Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa
File:                     323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa (raw, json)
Hash identifier:          Jiq6x0RIII3J65RkL+3C3SEDiJkLZOcyqTva71eVk3M=
Subject key identifier:   CB:31:0D:89:8E:A3:32:05:20:94:B5:D6:55:72:75:19:D7:25:E9:FF
Certificate issuer:       /CN=DD284B15EC8E065D133B2F9315470527232784D4
Certificate serial:       2937EF6403EAD75A0C59EEFC60D02AE16FEABA6F
Authority key identifier: DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa
Signing time:             Tue 19 May 2026 23:43:17 +0000
ROA not before:           Tue 19 May 2026 23:38:17 +0000
ROA not after:            Tue 18 May 2027 23:43:17 +0000
asID:                     399970
IP address blocks:        2801:17:7800::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 14:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:37:ef:64:03:ea:d7:5a:0c:59:ee:fc:60:d0:2a:e1:6f:ea:ba:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD284B15EC8E065D133B2F9315470527232784D4
        Validity
            Not Before: May 19 23:38:17 2026 GMT
            Not After : May 18 23:43:17 2027 GMT
        Subject: CN=CB310D898EA332052094B5D655727519D725E9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:d1:da:43:27:d0:c3:4a:1c:32:f3:e4:03:
                    54:0c:97:65:5f:31:22:ed:44:01:2f:98:51:6c:c4:
                    92:7f:79:d5:3c:7b:64:de:32:3a:82:d7:22:00:4c:
                    40:ce:73:f9:cc:9a:b3:f0:66:7f:27:3a:06:8c:ab:
                    39:08:5f:f3:3b:a3:d1:0f:43:c8:5c:8a:b8:ff:df:
                    aa:04:e8:3f:40:d6:d4:ed:2a:d2:73:54:bc:35:90:
                    25:1f:f3:a2:67:1d:63:64:20:16:84:8c:29:cc:06:
                    2d:82:b4:8d:c0:a9:d7:86:12:91:f9:36:92:b4:17:
                    1e:9c:22:75:a8:b1:31:6b:7a:db:97:b2:3b:e8:bb:
                    51:19:dc:fd:bc:27:6f:e8:9c:93:5b:05:f4:53:62:
                    19:70:20:7b:b5:6b:fd:ed:dc:8f:78:02:2c:9b:b1:
                    73:32:5b:68:67:19:38:23:d2:5f:94:e7:4c:73:24:
                    cc:ca:bd:c6:4a:69:6d:85:6d:77:0a:5b:5c:25:3d:
                    46:70:8e:7a:c9:78:f3:b0:bf:6f:e9:43:43:9c:8c:
                    b8:1a:73:34:bf:01:87:30:aa:d2:38:c2:eb:dd:29:
                    fa:c2:8d:b6:ee:42:f6:39:f1:74:ba:bd:bc:01:d5:
                    5e:08:fd:99:dd:0d:47:17:25:1e:de:db:bd:ac:47:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:31:0D:89:8E:A3:32:05:20:94:B5:D6:55:72:75:19:D7:25:E9:FF
            X509v3 Authority Key Identifier:
                keyid:DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f35362d3536203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:7800::/56

    Signature Algorithm: sha256WithRSAEncryption
         45:35:df:e1:c4:5c:ef:ea:4e:1c:ca:6c:93:a3:02:4a:a7:2d:
         ed:2a:5c:72:cc:ae:5d:bd:0e:74:a2:27:de:27:d8:5b:9b:82:
         48:26:db:b4:fa:ea:51:bf:0c:e5:b7:05:b2:d9:7e:7a:ae:f7:
         ef:7f:c2:2d:b1:ac:3d:5c:31:cc:6f:44:5f:84:38:34:a0:6b:
         d2:ae:51:c7:17:c1:33:2d:34:45:df:3f:cb:51:3b:67:e8:bb:
         b6:eb:0b:79:05:0c:06:cc:c4:1b:bc:a6:d2:cb:62:63:47:7d:
         84:52:a0:63:29:2c:50:50:b3:06:5c:e8:8b:2c:ec:45:30:cd:
         42:4d:6f:08:f5:97:13:fb:bd:ae:ec:80:0d:7c:18:2d:38:8f:
         fe:a0:c0:8b:db:ec:77:80:02:d9:78:cc:a0:b5:71:c8:ff:32:
         aa:64:44:56:8e:c1:f6:5c:08:9f:0f:f8:7e:de:bf:d3:1b:5a:
         57:37:ba:4c:01:c5:ed:e6:29:eb:1e:6d:bf:a2:fd:e1:9c:2d:
         7c:cd:39:9f:cf:58:86:ee:19:16:33:62:70:c1:66:f8:5a:e8:
         54:98:cd:96:61:10:9f:4e:59:d9:cc:ea:e3:b6:a5:5a:0a:4d:
         61:78:03:a8:fb:7c:16:cc:85:ea:45:2e:1e:a6:85:04:38:54:
         e2:c1:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:55:17 2026 by rpki-client