Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/323830313a3134353a3a2f34302d3438203d3e20323734303637.roa
File:                     323830313a3134353a3a2f34302d3438203d3e20323734303637.roa (raw, json)
Hash identifier:          k2DxQc4eZW+9sH01zBV9ZU3XUiYsCduNgYVkgSf7JWE=
Subject key identifier:   E5:4F:34:A1:3A:D0:F1:4C:91:75:1B:B7:CE:3D:B3:B3:F6:0C:E3:85
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       02C816B4980DA98BEA59B72B9E058920B58C4CBA
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/323830313a3134353a3a2f34302d3438203d3e20323734303637.roa
Signing time:             Thu 04 Jun 2026 12:46:33 +0000
ROA not before:           Thu 04 Jun 2026 12:41:33 +0000
ROA not after:            Thu 03 Jun 2027 12:46:33 +0000
asID:                     274067
IP address blocks:        2801:145::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c8:16:b4:98:0d:a9:8b:ea:59:b7:2b:9e:05:89:20:b5:8c:4c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: Jun  4 12:41:33 2026 GMT
            Not After : Jun  3 12:46:33 2027 GMT
        Subject: CN=E54F34A13AD0F14C91751BB7CE3DB3B3F60CE385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:5f:9a:d5:33:1e:10:bb:e9:ef:9d:e4:46:
                    4e:3a:83:20:70:db:35:5f:50:d6:98:c4:11:26:a8:
                    5f:6f:c7:6c:c3:fd:17:d1:b2:72:67:ee:24:60:17:
                    fe:60:56:2e:48:58:aa:14:86:a1:2c:eb:13:e7:af:
                    f5:df:e2:d1:f7:c4:9b:33:07:50:ae:7a:a5:66:d0:
                    9e:90:b8:78:4a:03:f6:72:59:43:37:9c:cf:2a:0c:
                    f0:ce:c9:57:91:56:2d:4b:ce:30:8d:0c:e0:bf:07:
                    05:7c:a6:00:2d:62:fe:45:3f:94:71:6a:85:bc:91:
                    95:ee:ac:34:e8:73:b4:3d:a4:bc:79:2c:8c:f9:e1:
                    45:d1:69:e1:e8:12:c5:0b:25:4d:09:1b:20:67:c6:
                    17:e1:6c:32:10:ec:96:e7:5b:c1:43:bb:e0:b7:30:
                    3d:13:0a:7f:54:36:d0:5b:85:0e:07:5d:0d:ea:82:
                    53:8e:66:c9:f7:95:82:c4:12:f7:14:3c:dc:dd:68:
                    97:48:bc:04:c9:05:3c:d5:90:6a:57:03:7b:c7:f7:
                    57:4f:7b:2a:ed:7f:57:26:0f:52:a8:54:eb:19:48:
                    1f:09:a1:33:e4:31:27:d7:1e:6d:78:81:d9:59:49:
                    2d:d9:56:dc:fb:dd:59:c4:8c:e3:0b:f8:2d:8c:3f:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4F:34:A1:3A:D0:F1:4C:91:75:1B:B7:CE:3D:B3:B3:F6:0C:E3:85
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/323830313a3134353a3a2f34302d3438203d3e20323734303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:145::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:e9:fb:82:77:9f:4a:a5:b1:71:26:d5:c6:86:9c:1a:ba:
         70:49:36:14:84:68:d1:8b:f9:03:29:e6:61:42:12:b8:9c:d9:
         df:9e:5b:68:e6:b1:77:5c:96:46:21:c7:f5:df:f4:b6:81:aa:
         d7:f5:a5:f6:7f:8b:f5:42:0e:70:a7:98:48:27:fb:49:56:a5:
         2a:fd:fb:00:61:80:c0:08:24:7d:bb:ed:08:6e:c5:35:fe:22:
         a3:ee:d7:d6:90:b0:90:23:cb:cc:1c:a3:8e:1b:3f:5e:07:a7:
         15:3d:89:d7:83:ae:d1:63:74:ee:35:db:dc:73:6b:51:17:8b:
         18:1c:48:d0:d3:0f:a6:4a:64:18:2d:c7:97:fa:d6:90:d2:22:
         ce:9f:4a:b4:42:85:73:6d:58:29:bc:24:b6:68:35:13:4a:f9:
         0d:d3:13:e9:39:13:4d:6d:72:4c:02:f3:63:a4:15:99:5e:0c:
         8c:41:7f:1d:a9:d1:00:ea:a5:8a:c7:9e:95:af:35:b4:b6:5c:
         ae:cf:a5:34:1f:14:c8:29:4d:8a:b9:af:4d:5c:e7:a6:52:f0:
         0b:4f:48:36:05:44:56:93:38:fc:c2:a5:9c:a8:d6:f8:e3:ba:
         9f:cc:7c:16:dd:da:48:cd:b1:aa:76:04:38:9d:ef:fc:8f:f7:
         41:1a:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:36 2026 by rpki-client