Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3434203d3e20323639393337.roa
File:                     323830313a3136613a3a2f34342d3434203d3e20323639393337.roa (raw, json)
Hash identifier:          KKcV+HNg2l9WDACmr64e8rLEIA2rXMSbx2FXM5wEtUU=
Subject key identifier:   B4:20:31:46:6F:40:3D:05:D3:72:33:46:6F:28:6C:E4:70:4B:67:E7
Certificate issuer:       /CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
Certificate serial:       138DC7903F3DFB48208B486B48A0834AE7BB04A0
Authority key identifier: 0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3434203d3e20323639393337.roa
Signing time:             Mon 19 Jan 2026 13:26:06 +0000
ROA not before:           Mon 19 Jan 2026 13:21:06 +0000
ROA not after:            Mon 18 Jan 2027 13:26:06 +0000
asID:                     269937
IP address blocks:        2801:16a::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8d:c7:90:3f:3d:fb:48:20:8b:48:6b:48:a0:83:4a:e7:bb:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
        Validity
            Not Before: Jan 19 13:21:06 2026 GMT
            Not After : Jan 18 13:26:06 2027 GMT
        Subject: CN=B42031466F403D05D37233466F286CE4704B67E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:53:27:71:86:8e:43:13:da:70:1a:14:72:
                    96:e6:bf:21:73:e5:39:f2:66:15:27:48:dc:e7:96:
                    33:51:a5:b1:ea:2f:96:4f:b8:96:12:cb:24:be:22:
                    64:b3:a6:da:86:d2:74:9e:da:07:bf:5b:85:57:04:
                    6f:37:ef:f2:18:92:7f:bb:2f:2e:be:f9:10:e0:2e:
                    55:34:53:30:69:93:45:28:5a:c6:8a:fc:27:ec:3c:
                    0a:47:23:e2:07:29:0c:53:4f:e7:76:07:1c:24:3b:
                    8e:fe:cb:71:2c:44:5c:70:bf:f6:ad:0a:01:0b:47:
                    b1:dc:20:03:5a:b3:38:d0:41:4f:b2:16:ec:c2:b2:
                    10:e9:68:f3:36:4e:3f:48:9b:04:80:81:82:d8:19:
                    33:08:0d:49:7f:3e:b2:6a:cf:1b:e8:35:94:a6:d8:
                    54:98:7b:cc:5f:cd:a1:7b:3d:7f:1e:ba:dd:c1:9b:
                    a7:85:96:0e:10:af:40:4f:c6:3a:f4:50:62:d3:29:
                    e6:e6:11:07:2a:46:de:e2:70:e0:7c:c4:be:ed:e4:
                    f4:a7:29:4a:df:d7:57:ee:07:38:e4:bd:a5:5d:fb:
                    8a:1b:c7:57:83:05:73:7e:19:85:b1:20:3a:80:66:
                    79:4c:8e:da:87:a1:3f:08:c7:0a:4f:9e:6a:d7:14:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:20:31:46:6F:40:3D:05:D3:72:33:46:6F:28:6C:E4:70:4B:67:E7
            X509v3 Authority Key Identifier:
                keyid:0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3434203d3e20323639393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16a::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:4e:8b:a5:2d:2b:41:39:b4:c0:05:21:35:8e:3e:a0:66:7d:
         10:52:19:ed:c2:e7:20:21:fa:5c:22:42:0b:62:02:15:32:40:
         14:ce:fe:60:f9:6c:90:ed:84:c3:18:98:c9:6e:34:2c:a6:d9:
         21:e2:22:f4:52:c4:29:75:18:59:e4:63:95:d8:62:54:b6:89:
         65:05:c6:be:18:9b:9c:57:6c:ea:2d:92:f7:67:c6:63:4a:ec:
         76:c0:11:d4:3a:d8:e3:19:7c:a1:3d:20:50:0a:20:f6:b5:16:
         ba:6b:fa:d8:16:2f:de:8b:c9:d5:ab:e0:09:4b:25:8c:26:57:
         29:58:35:e8:57:70:3d:8a:4e:7f:83:0c:05:70:b4:b0:d2:8e:
         a6:7c:6a:d4:cc:b4:52:a7:43:f6:0f:a4:13:7f:7e:61:4e:56:
         e5:01:e1:7d:b5:4b:1a:2d:fa:a8:0a:76:1c:1f:6b:34:5b:6a:
         c8:72:18:64:ee:ea:3e:06:56:04:30:1c:0f:90:b1:6c:9d:47:
         18:b7:da:e2:51:01:32:87:55:d2:2f:b4:3d:24:5f:77:71:7e:
         f8:ae:34:f2:40:9c:54:ae:57:c4:b4:bc:87:c4:53:6a:e2:e9:
         c0:8f:36:24:82:3d:cc:a2:1a:9d:e9:a9:24:52:69:e5:80:48:
         43:23:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:02 2026 by rpki-client