Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3435203d3e20323733303437.roa
File:                     323830313a3136353a3a2f34342d3435203d3e20323733303437.roa (raw, json)
Hash identifier:          ZvJjJyijCMt5OPg72bBJ37Eq8XxpBv9pVQDfcNkgAgc=
Subject key identifier:   71:BD:4E:B7:D6:F9:B3:CE:B5:0A:E6:81:C0:5B:2A:16:BB:D7:FE:25
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       03C5C9D9DFC2C7EA880E9680F8A5A6F312C1509D
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3435203d3e20323733303437.roa
Signing time:             Mon 30 Mar 2026 21:36:53 +0000
ROA not before:           Mon 30 Mar 2026 21:31:53 +0000
ROA not after:            Mon 29 Mar 2027 21:36:53 +0000
asID:                     273047
IP address blocks:        2801:165::/44 maxlen: 45
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 17:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:c9:d9:df:c2:c7:ea:88:0e:96:80:f8:a5:a6:f3:12:c1:50:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Mar 30 21:31:53 2026 GMT
            Not After : Mar 29 21:36:53 2027 GMT
        Subject: CN=71BD4EB7D6F9B3CEB50AE681C05B2A16BBD7FE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:fa:5e:f7:73:ca:57:ef:ac:32:a7:13:7f:
                    cb:eb:ef:26:03:af:e5:ce:19:3d:d4:9f:b4:be:f2:
                    dd:7f:07:9f:ae:1f:da:39:9a:ed:77:ef:25:04:02:
                    4d:c8:03:f5:4b:3a:d6:65:df:b4:9f:c6:13:3b:66:
                    24:95:0d:52:d2:89:68:3a:18:64:8b:ea:33:b8:00:
                    06:39:09:99:0f:e5:17:f9:fe:53:d3:74:c6:ad:62:
                    01:fb:18:d1:e2:63:b2:f2:6e:18:dd:6f:57:29:98:
                    2d:9d:9c:3a:90:bb:a8:cd:70:fb:e4:ae:8d:93:f5:
                    72:bc:e3:58:87:1e:30:24:9b:8b:04:9c:16:52:78:
                    3c:da:8d:2a:d5:5a:3a:32:17:b1:92:4f:7d:fa:4a:
                    f7:58:63:28:49:5c:85:d1:ca:cb:a3:80:6b:4b:61:
                    58:65:17:33:77:42:2f:9c:6c:92:d0:67:fa:f1:07:
                    6a:0b:e2:c9:50:0f:c6:5c:fe:68:a6:d3:8f:ea:8b:
                    3b:51:e9:b8:43:0f:b9:44:72:76:39:52:34:11:e4:
                    de:a9:eb:20:32:b0:ea:88:75:69:cf:1a:ca:c4:3e:
                    c2:f8:46:09:03:31:b3:37:d7:5d:0f:01:b2:42:10:
                    6d:a7:f0:8a:00:05:2b:aa:d3:8e:a1:e5:97:08:e4:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:4E:B7:D6:F9:B3:CE:B5:0A:E6:81:C0:5B:2A:16:BB:D7:FE:25
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3435203d3e20323733303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         c5:be:65:37:3c:09:93:61:33:ac:3d:37:6e:a8:b0:2b:25:25:
         b9:7d:19:b5:7b:81:00:4c:ca:56:39:21:09:d2:2f:c9:4c:22:
         ac:f7:67:94:9c:e2:9b:2d:c8:b1:41:5e:62:a6:8e:93:c1:67:
         23:b1:e0:36:1e:bd:91:3b:04:da:62:95:ae:16:51:55:9f:7d:
         b8:fa:b9:44:52:65:79:7f:f7:5f:12:af:45:9c:5b:99:c9:76:
         5d:98:55:81:5d:5d:44:71:12:d4:c6:05:7c:35:79:f3:30:c4:
         57:c8:58:95:01:7b:ee:a8:e2:cc:e3:7b:33:01:7a:5c:47:4a:
         94:b4:8c:5a:de:a2:70:00:34:70:42:0f:14:ad:21:7d:28:ca:
         1e:75:d8:43:37:dd:7a:e1:c2:a7:36:fb:a0:a4:72:27:31:35:
         9a:4d:a8:d9:8e:7d:38:99:9d:2b:12:9d:48:f2:e3:e9:e3:f0:
         47:f4:ed:81:ba:7d:db:de:ab:43:7b:2c:62:21:34:03:ba:2c:
         52:3b:cf:9e:af:e5:74:e6:ee:2a:44:37:5a:7c:8c:56:c5:2c:
         35:a7:26:5f:36:d9:77:ec:27:d4:6e:e7:d9:fb:2f:ce:39:19:
         76:2e:a3:c0:04:b4:17:19:86:9e:fe:cc:42:17:86:42:c1:34:
         99:4a:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:43 2026 by rpki-client