:d1:df:8d:cc:84:54:e1:ac:d8:52:32:
         6b:df:91:cb:f9:92:ad:aa:83:19:29:24:2b:41:be:ba:a8:5f:
         b1:27:25:98:aa:93:8a:b1:d8:7d:f9:50:ba:d0:b9:e3:79:56:
         e6:e6:d1:a1:6d:57:0f:b2:39:31:54:de:87:30:2b:4b:a5:98:
         9c:ca:79:a2:5f:30:c5:9a:28:0c:e1:b3:c7:01:68:04:b5:1f:
         96:c2:11:08:eb:ed:18:dc:fa:8f:9b:f6:75:63:76:9c:6d:1b:
         0c:76:1c:1b:b6:0f:50:54:0e:6f:7e:e4:2e:ed:9f:34:54:56:
         59:dc:b7:26:4a:c0:3d:2b:b5:05:2d:28:0d:d4:1f:63:52:cc:
         9a:18:0d:a1:96:97:1f:59:fd:b7:88:19:00:8e:1f:51:3d:24:
         9b:aa:dd:4e:6b:61:18:1e:fa:1d:7e:04:01:38:5f:90:98:0f:
         bc:89:2d:d0:52:04:82:6a:af:bb:a7:e0:7a:d2:b7:c8:9b:5b:
         b7:cc:64:d1:59:6b:d6:9b:ac:2e:2b:c1:d9:db:5e:d0:c7:e6:
         95:4c:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:04 2026 by rpki-client