Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          sHg2pNrZdDyZClXBUTs8lnturL9tpyh8nQPugN+/tRs=
Subject key identifier:   52:FD:98:77:98:15:31:61:4A:FC:2B:1F:15:19:53:07:A2:0A:36:5A
Certificate issuer:       /CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Certificate serial:       2A1DC23C93752BE5189AF1F9A50FD9689941200D
Authority key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Fri 06 Feb 2026 21:29:28 +0000
ROA not before:           Fri 06 Feb 2026 21:24:28 +0000
ROA not after:            Fri 05 Feb 2027 21:29:28 +0000
asID:                     61468
IP address blocks:        2801:1b:2800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1d:c2:3c:93:75:2b:e5:18:9a:f1:f9:a5:0f:d9:68:99:41:20:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
        Validity
            Not Before: Feb  6 21:24:28 2026 GMT
            Not After : Feb  5 21:29:28 2027 GMT
        Subject: CN=52FD9877981531614AFC2B1F15195307A20A365A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:db:cf:49:f0:85:5d:1e:af:e0:92:21:ef:
                    78:51:14:a2:9a:68:ac:29:aa:e1:ec:9c:93:c3:1a:
                    a9:eb:16:e7:5e:6c:a1:6c:66:37:ee:46:3e:2d:76:
                    2e:e9:24:79:22:b2:77:a0:f7:42:38:72:16:f4:5e:
                    2a:44:16:03:f5:3e:c1:52:af:06:47:13:4c:4c:28:
                    a3:9d:e6:94:5e:28:c8:41:e6:21:f2:38:b5:53:cc:
                    6c:1f:94:3e:44:51:54:11:d0:0a:c6:69:00:f7:28:
                    25:f8:5b:ca:39:fa:39:93:e7:c3:98:05:f5:a7:aa:
                    f7:af:32:f1:32:bc:65:6b:8b:6e:e6:5b:52:41:7c:
                    e0:84:c7:b3:3f:2f:88:3c:a7:19:e7:8f:79:7f:bb:
                    4d:84:95:95:06:ec:9e:b7:bd:3a:c0:eb:b7:95:9f:
                    ae:07:39:22:ac:0c:3a:4b:f4:bf:d7:1b:73:3f:62:
                    0a:d0:5e:1e:89:58:fe:1c:57:5a:62:07:c8:0c:fc:
                    28:a3:2a:b3:4a:88:b6:80:de:83:7c:bc:26:52:5a:
                    ae:d9:2f:df:55:a9:52:8f:6f:72:cf:b5:a7:ba:9e:
                    38:ce:b0:7d:1d:df:2c:bb:87:77:64:5b:07:1d:27:
                    b0:87:82:75:cc:07:d8:4d:c6:c8:93:e6:45:b0:6f:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:98:77:98:15:31:61:4A:FC:2B:1F:15:19:53:07:A2:0A:36:5A
            X509v3 Authority Key Identifier:
                keyid:FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:83:8c:02:b0:c2:81:c1:e7:f2:1f:07:c5:ff:33:ff:fe:
         26:33:35:eb:5b:12:96:34:00:ab:69:2f:93:0c:93:09:02:e2:
         b9:0d:85:c3:40:6e:1f:9c:c6:c4:d3:e0:25:82:fe:11:be:dd:
         ff:78:0a:5d:67:c1:87:7c:d8:35:b4:36:bb:f8:e0:42:3d:3e:
         62:8a:23:d4:2d:cc:92:15:a3:82:31:50:e1:52:7d:5f:21:cb:
         6d:e3:c4:1b:74:20:35:e8:de:d1:49:1d:50:ab:41:1d:e4:9f:
         43:3f:d3:19:ea:73:75:67:8b:cf:6c:05:59:d4:53:cf:ba:40:
         c3:5d:ba:65:de:ca:78:b3:14:4a:4f:db:4e:f3:4d:c6:f6:d8:
         12:4d:0f:f1:b6:77:93:a7:e9:dc:03:2e:90:3b:af:92:c6:cd:
         6d:9b:0a:bc:c4:ec:6a:18:7e:f9:2c:fa:9a:06:c2:5c:4c:27:
         dd:db:95:4a:3d:3b:9c:99:8b:8e:f9:07:96:2b:1f:82:69:41:
         a4:d2:77:9e:58:bd:87:83:90:54:87:08:df:d5:00:94:72:76:
         96:c9:27:39:01:42:62:ce:c6:42:27:44:b3:68:93:af:71:71:
         ba:79:25:44:55:21:0e:2b:47:f4:15:3c:59:19:8b:c8:f7:16:
         fc:70:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:21:36 2026 by rpki-client