Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D7E7BEF14B252E3D07ECA5C95770CAB0CB1CC49CEC92C7A47961C7764D6ECB1/0/323830363a3334393a3a2f33322d3438203d3e20323635353939.roa
File:                     323830363a3334393a3a2f33322d3438203d3e20323635353939.roa (raw, json)
Hash identifier:          uz1UZA/Mu+bwKZFAtHMKqLUQCnRjE5Hnuao8jDE05p4=
Subject key identifier:   03:46:DF:EA:D1:9D:69:6C:46:46:43:B8:1B:C9:52:E0:62:05:B3:79
Certificate issuer:       /CN=1B313A11E8D0ADEECAEE783089D32A7AB006BCB2
Certificate serial:       46F9A3ED97B8290DE84ECCEDD92595BBB3B4E111
Authority key identifier: 1B:31:3A:11:E8:D0:AD:EE:CA:EE:78:30:89:D3:2A:7A:B0:06:BC:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B313A11E8D0ADEECAEE783089D32A7AB006BCB2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D7E7BEF14B252E3D07ECA5C95770CAB0CB1CC49CEC92C7A47961C7764D6ECB1/0/323830363a3334393a3a2f33322d3438203d3e20323635353939.roa
Signing time:             Sat 06 Jun 2026 19:00:00 +0000
ROA not before:           Sat 06 Jun 2026 18:55:00 +0000
ROA not after:            Sat 05 Jun 2027 19:00:00 +0000
asID:                     265599
IP address blocks:        2806:349::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D7E7BEF14B252E3D07ECA5C95770CAB0CB1CC49CEC92C7A47961C7764D6ECB1/0/1B313A11E8D0ADEECAEE783089D32A7AB006BCB2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D7E7BEF14B252E3D07ECA5C95770CAB0CB1CC49CEC92C7A47961C7764D6ECB1/0/1B313A11E8D0ADEECAEE783089D32A7AB006BCB2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B313A11E8D0ADEECAEE783089D32A7AB006BCB2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f9:a3:ed:97:b8:29:0d:e8:4e:cc:ed:d9:25:95:bb:b3:b4:e1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B313A11E8D0ADEECAEE783089D32A7AB006BCB2
        Validity
            Not Before: Jun  6 18:55:00 2026 GMT
            Not After : Jun  5 19:00:00 2027 GMT
        Subject: CN=0346DFEAD19D696C464643B81BC952E06205B379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:3e:63:4e:6d:6b:c8:ce:4c:14:60:16:b5:
                    c0:fd:f7:e2:cd:a9:27:be:75:18:ab:2b:36:a1:c3:
                    a8:42:09:61:f8:86:cc:d4:3c:a6:ac:e6:2b:df:35:
                    71:2c:08:95:d0:63:07:e5:10:6c:07:76:4f:83:d1:
                    d2:76:95:45:b5:51:e9:2d:5c:37:73:6b:d8:7d:08:
                    2f:e9:bd:b8:5b:f2:80:fa:5b:f9:76:56:dc:b2:0f:
                    cc:a0:52:9e:7d:b2:e8:63:ff:a4:47:35:e4:46:34:
                    63:52:14:a1:74:e0:57:28:5b:1f:47:4b:30:5e:ea:
                    bd:db:cd:60:d2:cc:2d:d4:b3:bc:4e:2f:4d:19:bf:
                    76:38:89:f8:01:95:06:7d:73:64:91:b4:6b:60:c3:
                    55:7e:28:af:9d:33:14:7d:26:e1:cd:35:22:3e:ec:
                    c7:6a:5e:3d:94:9f:34:f5:5b:33:b6:f4:47:a3:8c:
                    2d:d4:91:59:ba:24:47:5d:7c:59:a1:91:1d:e6:f4:
                    c3:b6:45:03:51:af:6c:c0:f9:40:c5:c0:00:44:9f:
                    7d:6b:07:bb:f7:15:70:74:53:55:c8:b8:42:d5:80:
                    e7:d3:b4:c6:f7:ca:22:78:b5:66:12:d7:fa:5d:0f:
                    66:b2:81:d1:c1:8e:62:4c:97:94:17:3b:45:f4:15:
                    cf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:DF:EA:D1:9D:69:6C:46:46:43:B8:1B:C9:52:E0:62:05:B3:79
            X509v3 Authority Key Identifier:
                keyid:1B:31:3A:11:E8:D0:AD:EE:CA:EE:78:30:89:D3:2A:7A:B0:06:BC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D7E7BEF14B252E3D07ECA5C95770CAB0CB1CC49CEC92C7A47961C7764D6ECB1/0/1B313A11E8D0ADEECAEE783089D32A7AB006BCB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B313A11E8D0ADEECAEE783089D32A7AB006BCB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D7E7BEF14B252E3D07ECA5C95770CAB0CB1CC49CEC92C7A47961C7764D6ECB1/0/323830363a3334393a3a2f33322d3438203d3e20323635353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:349::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:c3:e6:12:03:e4:16:17:60:05:26:e0:c0:aa:9e:12:64:
         7c:37:14:d5:1f:eb:de:82:c2:10:98:73:6d:8a:70:78:4d:43:
         17:fd:81:4d:56:ac:3d:92:88:f8:1e:7a:95:80:b4:99:d6:29:
         f4:26:fa:e5:2f:3b:99:a8:6f:1e:d6:c1:ba:85:61:a0:90:a1:
         32:7d:b8:0a:48:d4:64:93:b7:39:5d:51:1f:7f:a9:26:14:b3:
         54:09:d4:67:b2:42:17:54:9d:25:45:d4:3d:0c:77:41:c9:48:
         bf:20:70:68:5c:3c:30:97:4c:64:db:26:93:93:4a:de:67:0c:
         0b:c1:f2:0b:81:08:28:9f:5f:20:34:18:7d:80:45:06:69:87:
         cf:77:ca:4a:e3:cf:5a:42:06:aa:7e:43:16:0f:9c:e2:3d:7c:
         e8:ad:48:2f:c5:84:df:43:33:ca:96:a4:f5:34:3c:11:27:e7:
         11:00:99:42:d2:45:b8:0e:3e:10:f6:1e:bc:c0:77:1a:08:a3:
         77:c7:cb:32:4a:ff:b9:09:cb:bf:4e:57:2c:a0:5f:9c:68:93:
         af:58:18:75:4c:1f:c8:66:ba:16:2b:9b:75:98:02:84:7e:7c:
         b5:ea:f7:8b:60:69:bc:fe:00:f3:18:62:9a:53:e6:5a:30:c3:
         0a:e9:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:28:56 2026 by rpki-client