Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3161613a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          DOQNk/3Xwc9pZRiFrzqT0KoJu9j75KKYgR7k7vMMJJo=
Subject key identifier:   5D:A2:2A:83:3C:7C:86:50:69:77:24:01:9E:B1:9D:83:AC:81:93:B7
Certificate issuer:       /CN=E001D620B6E014F51D5A8A878F416307AA8F761D
Certificate serial:       40E8B7C3A4C3EB11BB28220999FF766228253787
Authority key identifier: E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 07 Apr 2026 04:37:46 +0000
ROA not before:           Tue 07 Apr 2026 04:32:46 +0000
ROA not after:            Tue 06 Apr 2027 04:37:46 +0000
asID:                     27951
IP address blocks:        2801:1aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e8:b7:c3:a4:c3:eb:11:bb:28:22:09:99:ff:76:62:28:25:37:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E001D620B6E014F51D5A8A878F416307AA8F761D
        Validity
            Not Before: Apr  7 04:32:46 2026 GMT
            Not After : Apr  6 04:37:46 2027 GMT
        Subject: CN=5DA22A833C7C8650697724019EB19D83AC8193B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:0a:8c:f4:73:83:01:c1:a3:79:e7:c6:ef:
                    51:c9:e0:0b:b4:5c:49:c0:46:64:e4:d9:d1:ef:ca:
                    22:c5:6e:b2:50:74:8e:9f:21:07:f0:1e:11:11:dc:
                    e1:30:5d:f0:65:99:bc:83:36:6c:50:d7:12:8e:7b:
                    7d:9e:a9:de:32:72:d5:42:74:bb:0b:3b:97:0d:3d:
                    fc:23:b8:a6:b4:d0:15:b1:0a:65:01:7c:ff:38:83:
                    2f:0f:5b:1b:0d:96:8f:a5:07:5c:76:05:47:da:8f:
                    17:7f:5d:7b:52:7c:41:78:3b:c7:e4:3c:21:be:37:
                    1e:98:7e:1d:6b:68:1f:5a:ca:2e:e7:f3:40:7c:71:
                    30:aa:9d:32:3c:11:02:aa:72:b3:02:14:f6:0c:7c:
                    da:c2:61:67:e9:b1:99:99:40:75:7a:e9:ae:50:31:
                    b7:d0:ff:8f:2e:03:81:2a:30:1e:a1:57:03:78:a5:
                    86:1b:0b:56:c9:0a:c9:ac:0e:c6:92:d4:e7:09:d2:
                    11:c3:9f:0e:2d:9f:6a:1d:2b:f2:d5:7d:35:06:90:
                    81:7f:59:f1:17:6f:80:f1:24:9b:01:7a:c8:db:28:
                    5b:4b:67:d2:3d:9c:9c:7e:ba:4e:61:c2:6c:11:2c:
                    2c:34:b1:35:4e:a9:37:a9:02:ba:50:d3:6e:53:47:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A2:2A:83:3C:7C:86:50:69:77:24:01:9E:B1:9D:83:AC:81:93:B7
            X509v3 Authority Key Identifier:
                keyid:E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:7f:fe:bd:3f:a8:dd:5f:0c:4b:72:4e:77:22:7c:62:d5:
         e7:74:79:84:45:24:a0:bc:be:ad:8d:1b:72:dc:8c:9a:b1:d5:
         99:bb:3e:8e:05:5d:0c:40:8d:d7:ea:af:2a:26:17:a6:fb:cc:
         67:d5:4f:e9:9b:61:6d:3a:5b:22:99:3a:9e:4a:0a:cc:21:a2:
         bf:10:fc:42:42:ed:0d:7f:39:ef:6a:98:44:66:a9:27:b0:f8:
         26:24:b2:55:29:a9:da:34:bc:b2:94:68:85:2f:a2:0f:10:08:
         fb:94:43:0c:e2:14:75:b0:21:78:33:48:0a:71:b5:2b:1f:ed:
         22:5e:5e:35:3d:26:dd:6c:88:6b:cc:89:21:49:7d:b1:d9:9a:
         f0:08:73:14:85:58:15:35:ef:4c:33:0b:88:a3:12:92:25:86:
         af:e7:6f:82:33:b4:12:b4:a2:51:68:d2:89:6a:e8:f7:97:30:
         a9:b5:a1:b7:cc:1b:cd:49:54:cf:7c:61:84:66:14:fc:09:17:
         b2:64:4e:ae:27:1f:3a:37:bb:b2:8e:7e:ad:02:b1:5d:c5:be:
         29:1d:57:13:ce:09:a2:6d:93:c5:3c:82:aa:72:16:7c:6e:e1:
         75:39:59:ab:b8:eb:c1:41:08:46:09:c3:57:dc:27:de:99:a8:
         c9:af:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:45:41 2026 by rpki-client