Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e203136363139.roa
File:                     323830333a343961303a3a2f33322d3438203d3e203136363139.roa (raw, json)
Hash identifier:          Zz7/EaqLSKui6pRzi8ebH702XeZY05tKTnnLixLLzNY=
Subject key identifier:   98:4B:8F:65:D3:1A:F7:C8:9D:7C:1A:8E:A7:1A:7E:54:AD:E8:98:29
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       25C1425899CBFFCE572B44059AFFB0BC22FA33F2
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e203136363139.roa
Signing time:             Fri 15 May 2026 17:42:43 +0000
ROA not before:           Fri 15 May 2026 17:37:43 +0000
ROA not after:            Fri 14 May 2027 17:42:43 +0000
asID:                     16619
IP address blocks:        2803:49a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c1:42:58:99:cb:ff:ce:57:2b:44:05:9a:ff:b0:bc:22:fa:33:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: May 15 17:37:43 2026 GMT
            Not After : May 14 17:42:43 2027 GMT
        Subject: CN=984B8F65D31AF7C89D7C1A8EA71A7E54ADE89829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:32:34:05:d9:85:d1:b9:ea:3d:67:45:af:
                    04:67:fd:e2:ad:af:54:51:54:07:43:40:10:5f:bd:
                    b9:f6:d4:56:03:4f:c9:3f:75:c5:f9:3a:76:b6:16:
                    38:13:e0:50:85:e4:33:7b:c4:31:08:0e:14:86:01:
                    c8:2f:44:9f:af:06:df:e0:20:70:88:ea:cb:7f:22:
                    9c:4a:32:3a:e9:a7:3d:1b:03:e2:dd:42:b9:52:d9:
                    59:1d:dd:ad:0c:e5:28:7e:4f:d7:97:fa:d6:50:42:
                    c4:8e:c9:b0:18:a8:0f:d0:88:0b:fe:f1:fb:45:4f:
                    92:5e:c4:35:0c:0a:59:ed:7f:9c:6f:8e:9a:51:f5:
                    e5:e3:6e:e2:b8:98:e9:96:e6:b1:f9:7a:76:e7:2b:
                    c0:42:b4:38:91:f7:57:4d:7f:a0:db:fa:af:8b:fc:
                    aa:e4:36:19:08:6c:db:54:bc:ac:2d:31:3f:34:81:
                    ea:78:8c:e3:65:5b:d0:c3:97:ba:13:dc:43:c1:15:
                    d1:3a:7e:45:10:a5:05:a0:6d:56:76:66:8c:48:8a:
                    44:62:aa:de:b5:40:f1:74:02:8b:82:bf:4e:c1:12:
                    e6:dd:d3:a7:69:b2:54:37:8e:e7:77:83:d3:93:f3:
                    5e:26:15:c0:dc:fc:3e:7d:c8:be:b1:e1:2e:37:57:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4B:8F:65:D3:1A:F7:C8:9D:7C:1A:8E:A7:1A:7E:54:AD:E8:98:29
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/323830333a343961303a3a2f33322d3438203d3e203136363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:49a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:5d:61:25:27:8f:39:43:d2:16:7f:bc:2d:d0:ae:c3:87:
         44:ef:5d:df:54:30:bd:15:92:0f:d6:a6:bf:f4:44:4d:f9:b2:
         92:78:09:66:4a:26:d4:54:cd:fd:4c:62:a4:f4:2b:de:c6:f5:
         93:db:bd:05:28:18:eb:a0:0d:3a:66:17:10:ff:4d:39:b5:ae:
         5d:a9:a5:db:0c:b5:d6:7d:64:be:5c:29:c5:81:54:4d:26:52:
         82:f6:fa:79:73:43:5e:3b:71:24:93:48:7b:52:43:de:9a:04:
         1e:60:21:79:c4:a3:71:cd:5d:4e:5b:0a:60:cb:77:8e:15:e7:
         93:13:c1:48:af:81:67:7d:3d:69:f9:b0:18:bf:c0:ce:87:3b:
         63:06:c6:6c:ca:33:9b:70:6a:39:43:6a:cd:48:f2:e3:22:67:
         7c:b8:e6:48:36:8c:15:6f:45:b4:22:ce:eb:5c:42:ee:6b:c6:
         83:55:19:17:01:4c:9c:be:b0:62:e4:94:26:e3:ea:87:f2:bf:
         b4:17:09:b8:0a:b6:2c:da:9c:8a:e2:42:1a:4f:24:f0:09:cc:
         1f:37:42:d5:51:a7:24:4d:2c:e9:1c:67:24:8a:d2:31:4b:e4:
         4c:1c:2a:24:d6:9e:86:8a:29:db:92:1b:57:8c:de:6a:9d:19:
         20:6b:9a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:15:14 2026 by rpki-client