Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/323830363a3431363a3a2f33322d3438203d3e20323732333638.roa
File:                     323830363a3431363a3a2f33322d3438203d3e20323732333638.roa (raw, json)
Hash identifier:          ZXPWgYJOsVN9/WtPbqUAv5qBXlc64d2vz+r/MbUEkqs=
Subject key identifier:   B0:39:09:6E:73:EC:D6:2E:4E:58:4C:98:DF:FB:A5:77:3F:5B:3C:20
Certificate issuer:       /CN=D47E678D8A41F4FB7348F091558FB10E0E209FB9
Certificate serial:       19F33EC36309E33B7F52C5CDFECD8AC4F73FA38A
Authority key identifier: D4:7E:67:8D:8A:41:F4:FB:73:48:F0:91:55:8F:B1:0E:0E:20:9F:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/323830363a3431363a3a2f33322d3438203d3e20323732333638.roa
Signing time:             Thu 09 Apr 2026 03:38:09 +0000
ROA not before:           Thu 09 Apr 2026 03:33:09 +0000
ROA not after:            Thu 08 Apr 2027 03:38:09 +0000
asID:                     272368
IP address blocks:        2806:416::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 19:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f3:3e:c3:63:09:e3:3b:7f:52:c5:cd:fe:cd:8a:c4:f7:3f:a3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D47E678D8A41F4FB7348F091558FB10E0E209FB9
        Validity
            Not Before: Apr  9 03:33:09 2026 GMT
            Not After : Apr  8 03:38:09 2027 GMT
        Subject: CN=B039096E73ECD62E4E584C98DFFBA5773F5B3C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:7d:b9:2d:0a:db:77:fa:d7:a8:c9:18:b1:
                    86:9f:fb:9d:af:2a:33:fd:94:7e:c5:4d:12:ba:d6:
                    39:88:b9:98:43:7f:65:6e:04:e3:b8:97:ae:f7:8c:
                    67:a7:75:05:d7:12:ac:ab:a9:4a:9c:7c:17:ce:62:
                    ce:79:0f:8c:0c:42:26:0a:38:a7:67:4e:66:7c:93:
                    f8:ed:e0:e2:f6:2d:57:f6:03:3f:ff:da:0f:55:83:
                    b0:28:20:5e:df:03:c3:4c:42:de:f2:7a:06:80:72:
                    8f:e7:44:0e:73:2c:db:b8:0f:e8:af:45:8b:05:34:
                    76:58:67:a8:72:2f:e9:11:5c:ca:3a:f6:94:d0:03:
                    87:df:1d:fe:d7:4b:95:e1:ee:ba:d8:f1:af:3a:66:
                    25:5e:a9:b9:9d:4b:80:ae:7d:1f:48:5f:c8:4a:8f:
                    f4:2c:23:a6:c8:96:20:31:7b:36:54:ec:cd:dc:20:
                    86:fb:bc:a6:c2:2d:96:b8:8d:09:f7:74:4d:be:a4:
                    fc:d5:7f:4e:99:ae:db:80:c0:8e:91:7c:7a:19:f0:
                    43:00:03:cf:05:45:56:4d:df:81:51:de:b1:19:7f:
                    c9:92:59:d3:86:67:d2:a8:21:f2:59:4c:dc:6a:14:
                    bf:a8:5f:f1:1b:93:b1:cd:f7:b8:d7:9f:fc:9d:a1:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:09:6E:73:EC:D6:2E:4E:58:4C:98:DF:FB:A5:77:3F:5B:3C:20
            X509v3 Authority Key Identifier:
                keyid:D4:7E:67:8D:8A:41:F4:FB:73:48:F0:91:55:8F:B1:0E:0E:20:9F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D47E678D8A41F4FB7348F091558FB10E0E209FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1EBF55A55F21623AD8016151A67466F07AD98A1352D8BF61EAAFD7763BFB544/0/323830363a3431363a3a2f33322d3438203d3e20323732333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:416::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:a7:46:b8:14:5e:2a:ca:92:4d:dd:46:72:15:74:41:14:
         7c:d2:67:2e:6c:2d:7f:68:de:a8:60:f0:62:ca:00:1a:1d:d4:
         4c:8f:7b:a7:d7:bd:b6:dd:a4:b2:15:31:cd:ee:e5:0a:1c:cc:
         9a:e7:08:2a:74:e5:0d:d4:5a:ba:99:9b:6a:f2:0e:ad:08:52:
         fc:a2:a3:4b:49:57:a0:59:7e:a1:d2:82:48:19:c5:86:51:05:
         ed:6d:08:bb:d0:9d:3a:56:6a:14:1e:b8:23:c0:96:3a:1a:fd:
         ca:9e:18:e6:8f:ae:77:36:db:f2:a1:01:50:42:1e:8f:25:18:
         e3:39:06:c6:85:02:55:a8:9b:90:56:15:0a:c1:12:ce:b6:62:
         66:fc:68:b0:b2:e7:fc:c7:c9:dc:65:1d:b9:48:06:59:c6:3c:
         f5:90:00:ee:87:65:3a:38:a6:d0:64:e5:6d:73:39:0e:c8:3d:
         6f:35:86:b4:13:eb:0c:84:46:c0:f4:da:e0:99:dc:71:f6:ad:
         98:d9:1c:86:d9:d4:fe:e2:ce:7d:c9:9f:f6:fc:a3:1a:29:08:
         ad:93:90:5a:b7:27:b5:55:3e:bf:3a:d6:5e:a4:10:d5:f8:f3:
         92:27:b4:e4:cb:d0:02:52:be:39:1e:c0:1a:6e:67:a1:5d:a3:
         55:32:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:21:50 2026 by rpki-client