Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646338303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a646338303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          bgRq9ST+K+e0yH6JWhoJT7LpAK2U/yCChct3W4xIDL4=
Subject key identifier:   72:97:0F:45:89:D6:5C:59:5F:D4:B0:B8:84:48:4C:B9:55:4E:BD:CE
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       52690141508F55D3455B22AFE2BADED9BAD1A6E4
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646338303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Thu 14 May 2026 15:42:28 +0000
ROA not before:           Thu 14 May 2026 15:37:28 +0000
ROA not after:            Thu 13 May 2027 15:42:28 +0000
asID:                     22927
IP address blocks:        2800:a00:dc80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 11:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:69:01:41:50:8f:55:d3:45:5b:22:af:e2:ba:de:d9:ba:d1:a6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: May 14 15:37:28 2026 GMT
            Not After : May 13 15:42:28 2027 GMT
        Subject: CN=72970F4589D65C595FD4B0B884484CB9554EBDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:c9:7d:ff:5f:df:a3:4c:0e:3e:1d:94:d0:
                    39:3d:08:15:0c:f1:35:6a:24:d3:cc:1a:63:10:1b:
                    7a:ca:5b:95:26:17:df:08:e0:9e:d7:81:f4:d6:cc:
                    42:7e:a4:36:92:06:9e:de:e7:bf:7d:69:9a:02:3a:
                    cf:4e:3e:8a:69:15:1e:5c:70:4e:eb:ae:9f:c4:04:
                    21:b6:c7:02:85:a5:1d:66:02:cd:ec:75:b3:de:2d:
                    eb:5a:aa:0b:07:a9:6a:51:10:6b:42:15:a8:ba:fe:
                    7e:37:6d:39:1e:0a:3f:81:86:60:0e:04:42:5b:66:
                    83:4a:df:7c:d3:98:ab:34:be:27:32:ee:ab:e9:d5:
                    c3:be:ba:03:32:db:cc:b7:41:2e:14:bc:a5:e9:87:
                    3a:98:04:84:ae:f7:27:80:fd:38:56:28:c8:f7:1d:
                    83:d6:a2:1c:f9:af:bd:66:2a:2e:80:aa:a1:3a:9d:
                    88:c9:34:90:12:c3:fc:be:8c:34:df:3f:3a:9b:2e:
                    34:29:09:d2:31:af:71:15:55:94:b0:68:c8:2d:73:
                    fe:3c:9d:ca:6e:e6:bf:b7:2d:b1:06:06:26:94:d8:
                    b5:78:bc:84:c4:3d:de:98:05:fb:25:15:aa:fc:9d:
                    b4:89:6e:73:5c:ca:e6:7e:43:89:85:f3:fc:ef:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:97:0F:45:89:D6:5C:59:5F:D4:B0:B8:84:48:4C:B9:55:4E:BD:CE
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646338303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:dc80::/41

    Signature Algorithm: sha256WithRSAEncryption
         10:cb:ab:1b:41:a8:4d:f1:05:b8:16:da:3b:6c:78:dd:30:ba:
         0d:4f:8e:72:b3:38:e5:49:3d:59:e7:49:03:27:93:99:69:dc:
         97:ae:bc:26:b1:94:a0:03:b0:b7:51:9c:ff:51:9d:ce:ad:8a:
         94:99:89:06:0c:d0:6f:af:13:09:29:69:6b:00:b0:36:27:10:
         72:53:45:b0:0f:7f:01:84:5f:6b:7a:b4:22:81:90:14:bb:65:
         5a:be:2c:a8:8e:5e:40:e5:97:31:83:50:fa:f4:6c:b9:88:5f:
         4c:86:ad:ca:61:48:88:99:67:c0:d2:a1:56:da:73:34:fe:bf:
         7d:6d:85:a7:1a:14:9d:ed:67:03:5e:2a:cd:f0:bd:5b:b7:1e:
         b3:06:ce:88:5d:e4:5f:5b:fa:90:4a:07:19:08:f7:2a:d1:20:
         79:b7:1b:84:10:39:5f:8a:6c:a3:72:7e:53:7e:c9:cd:0d:77:
         b2:ce:01:e2:56:29:ba:fe:d9:e2:09:df:0f:2e:7e:7d:ce:7e:
         7e:6a:a6:44:c9:0d:6f:6c:45:62:c9:c4:49:c8:80:33:3d:88:
         19:4f:92:32:24:fc:3d:7b:78:22:9e:67:1b:7f:e8:36:9e:2a:
         1f:ea:7a:f5:7d:44:46:82:06:81:b8:06:d3:68:6a:6a:1f:24:
         15:d8:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:34:00 2026 by rpki-client