Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ADA4F5B80A4DA9027208994EDEB16F2EE660EEC26333CA4AEBD7F6A10484CA6/0/323830313a3139653a3a2f34342d3438203d3e20323731383930.roa
File:                     323830313a3139653a3a2f34342d3438203d3e20323731383930.roa (raw, json)
Hash identifier:          LUWxF6jA/MBaNjQJg/jHPvW7uzPj8lr+uX+KJTMluho=
Subject key identifier:   82:64:F9:84:30:2C:31:0E:B4:86:D3:1E:AA:4C:74:04:CF:02:2D:B6
Certificate issuer:       /CN=33B78408A51BC4E2958023BD679D6ABCA32BF2C2
Certificate serial:       513D0B2A72CDE2CDB9AC4BB5ED24321142F6975E
Authority key identifier: 33:B7:84:08:A5:1B:C4:E2:95:80:23:BD:67:9D:6A:BC:A3:2B:F2:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33B78408A51BC4E2958023BD679D6ABCA32BF2C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ADA4F5B80A4DA9027208994EDEB16F2EE660EEC26333CA4AEBD7F6A10484CA6/0/323830313a3139653a3a2f34342d3438203d3e20323731383930.roa
Signing time:             Tue 03 Feb 2026 20:29:03 +0000
ROA not before:           Tue 03 Feb 2026 20:24:03 +0000
ROA not after:            Tue 02 Feb 2027 20:29:03 +0000
asID:                     271890
IP address blocks:        2801:19e::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6ADA4F5B80A4DA9027208994EDEB16F2EE660EEC26333CA4AEBD7F6A10484CA6/0/33B78408A51BC4E2958023BD679D6ABCA32BF2C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6ADA4F5B80A4DA9027208994EDEB16F2EE660EEC26333CA4AEBD7F6A10484CA6/0/33B78408A51BC4E2958023BD679D6ABCA32BF2C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33B78408A51BC4E2958023BD679D6ABCA32BF2C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3d:0b:2a:72:cd:e2:cd:b9:ac:4b:b5:ed:24:32:11:42:f6:97:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33B78408A51BC4E2958023BD679D6ABCA32BF2C2
        Validity
            Not Before: Feb  3 20:24:03 2026 GMT
            Not After : Feb  2 20:29:03 2027 GMT
        Subject: CN=8264F984302C310EB486D31EAA4C7404CF022DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:c7:75:fa:6e:05:03:2e:ba:c4:d5:8f:21:
                    cd:21:2e:11:86:a1:70:30:43:bd:da:6f:1b:b4:42:
                    b5:04:88:b2:de:fa:e6:84:20:80:04:70:0d:54:4c:
                    73:f8:30:27:b3:80:24:3b:2b:de:84:f6:a7:ac:91:
                    58:d9:7f:94:8d:66:b9:a0:04:cd:79:1f:6f:cb:14:
                    5c:a6:d0:31:d3:e5:64:65:ec:f9:6e:e3:bf:fc:bf:
                    49:6c:fc:9f:10:af:ff:64:fd:77:30:10:7d:b6:ae:
                    fe:2c:19:de:30:58:68:b7:5e:22:dc:1b:c7:c1:36:
                    f8:58:21:92:dd:7c:e6:1f:b7:dc:46:47:1d:7e:ef:
                    06:3a:41:c0:c9:71:2e:89:30:76:8e:79:04:a0:5c:
                    1a:29:03:e2:63:29:98:74:a1:5a:fd:4b:7f:de:1e:
                    6e:33:a3:a0:cc:6e:55:56:09:f7:3d:e5:46:c2:b8:
                    5c:4e:ab:58:3e:74:38:cc:dc:53:cf:d3:7a:0a:d5:
                    80:5a:4e:c8:e0:c4:d6:95:8d:c8:65:fd:14:c2:f1:
                    52:13:be:f2:e5:c6:d8:3b:f8:ff:6c:35:76:cd:c1:
                    de:60:78:39:8a:32:6e:6e:4f:e3:95:a6:b6:06:60:
                    54:c0:7e:e4:69:fc:1c:fe:0b:76:5f:a7:7a:26:50:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:64:F9:84:30:2C:31:0E:B4:86:D3:1E:AA:4C:74:04:CF:02:2D:B6
            X509v3 Authority Key Identifier:
                keyid:33:B7:84:08:A5:1B:C4:E2:95:80:23:BD:67:9D:6A:BC:A3:2B:F2:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ADA4F5B80A4DA9027208994EDEB16F2EE660EEC26333CA4AEBD7F6A10484CA6/0/33B78408A51BC4E2958023BD679D6ABCA32BF2C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33B78408A51BC4E2958023BD679D6ABCA32BF2C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ADA4F5B80A4DA9027208994EDEB16F2EE660EEC26333CA4AEBD7F6A10484CA6/0/323830313a3139653a3a2f34342d3438203d3e20323731383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19e::/44

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:aa:05:c2:61:f9:e0:56:63:1c:00:ec:1c:b5:39:d8:81:
         13:dd:5e:32:53:6c:8a:d8:31:5a:80:61:61:78:ac:cc:61:d2:
         a2:34:40:63:ba:a3:46:ae:94:75:8f:fc:5a:2d:d8:77:d6:56:
         de:be:1a:5c:d9:0d:1b:f4:56:bb:d5:c6:b5:01:10:98:e1:a3:
         f6:ad:b0:7e:a8:ac:49:73:c2:b0:e9:bb:19:d7:53:e0:70:b3:
         83:5a:3a:e4:cc:30:c6:1a:11:59:2d:c0:70:d7:98:6b:ae:dc:
         a5:cc:53:b1:b7:50:62:e0:e8:28:d7:ef:77:42:8a:97:38:3e:
         f2:a2:08:3a:9e:23:5d:9f:8b:41:e6:d4:a6:6a:3b:ad:2d:cf:
         0d:61:3d:61:12:31:2a:17:20:7a:ca:02:d7:08:e3:aa:b3:66:
         75:47:15:58:02:49:d5:07:36:80:30:ad:e7:7a:2b:44:6e:66:
         b6:9b:0a:d2:7e:d9:01:d0:8b:e3:d2:4a:46:59:ea:25:33:94:
         71:3e:63:2e:6a:20:45:cf:61:1c:44:7d:e8:aa:51:6e:ae:2c:
         a6:7a:74:30:50:f5:41:28:bc:08:53:7d:77:1f:10:53:67:ae:
         26:db:94:81:9e:93:14:e3:d0:51:28:ea:11:dc:b8:07:03:ad:
         aa:cf:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:21:12 2026 by rpki-client