Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
File:                     323830313a3139353a3a2f34342d3434203d3e20323733313437.roa (raw, json)
Hash identifier:          UZwg1SWmwvnxwvHzFaCJlY2I/yr9ezO60BZFtan7cnQ=
Subject key identifier:   98:09:A9:69:9F:DE:DA:89:1C:38:D6:B3:3A:A0:6E:98:40:B3:10:44
Certificate issuer:       /CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
Certificate serial:       3C3CB6A1BF7C0C24FAFFD59345C80372EC2A64BF
Authority key identifier: 8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
Signing time:             Wed 08 Apr 2026 01:37:58 +0000
ROA not before:           Wed 08 Apr 2026 01:32:58 +0000
ROA not after:            Wed 07 Apr 2027 01:37:58 +0000
asID:                     273147
IP address blocks:        2801:195::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 19:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3c:b6:a1:bf:7c:0c:24:fa:ff:d5:93:45:c8:03:72:ec:2a:64:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
        Validity
            Not Before: Apr  8 01:32:58 2026 GMT
            Not After : Apr  7 01:37:58 2027 GMT
        Subject: CN=9809A9699FDEDA891C38D6B33AA06E9840B31044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:a5:06:cd:32:c7:89:18:69:68:cc:55:e0:
                    cc:94:84:6c:68:cd:7d:37:0f:c9:b2:76:3d:b7:35:
                    51:76:e2:a2:39:89:2d:81:0a:af:b9:92:81:c2:24:
                    b6:16:26:d7:42:56:5a:ba:14:a4:c8:86:04:66:59:
                    ec:8c:2e:c5:92:d8:83:70:50:fa:57:1d:9f:8a:e9:
                    d7:ef:ca:08:a7:91:58:95:b4:7c:0b:05:cd:93:ce:
                    57:25:26:71:4a:cf:84:97:64:0e:ba:ca:56:bf:18:
                    38:51:88:f5:b2:8d:b8:3c:94:8b:a1:b6:3e:50:90:
                    52:0c:60:02:77:c3:b5:d5:c1:a6:a0:cb:8e:2c:1e:
                    18:46:0f:9b:cd:8d:b3:50:b9:d9:3f:64:95:cd:3f:
                    75:d0:7b:dd:02:c1:34:43:3e:9a:99:f8:0c:9e:26:
                    64:f0:92:6d:a6:e9:6d:d2:d5:e9:ef:14:e2:53:46:
                    76:11:ff:cc:8d:1a:08:3e:38:72:b1:aa:df:14:a9:
                    cd:11:43:59:c5:99:fe:21:62:65:9c:5e:5b:f5:3c:
                    2d:9a:00:fe:20:1f:22:51:29:6b:7c:30:f7:1e:0a:
                    26:ab:d0:51:7d:ec:30:5c:c1:44:56:be:30:b5:88:
                    c6:e5:62:14:92:fe:08:7e:98:ce:47:89:d8:f4:90:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:A9:69:9F:DE:DA:89:1C:38:D6:B3:3A:A0:6E:98:40:B3:10:44
            X509v3 Authority Key Identifier:
                keyid:8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:195::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:28:0d:ef:10:b7:23:6c:ed:f8:f9:69:98:b9:e1:86:e7:
         7d:2b:bb:f2:2b:d3:56:ae:83:a2:db:ff:40:2d:27:db:d6:8a:
         a7:14:0c:53:8e:e7:35:2b:c0:18:37:4f:69:a9:23:86:a6:73:
         74:1a:1b:93:4b:dc:22:33:ed:8d:bf:c3:be:10:47:d1:53:44:
         73:24:09:0d:ec:32:55:a4:73:3a:69:44:a8:81:f1:99:e8:04:
         1a:35:d0:72:47:af:e4:40:5e:60:9c:e4:09:53:a8:53:0f:fd:
         ae:0c:2f:88:30:2c:42:35:f7:4d:55:f2:31:3b:b7:87:1c:04:
         4e:b9:55:8d:1e:de:e7:c2:ef:d4:97:33:87:f6:b7:2b:af:c7:
         98:17:08:ba:05:6c:05:50:b0:b3:99:a6:a0:1e:a9:8b:c5:c8:
         b7:9e:7c:e0:90:b8:15:27:18:b5:b5:ce:dd:8b:aa:e0:62:03:
         40:74:7d:eb:0e:25:dd:e4:26:78:33:5d:d9:3e:69:e3:bd:99:
         82:d5:9b:b4:d9:fd:43:67:73:e1:42:85:2f:64:1a:a0:6e:1a:
         c6:95:68:e6:ac:de:32:ce:43:9f:88:8f:8a:f8:cb:49:6b:87:
         7f:c2:f4:c0:01:e3:92:2b:28:6d:3c:fb:1d:f7:a3:a4:e9:47:
         0d:2b:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:56:39 2026 by rpki-client