Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/428C7B81496E00AEB814B3919936751E708DFCF5C9E4BE2913E6C9E8444A31CC/0/323830333a363164303a3a2f33322d3332203d3e20323734313331.roa
File:                     323830333a363164303a3a2f33322d3332203d3e20323734313331.roa (raw, json)
Hash identifier:          v4CR6p7QbxQI2wQ5IVJCKEnlcqX7eGn27BQlpxm36rI=
Subject key identifier:   4D:7E:E9:5E:58:AF:D7:25:41:B4:5F:A2:0C:05:F9:FC:35:D5:65:9E
Certificate issuer:       /CN=779344AA943411CEA34C6E434D50DF0FC21FDC13
Certificate serial:       7D792E6364193691AB652262424A4175D9A64C68
Authority key identifier: 77:93:44:AA:94:34:11:CE:A3:4C:6E:43:4D:50:DF:0F:C2:1F:DC:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779344AA943411CEA34C6E434D50DF0FC21FDC13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/428C7B81496E00AEB814B3919936751E708DFCF5C9E4BE2913E6C9E8444A31CC/0/323830333a363164303a3a2f33322d3332203d3e20323734313331.roa
Signing time:             Mon 13 Apr 2026 02:05:00 +0000
ROA not before:           Mon 13 Apr 2026 02:00:00 +0000
ROA not after:            Mon 12 Apr 2027 02:05:00 +0000
asID:                     274131
IP address blocks:        2803:61d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/428C7B81496E00AEB814B3919936751E708DFCF5C9E4BE2913E6C9E8444A31CC/0/779344AA943411CEA34C6E434D50DF0FC21FDC13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/428C7B81496E00AEB814B3919936751E708DFCF5C9E4BE2913E6C9E8444A31CC/0/779344AA943411CEA34C6E434D50DF0FC21FDC13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779344AA943411CEA34C6E434D50DF0FC21FDC13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 01:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:79:2e:63:64:19:36:91:ab:65:22:62:42:4a:41:75:d9:a6:4c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779344AA943411CEA34C6E434D50DF0FC21FDC13
        Validity
            Not Before: Apr 13 02:00:00 2026 GMT
            Not After : Apr 12 02:05:00 2027 GMT
        Subject: CN=4D7EE95E58AFD72541B45FA20C05F9FC35D5659E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:98:9c:af:34:07:0c:56:e5:33:df:ba:61:
                    53:14:e4:06:00:29:e2:ea:0d:39:f3:d1:c3:37:66:
                    68:77:85:02:e2:11:05:f4:e2:57:ca:9c:50:36:7b:
                    7f:33:8b:56:24:68:6f:5d:d8:49:49:df:99:2c:c4:
                    9f:ea:83:2d:bc:0b:5a:d0:9f:65:9c:cc:8d:99:ce:
                    02:62:fb:ee:28:d5:74:60:1e:21:34:3d:ca:88:b0:
                    a0:0b:e9:f2:09:b9:27:fc:30:a1:5f:b2:e5:e7:5c:
                    e6:e9:1b:94:ad:f7:ae:8f:39:8f:5f:67:e2:9e:57:
                    3b:d6:0f:8c:70:a7:05:33:41:67:00:c1:d5:7d:f9:
                    c3:f3:38:e3:29:d7:05:e8:93:8a:6c:a9:9c:0b:cb:
                    04:37:3c:0b:80:09:94:be:55:67:e7:47:15:85:06:
                    c0:77:3b:6e:06:ca:76:7b:11:bb:65:37:37:ae:a2:
                    be:a0:2e:f6:98:5b:e3:ed:ef:f6:67:c5:3a:dd:89:
                    8c:a9:ac:fb:e8:c9:e2:94:1b:2a:81:5f:9b:e7:9f:
                    ee:25:03:e2:62:53:e8:e1:a5:79:d0:d9:01:56:f0:
                    5d:7f:b3:e7:ce:e0:34:b9:0f:ee:15:02:b5:ce:1b:
                    da:28:33:72:bf:68:8f:bc:ed:7c:57:29:0d:87:7a:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7E:E9:5E:58:AF:D7:25:41:B4:5F:A2:0C:05:F9:FC:35:D5:65:9E
            X509v3 Authority Key Identifier:
                keyid:77:93:44:AA:94:34:11:CE:A3:4C:6E:43:4D:50:DF:0F:C2:1F:DC:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/428C7B81496E00AEB814B3919936751E708DFCF5C9E4BE2913E6C9E8444A31CC/0/779344AA943411CEA34C6E434D50DF0FC21FDC13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779344AA943411CEA34C6E434D50DF0FC21FDC13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/428C7B81496E00AEB814B3919936751E708DFCF5C9E4BE2913E6C9E8444A31CC/0/323830333a363164303a3a2f33322d3332203d3e20323734313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:61d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:c6:be:09:f3:c1:e4:75:09:cd:3e:7e:a3:13:27:d0:5d:7e:
         b5:6c:15:be:17:d9:4f:e5:91:e2:8d:0b:a7:f5:78:df:d9:b2:
         5f:4f:85:f6:f5:13:31:83:11:dd:00:b5:e8:1a:27:ff:bb:bc:
         00:1d:bf:d6:c2:fb:27:ad:e8:c1:ea:b9:c8:f2:a3:f5:7d:0a:
         18:6c:4d:d2:45:41:2b:53:27:36:d1:eb:bd:40:8b:9b:63:be:
         79:94:b1:57:1d:fa:1c:f4:26:d0:01:d6:07:84:38:89:49:f7:
         65:e1:f7:c1:4e:34:82:f3:ef:85:65:46:9c:42:dc:91:86:a1:
         8d:78:e7:3e:c4:f6:ad:7f:dd:6b:8c:bb:c4:15:33:76:6d:89:
         84:c2:4d:a7:8f:b6:3c:be:2e:f6:aa:eb:a3:da:80:86:fc:19:
         7c:cf:ed:06:2d:04:ba:3e:7a:fa:96:ae:b2:e8:a4:58:b9:a1:
         52:8f:d3:21:d9:b4:3c:ac:e7:2e:c6:c9:fc:13:d8:c3:d3:02:
         99:a1:79:2a:bf:7b:9f:a0:26:6c:5c:8c:9c:6f:9f:02:6d:3e:
         89:27:53:42:f3:88:18:a0:24:f4:0b:c7:01:46:28:4a:78:39:
         2b:7d:6c:56:2c:9b:ce:54:d5:b9:26:cc:2b:b7:b2:fd:9d:7e:
         fc:a6:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:56:53 2026 by rpki-client