Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          RWbQ9lCnz3v76bwYWvvJsQ/zI4Y/hlmLqRhQIJJUtYs=
Subject key identifier:   8E:8B:FB:D2:95:0B:F2:62:04:8C:68:03:AD:CE:84:30:CC:F0:CF:E3
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       67611BC4D0929545BFE706AAFDD74D4176235FB7
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa
Signing time:             Fri 03 Apr 2026 15:37:24 +0000
ROA not before:           Fri 03 Apr 2026 15:32:24 +0000
ROA not after:            Fri 02 Apr 2027 15:37:24 +0000
asID:                     3573
IP address blocks:        2801:1f0:406a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:61:1b:c4:d0:92:95:45:bf:e7:06:aa:fd:d7:4d:41:76:23:5f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Apr  3 15:32:24 2026 GMT
            Not After : Apr  2 15:37:24 2027 GMT
        Subject: CN=8E8BFBD2950BF262048C6803ADCE8430CCF0CFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:eb:29:92:8f:2d:be:8d:07:18:ff:4e:ef:
                    27:51:03:f9:15:b3:e8:79:ae:33:47:9d:9e:99:d9:
                    6b:c9:5f:51:54:3c:7b:c8:61:72:ba:8e:58:13:b4:
                    2e:51:df:69:6c:82:88:f8:0a:ce:91:c1:cc:cf:0a:
                    e7:95:ed:d8:03:a7:8e:4e:47:66:70:31:8f:7a:ce:
                    a3:d6:21:18:2b:d1:33:b8:f0:2c:09:33:12:89:eb:
                    cc:ee:60:03:ee:75:b5:31:fa:cd:0b:4d:4b:63:39:
                    b1:14:da:d5:e2:60:9d:e4:57:fd:08:8e:ef:02:f8:
                    15:00:1b:7b:0f:35:ef:f8:a2:64:7e:a1:f1:9c:88:
                    2d:d9:88:47:91:94:65:3a:51:de:7b:9c:17:b3:77:
                    ab:ff:97:5a:c2:3f:fc:fc:94:4d:c7:68:2c:43:7a:
                    cb:f8:06:f0:17:61:2f:70:56:25:40:86:40:9e:04:
                    ef:16:42:b9:be:d9:a4:f8:0c:8e:12:47:f8:60:3d:
                    3c:d7:ae:50:7e:45:93:d6:a5:a5:9c:e6:28:98:27:
                    c4:ee:6f:27:23:31:f9:b6:4e:f2:fa:17:1b:f0:63:
                    f8:04:57:3b:f8:60:60:d7:e4:60:96:e5:b0:d9:5b:
                    f0:0c:2c:e6:fa:fd:0e:3b:a8:51:82:35:f8:0d:4d:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8B:FB:D2:95:0B:F2:62:04:8C:68:03:AD:CE:84:30:CC:F0:CF:E3
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406a::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:28:82:60:c1:17:b9:fd:b5:5c:b3:56:5c:ae:81:21:3a:
         19:c9:43:27:35:11:8e:0f:02:b2:33:e2:ae:ef:37:24:fa:26:
         9f:30:26:bc:16:90:3e:43:6f:a5:45:07:e0:1f:22:a7:de:fa:
         8f:d0:ca:36:3a:f2:6a:3f:5f:56:f8:77:a8:a2:95:0b:a4:13:
         e2:9d:2b:4d:41:21:39:1d:ed:f8:b0:f1:e4:38:c0:18:66:db:
         69:9e:58:30:29:c4:ee:7e:f1:e2:ee:7e:cf:be:35:55:34:18:
         1a:71:6e:0c:b6:bd:57:f3:a4:8a:2c:46:85:f4:f7:69:ff:df:
         81:92:80:3e:ef:f2:63:a0:ca:ba:93:54:c0:62:2a:2c:cb:ce:
         db:80:18:d4:9e:ce:f4:ef:1e:6a:32:ab:7e:e1:06:d8:89:cb:
         ed:0b:09:8f:6b:e7:fa:6b:2f:86:36:b4:99:9c:ef:fc:e1:86:
         56:e5:9e:cf:6b:bd:4e:66:30:61:73:f3:d8:e2:60:c9:0e:64:
         05:71:c9:f8:44:aa:cb:cb:8e:18:20:7c:1b:fd:d6:d1:66:53:
         b3:68:f5:b6:57:cf:0a:dc:9c:6f:1d:68:2f:6a:f5:eb:77:51:
         05:b8:11:4b:0f:b0:19:b2:73:5b:bd:e8:df:86:19:86:39:de:
         c0:18:04:71
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUZ2EbxNCSlUW/5waq/ddNQXYjX7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MjQ2NzVFODg0MzdGQzI2NjhCRDY5RTI3Njc4RDVB
N0QwQ0IyQTAeFw0yNjA0MDMxNTMyMjRaFw0yNzA0MDIxNTM3MjRaMDMxMTAvBgNV
BAMTKDhFOEJGQkQyOTUwQkYyNjIwNDhDNjgwM0FEQ0U4NDMwQ0NGMENGRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8+spko8tvo0HGP9O7ydRA/kV
s+h5rjNHnZ6Z2WvJX1FUPHvIYXK6jlgTtC5R32lsgoj4Cs6RwczPCueV7dgDp45O
R2ZwMY96zqPWIRgr0TO48CwJMxKJ68zuYAPudbUx+s0LTUtjObEU2tXiYJ3kV/0I
ju8C+BUAG3sPNe/4omR+ofGciC3ZiEeRlGU6Ud57nBezd6v/l1rCP/z8lE3HaCxD
esv4BvAXYS9wViVAhkCeBO8WQrm+2aT4DI4SR/hgPTzXrlB+RZPWpaWc5iiYJ8Tu
bycjMfm2TvL6FxvwY/gEVzv4YGDX5GCW5bDZW/AMLOb6/Q47qFGCNfgNTYH5AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUjov70pUL8mIEjGgDrc6EMMzwz+MwHwYDVR0j
BBgwFoAUppJGdeiEN/wmaL1p4nZ41afQyyowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODk3MTQzMDY4NkYyRTNBQjdFMDVFODdCMkNCNEIxRjAy
NjJEMUIxRTFBOUY2Q0EzMjNBQTgxNTQ3RjUwRTBFLzAvQTY5MjQ2NzVFODg0MzdG
QzI2NjhCRDY5RTI3Njc4RDVBN0QwQ0IyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjkyNDY3NUU4ODQzN0ZDMjY2
OEJENjlFMjc2NzhENUE3RDBDQjJBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg5NzE0MzA2ODZGMkUzQUI3RTA1RTg3QjJDQjRCMUYwMjYyRDFCMUUx
QTlGNkNBMzIzQUE4MTU0N0Y1MEUwRS8wLzMyMzgzMDMxM2EzMTY2MzAzYTM0MzAz
NjYxM2EzYTJmMzQzNzJkMzQzNzIwM2QzZTIwMzMzNTM3MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEo
AQHwQGowDQYJKoZIhvcNAQELBQADggEBACyZKIJgwRe5/bVcs1ZcroEhOhnJQyc1
EY4PArIz4q7vNyT6Jp8wJrwWkD5Db6VFB+AfIqfe+o/QyjY68mo/X1b4d6iilQuk
E+KdK01BITkd7fiw8eQ4wBhm22meWDApxO5+8eLufs++NVU0GBpxbgy2vVfzpIos
RoX092n/34GSgD7v8mOgyrqTVMBiKizLztuAGNSezvTvHmoyq37hBtiJy+0LCY9r
5/prL4Y2tJmc7/zhhlblns9rvU5mMGFz89jiYMkOZAVxyfhEqsvLjhggfBv91tFm
U7No9bZXzwrcnG8daC9q9et3UQW4EUsPsBmyc1u96N+GGYY53sAYBHE=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:13:07 2026 by rpki-client