Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64633a3a2f34372d3437203d3e20323734303236.roa
File:                     323830313a3130343a64633a3a2f34372d3437203d3e20323734303236.roa (raw, json)
Hash identifier:          4kORU2hmqXqPVr9bXNgi9XcyhJUFYTg58riG67T1ts4=
Subject key identifier:   A3:9A:C6:1B:31:AF:86:75:54:9E:B4:AD:DA:4F:55:50:7F:F6:64:0A
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       569C6D4D064237B3E4F69CC2E3D3831C2D5B2E26
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64633a3a2f34372d3437203d3e20323734303236.roa
Signing time:             Tue 31 Mar 2026 05:00:01 +0000
ROA not before:           Tue 31 Mar 2026 04:55:01 +0000
ROA not after:            Tue 30 Mar 2027 05:00:01 +0000
asID:                     274026
IP address blocks:        2801:104:dc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9c:6d:4d:06:42:37:b3:e4:f6:9c:c2:e3:d3:83:1c:2d:5b:2e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 31 04:55:01 2026 GMT
            Not After : Mar 30 05:00:01 2027 GMT
        Subject: CN=A39AC61B31AF8675549EB4ADDA4F55507FF6640A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:7d:86:72:0e:48:35:55:8d:36:74:a4:6a:
                    26:90:d0:59:2c:d2:8d:d5:7a:72:bd:a9:04:dc:88:
                    e9:3d:35:e4:db:ca:64:71:43:46:78:f3:9a:e9:d5:
                    36:1b:de:e5:66:78:c0:94:65:03:70:ad:cf:6f:5a:
                    08:48:0a:9f:47:98:60:c6:af:e2:af:6f:4c:61:ac:
                    87:03:a2:fa:8c:e5:10:54:40:b2:c6:14:68:d6:28:
                    03:1b:ec:d0:89:9a:6d:61:3f:5c:40:16:09:f6:d6:
                    b7:d0:cd:1d:c9:9a:77:14:c3:7d:26:30:d8:2f:65:
                    ff:2c:d5:88:aa:a9:d6:9e:39:6c:7f:df:e0:26:c0:
                    63:35:16:65:0e:d5:f0:d7:51:5b:61:71:4a:58:12:
                    77:86:f2:5a:49:55:bb:ab:4d:14:97:0b:94:f3:5e:
                    81:4e:82:f9:83:15:7e:ba:8a:e1:61:1c:9c:bb:0d:
                    7a:75:7f:37:2e:e8:6e:38:48:c2:48:0b:f9:7e:b7:
                    2a:26:d7:a0:82:d4:a4:7f:bd:44:f9:1a:4d:d2:06:
                    32:09:e2:d4:c4:6f:c1:1c:32:cc:39:48:3d:26:1d:
                    8d:17:c1:98:73:dc:06:a1:39:76:b0:73:a3:9f:06:
                    5d:9f:3d:53:58:1f:98:fa:6e:f7:47:92:91:83:11:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9A:C6:1B:31:AF:86:75:54:9E:B4:AD:DA:4F:55:50:7F:F6:64:0A
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64633a3a2f34372d3437203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:dc::/47

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:48:a9:70:37:6a:7d:35:99:1c:fa:b3:fe:4a:85:8c:74:
         b6:e5:7d:31:ff:cd:3e:86:df:73:3c:f7:ea:62:5a:88:38:36:
         d6:20:11:0e:3d:e6:13:f4:e3:a5:e2:c9:63:25:b2:31:bf:fc:
         93:36:13:bd:ff:30:64:f3:18:7f:41:e2:62:d2:62:10:0f:7b:
         22:90:13:c1:59:fe:af:aa:4f:7a:77:dd:55:a3:15:b2:97:94:
         e2:5b:a5:02:f5:ab:a3:8b:53:97:f0:74:17:cb:6f:3e:84:f1:
         5e:b2:12:82:ad:1b:94:bc:eb:b6:2d:f7:b6:f9:60:0d:96:85:
         2d:f5:22:55:0d:0e:d2:b1:1d:3a:ea:7a:99:88:10:98:61:16:
         fc:93:e3:d4:5a:f7:4a:75:b4:60:d8:e9:c5:d9:41:52:14:21:
         45:ef:a3:6b:52:40:81:dd:3a:8d:09:77:07:21:74:28:93:ea:
         70:d6:7d:ea:07:1d:a2:9c:c6:ee:b0:6b:63:f5:47:72:9e:14:
         db:b8:b8:4b:48:86:1f:f1:c6:71:c4:c5:0b:f2:09:f3:b5:ca:
         d8:d3:57:fa:cb:1f:d0:b3:7e:ca:c3:23:81:6f:6d:54:4f:b9:
         2e:7f:e0:63:6d:75:10:98:01:53:d0:e0:3b:3a:60:cc:13:04:
         dd:1b:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:22 2026 by rpki-client