Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          nsSoaoQMZLgygPvePL0TOmwIs7J3SwPEJS9X3LY36u4=
Subject key identifier:   05:AD:CC:96:A7:F9:7D:FE:C8:62:F0:2C:B7:CF:33:C9:74:EE:64:24
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       086EEAAF651594908E0E241CB61D9909E914B29A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 29 Jan 2026 16:28:15 +0000
ROA not before:           Thu 29 Jan 2026 16:23:15 +0000
ROA not after:            Thu 28 Jan 2027 16:28:15 +0000
asID:                     18678
IP address blocks:        2800:310:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6e:ea:af:65:15:94:90:8e:0e:24:1c:b6:1d:99:09:e9:14:b2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan 29 16:23:15 2026 GMT
            Not After : Jan 28 16:28:15 2027 GMT
        Subject: CN=05ADCC96A7F97DFEC862F02CB7CF33C974EE6424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:57:45:87:9f:cc:c6:9e:24:b2:18:fc:ed:
                    33:ad:b2:6a:73:a4:fd:89:d2:a0:e5:14:23:36:df:
                    fd:61:1a:1c:53:ad:79:79:d6:e8:11:a5:1f:35:c9:
                    e4:ca:d6:07:d2:ad:c8:5a:62:86:5f:a2:83:45:01:
                    65:62:cf:37:99:5d:5e:27:d0:a3:f0:aa:a7:9b:70:
                    89:1a:16:33:43:46:71:69:3e:55:dc:98:0f:01:ec:
                    76:b7:1e:c4:e8:01:59:5c:3e:98:f4:8a:05:15:f4:
                    54:84:fb:78:51:3c:4e:ae:f6:e2:b0:68:f0:c5:d1:
                    35:e1:cc:a0:02:84:08:40:60:3f:a3:73:08:b9:88:
                    87:c4:c1:0c:00:2b:08:c6:1a:e4:84:d3:84:65:71:
                    15:9a:67:6b:fc:ca:73:51:b1:eb:fc:80:5c:a0:43:
                    75:a5:78:36:8d:7c:58:c6:8a:d0:58:00:89:ba:3b:
                    46:b5:1c:6d:60:98:6a:d8:ca:4c:f2:9e:92:0b:1f:
                    5a:9e:ec:98:46:d1:41:6f:e2:9e:e8:a7:de:03:15:
                    a3:79:68:61:c6:22:8e:5d:6b:23:2f:f8:b1:ae:f7:
                    43:23:60:51:c2:47:3e:3d:90:2e:49:71:81:99:ce:
                    63:42:b0:dc:b1:47:4b:26:6b:11:0b:8f:9a:87:25:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AD:CC:96:A7:F9:7D:FE:C8:62:F0:2C:B7:CF:33:C9:74:EE:64:24
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a31323a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:61:e8:3c:d4:d4:ec:af:ef:83:90:3a:9e:1a:2c:91:5b:
         9e:cb:e6:71:a6:d3:83:4f:18:b7:8c:68:58:c3:0f:10:98:ba:
         ee:cc:06:41:27:2c:05:13:ed:59:59:9a:6a:9c:f6:22:56:8c:
         54:f0:6e:72:e5:34:25:89:e8:12:39:cf:7f:dc:50:b0:96:94:
         58:73:9e:ea:65:8c:6e:83:96:58:5b:ee:8e:59:84:1b:24:a1:
         1d:10:88:ae:5b:27:43:b0:b7:34:c6:2d:e8:29:43:79:69:53:
         74:97:e0:00:07:06:8a:87:a5:29:4f:8e:51:49:f3:29:f4:ed:
         89:b9:c5:72:40:8b:58:72:7a:44:60:08:2f:5b:ca:18:41:a3:
         3e:e4:fc:4b:a5:4c:39:2d:3d:84:87:1d:cf:40:94:d2:86:74:
         6a:d3:6c:78:34:81:17:a7:53:b9:b4:c0:c8:e4:69:19:77:b9:
         bd:64:df:61:80:0a:37:43:2a:62:1a:4e:d1:ba:7c:1a:41:9c:
         e6:82:c6:8f:80:d9:ec:14:7b:e4:a2:36:d0:d5:11:c8:e8:1e:
         f4:7e:ea:6c:d9:d4:8c:53:2e:52:d6:f7:32:8a:f4:c9:0b:7f:
         40:f5:9b:48:12:f1:8a:c8:8d:db:d0:8d:65:f8:b7:dd:10:8f:
         57:af:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:22 2026 by rpki-client