Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3438203d3e203237383839.roa
File:                     323830303a3530303a3a2f33322d3438203d3e203237383839.roa (raw, json)
Hash identifier:          I6iFMn2QE9G03HfICZOn+OzJMAycXspWa2H+lCuFJmg=
Subject key identifier:   44:1F:C8:E6:D6:54:CE:0F:9E:17:65:2F:55:6F:A3:CA:7D:DF:18:56
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       041EEA973242D5933488304D48B8620EA98967B7
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3438203d3e203237383839.roa
Signing time:             Wed 10 Jun 2026 19:47:18 +0000
ROA not before:           Wed 10 Jun 2026 19:42:18 +0000
ROA not after:            Wed 09 Jun 2027 19:47:18 +0000
asID:                     27889
IP address blocks:        2800:500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1e:ea:97:32:42:d5:93:34:88:30:4d:48:b8:62:0e:a9:89:67:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Jun 10 19:42:18 2026 GMT
            Not After : Jun  9 19:47:18 2027 GMT
        Subject: CN=441FC8E6D654CE0F9E17652F556FA3CA7DDF1856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:c0:37:3d:8e:d0:a2:15:3d:f7:a0:be:21:
                    14:5d:d4:ce:44:e0:9c:4a:8d:fa:28:62:1e:07:80:
                    de:8a:90:e7:a3:98:53:20:60:62:f5:e7:5d:4c:f1:
                    fe:17:1a:92:51:14:bc:1d:8c:90:da:f1:3a:cd:c7:
                    22:8a:20:93:aa:e6:13:e9:6b:36:86:48:b6:c0:77:
                    1c:df:df:4a:39:6b:f8:52:13:17:a8:b7:39:1e:cb:
                    c7:95:21:59:75:ea:10:15:ff:48:7b:ef:8f:8b:9d:
                    c1:59:ce:16:79:bb:44:8b:76:8e:f7:de:da:a0:d3:
                    ec:c2:c0:07:fd:47:5c:2d:df:a2:4b:6c:e0:a5:5d:
                    31:a8:dc:b9:4e:80:5a:13:1f:74:7d:36:60:81:9f:
                    dd:ac:74:a7:a3:1d:65:f6:9e:45:ae:de:df:23:62:
                    53:47:a7:b9:ef:22:07:ec:be:9d:97:e9:69:42:36:
                    1d:45:77:82:7e:c3:25:a9:95:c4:e4:29:15:2e:19:
                    93:f1:fa:28:2a:0d:ce:2b:bd:36:d5:d3:dc:ee:dc:
                    32:ad:5d:eb:74:52:35:d7:94:d1:e6:49:aa:ca:d2:
                    58:08:4e:e4:d0:f3:57:08:5d:a6:ec:74:8e:0f:c8:
                    aa:0a:ed:32:57:de:93:ae:4d:ba:65:dd:7f:a8:c2:
                    3e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:C8:E6:D6:54:CE:0F:9E:17:65:2F:55:6F:A3:CA:7D:DF:18:56
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3438203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:98:34:85:76:d2:55:a1:5b:79:e2:e2:b2:41:e9:07:64:
         6c:9e:b1:7b:65:52:20:30:2a:47:a1:1b:be:1c:1f:d6:9b:81:
         f8:04:0e:bc:0e:b2:c2:62:85:d8:e4:ff:17:bc:cd:c5:cd:93:
         d2:5c:b7:d6:dd:b9:61:c5:46:71:48:0c:74:1c:29:f6:ee:8e:
         60:00:40:79:6a:7c:9a:9c:51:a1:93:7f:c8:0c:e2:e2:5e:86:
         0a:f2:ed:66:f3:bd:75:d4:45:36:b1:b1:2d:a7:19:09:78:3e:
         34:04:41:44:97:ad:2d:0e:12:ae:93:2b:12:1b:f9:42:a7:29:
         e9:d8:70:11:39:37:16:d2:35:6d:11:97:2c:ff:e3:25:98:f8:
         63:69:4d:9d:0f:29:7f:db:e1:b0:80:63:de:98:c7:87:fc:8e:
         bb:6c:41:4f:e7:03:f2:7e:8f:b4:e3:f9:09:f3:08:66:53:18:
         f2:b6:58:f6:f2:a0:f3:c7:b8:5e:54:09:df:80:ab:d4:ce:be:
         ca:f9:ad:ca:ab:4b:74:ea:7b:bd:08:22:f2:82:1c:a2:66:cb:
         0a:07:ba:65:9c:dd:b4:00:1a:d4:c4:e9:33:d9:86:8f:04:5f:
         10:f0:09:68:b5:bd:4d:a9:9a:eb:ba:cb:ea:97:3e:61:dd:47:
         3c:de:78:0d
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUBB7qlzJC1ZM0iDBNSLhiDqmJZ7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyQzA2NUM5NzRFNzAwQjEzNjlFREY0QURCRTFCRDEx
MjcyQjA5QTAeFw0yNjA2MTAxOTQyMThaFw0yNzA2MDkxOTQ3MThaMDMxMTAvBgNV
BAMTKDQ0MUZDOEU2RDY1NENFMEY5RTE3NjUyRjU1NkZBM0NBN0RERjE4NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7icA3PY7QohU996C+IRRd1M5E
4JxKjfooYh4HgN6KkOejmFMgYGL1511M8f4XGpJRFLwdjJDa8TrNxyKKIJOq5hPp
azaGSLbAdxzf30o5a/hSExeotzkey8eVIVl16hAV/0h774+LncFZzhZ5u0SLdo73
3tqg0+zCwAf9R1wt36JLbOClXTGo3LlOgFoTH3R9NmCBn92sdKejHWX2nkWu3t8j
YlNHp7nvIgfsvp2X6WlCNh1Fd4J+wyWplcTkKRUuGZPx+igqDc4rvTbV09zu3DKt
Xet0UjXXlNHmSarK0lgITuTQ81cIXabsdI4PyKoK7TJX3pOuTbpl3X+owj61AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQURB/I5tZUzg+eF2UvVW+jyn3fGFYwHwYDVR0j
BBgwFoAUPSwGXJdOcAsTae30rb4b0RJysJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjE3NDg3OEY2NUMzMDk5REVFMjZFQTI5NjUxODVERDJD
MDEwMTUzQzVEQzM0MzcyM0I1MEE0MDYwQThBMEVBLzAvM0QyQzA2NUM5NzRFNzAw
QjEzNjlFREY0QURCRTFCRDExMjcyQjA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDJDMDY1Qzk3NEU3MDBCMTM2
OUVERjRBREJFMUJEMTEyNzJCMDlBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYxNzQ4NzhGNjVDMzA5OURFRTI2RUEyOTY1MTg1REQyQzAxMDE1M0M1
REMzNDM3MjNCNTBBNDA2MEE4QTBFQS8wLzMyMzgzMDMwM2EzNTMwMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAFADANBgkq
hkiG9w0BAQsFAAOCAQEAMEyYNIV20lWhW3ni4rJB6QdkbJ6xe2VSIDAqR6Ebvhwf
1puB+AQOvA6ywmKF2OT/F7zNxc2T0ly31t25YcVGcUgMdBwp9u6OYABAeWp8mpxR
oZN/yAzi4l6GCvLtZvO9ddRFNrGxLacZCXg+NARBRJetLQ4SrpMrEhv5Qqcp6dhw
ETk3FtI1bRGXLP/jJZj4Y2lNnQ8pf9vhsIBj3pjHh/yOu2xBT+cD8n6PtOP5CfMI
ZlMY8rZY9vKg88e4XlQJ34Cr1M6+yvmtyqtLdOp7vQgi8oIcombLCge6ZZzdtAAa
1MTpM9mGjwRfEPAJaLW9Tama67rL6pc+Yd1HPN54DQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:53:15 2026 by rpki-client