Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a313a3a2f34382d3438203d3e20323732333932.roa
File:                     323830363a3432333a313a3a2f34382d3438203d3e20323732333932.roa (raw, json)
Hash identifier:          TYn5od37gAHNxRNWpCKf++EJlW7V2PvZbb3FYRm3vgo=
Subject key identifier:   39:86:57:DA:52:CB:01:C6:13:DF:C7:65:9D:CC:99:8B:31:CD:C9:5A
Certificate issuer:       /CN=A2E4158981CDF250DCA3053985B97F1CEBAF18AA
Certificate serial:       61C14541F7D0A91EB988A1E43EAC328825C4FCBE
Authority key identifier: A2:E4:15:89:81:CD:F2:50:DC:A3:05:39:85:B9:7F:1C:EB:AF:18:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a313a3a2f34382d3438203d3e20323732333932.roa
Signing time:             Wed 13 May 2026 15:42:17 +0000
ROA not before:           Wed 13 May 2026 15:37:17 +0000
ROA not after:            Wed 12 May 2027 15:42:17 +0000
asID:                     272392
IP address blocks:        2806:423:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c1:45:41:f7:d0:a9:1e:b9:88:a1:e4:3e:ac:32:88:25:c4:fc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E4158981CDF250DCA3053985B97F1CEBAF18AA
        Validity
            Not Before: May 13 15:37:17 2026 GMT
            Not After : May 12 15:42:17 2027 GMT
        Subject: CN=398657DA52CB01C613DFC7659DCC998B31CDC95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:05:c3:30:a8:93:6b:05:8f:14:dd:93:ce:
                    5c:f5:fa:97:f4:e9:44:10:c5:b5:b8:5b:26:7a:88:
                    09:e7:09:1c:67:5c:1d:98:ea:ec:6d:1d:fc:0c:81:
                    f3:ad:72:c0:b9:f6:76:4e:3d:fb:76:d4:b3:d4:e6:
                    82:01:e7:44:37:e4:3a:72:b2:23:0e:35:61:3f:4a:
                    b3:ae:77:73:a2:4b:31:be:ca:58:99:0e:9d:13:f6:
                    b6:d3:d4:01:b3:46:c5:23:d4:4b:94:f4:d9:04:81:
                    0c:48:98:36:bd:58:80:44:12:23:5f:8e:b2:8c:e7:
                    99:d9:b1:ed:6f:78:d0:64:55:bf:a5:f1:0e:df:bd:
                    ac:02:f5:42:35:26:b0:85:30:70:ad:7c:45:51:2f:
                    68:22:e1:93:37:85:db:a0:5d:6c:1a:e3:6d:e9:40:
                    62:1a:f6:61:a5:d7:95:fb:3c:fc:5a:f8:a4:24:ab:
                    e7:a1:4d:2c:84:e1:48:da:36:a1:69:19:23:9f:72:
                    59:8f:ac:37:21:f5:d5:90:0e:22:14:2a:99:1b:8f:
                    48:70:f6:f0:14:6f:4a:aa:60:c7:03:57:60:fb:4d:
                    f3:7f:28:de:6d:8f:64:78:32:cb:16:96:1a:e7:a7:
                    7a:90:f4:68:09:a6:63:bd:d2:e7:1a:10:85:aa:8b:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:57:DA:52:CB:01:C6:13:DF:C7:65:9D:CC:99:8B:31:CD:C9:5A
            X509v3 Authority Key Identifier:
                keyid:A2:E4:15:89:81:CD:F2:50:DC:A3:05:39:85:B9:7F:1C:EB:AF:18:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a313a3a2f34382d3438203d3e20323732333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:423:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:ce:02:1d:11:46:8c:fb:1b:66:0e:22:e2:4c:76:9b:f7:
         05:bd:7c:54:a9:16:84:fa:86:fc:f2:31:f6:52:27:93:3b:2c:
         0f:65:95:0f:3e:23:54:86:f2:ae:d9:4c:5d:d9:e8:ee:14:4f:
         39:bd:d4:a3:68:a3:94:30:aa:7d:57:99:50:bb:70:d2:ed:0f:
         4e:0d:8f:94:e8:38:fa:74:32:e1:c6:90:e6:45:2f:72:3e:8c:
         13:e2:8d:99:69:2b:8c:c0:ef:8e:a7:95:bf:f1:07:40:30:a9:
         47:62:71:42:86:bb:3f:14:24:2b:f4:1c:9e:75:6e:4c:a5:ed:
         d9:ab:97:60:5f:68:f0:55:f3:d6:dd:e5:3f:1c:88:89:36:25:
         02:f2:c5:95:ff:f8:d0:17:d5:8a:46:6d:86:61:74:7b:b7:d7:
         11:23:3e:a5:dc:e4:0a:35:43:8c:1b:16:ad:07:ee:4c:92:fa:
         9e:9d:96:64:81:4b:f1:c6:39:64:37:67:f5:0d:65:ef:d3:e6:
         d4:0c:eb:ba:1d:e1:d2:03:02:e0:89:47:a8:bb:2b:d9:8a:69:
         7c:79:5a:fb:e5:85:61:2f:29:1e:1e:b7:40:9c:27:ca:ea:a7:
         e8:c4:79:ca:4c:86:77:8c:c1:2a:ce:63:bc:23:5d:08:00:ff:
         78:61:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:13:31 2026 by rpki-client