Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/323830363a3366303a313030303a3a2f34302d3438203d3e20323730313736.roa
File:                     323830363a3366303a313030303a3a2f34302d3438203d3e20323730313736.roa (raw, json)
Hash identifier:          HtzrWrPyi3m6lNq50ymXHYo2SGNSjE2p6WAFF70kZ7s=
Subject key identifier:   E9:22:7F:18:E4:68:3C:D7:5C:39:8F:42:BF:E6:81:78:2D:74:18:7D
Certificate issuer:       /CN=A25223310D8611349B6AC3BA702252E2D05BE514
Certificate serial:       52344213289597E100347C60D905795BE9996FA2
Authority key identifier: A2:52:23:31:0D:86:11:34:9B:6A:C3:BA:70:22:52:E2:D0:5B:E5:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A25223310D8611349B6AC3BA702252E2D05BE514.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/323830363a3366303a313030303a3a2f34302d3438203d3e20323730313736.roa
Signing time:             Thu 30 Apr 2026 16:25:00 +0000
ROA not before:           Thu 30 Apr 2026 16:20:00 +0000
ROA not after:            Thu 29 Apr 2027 16:25:00 +0000
asID:                     270176
IP address blocks:        2806:3f0:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/A25223310D8611349B6AC3BA702252E2D05BE514.crl
                          rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/A25223310D8611349B6AC3BA702252E2D05BE514.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A25223310D8611349B6AC3BA702252E2D05BE514.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:34:42:13:28:95:97:e1:00:34:7c:60:d9:05:79:5b:e9:99:6f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25223310D8611349B6AC3BA702252E2D05BE514
        Validity
            Not Before: Apr 30 16:20:00 2026 GMT
            Not After : Apr 29 16:25:00 2027 GMT
        Subject: CN=E9227F18E4683CD75C398F42BFE681782D74187D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:47:7f:ad:ca:fc:41:48:ee:04:62:9c:c9:
                    20:6b:bf:b5:58:a7:ac:4b:50:87:a1:60:30:6d:c2:
                    d8:27:cc:e4:c7:df:2d:8c:23:42:13:d7:ae:ab:ff:
                    34:eb:a8:69:2b:e1:90:7f:63:7a:a6:6e:cc:e6:5f:
                    76:23:30:49:10:a6:4a:e5:bc:f8:11:c1:be:70:78:
                    97:b2:49:04:67:f6:2d:c6:b9:99:07:a8:76:d8:0e:
                    be:ad:c5:b6:70:b4:ba:9c:4b:57:00:9a:58:b8:d6:
                    20:34:9d:7d:0f:e5:e3:dc:8d:9a:15:fd:a4:08:b6:
                    65:11:87:19:b1:36:1e:b5:a6:42:09:4f:2c:68:bc:
                    2b:4c:e7:99:73:eb:fa:57:bf:e6:c1:4b:55:23:68:
                    79:a3:36:ba:db:70:08:4b:46:9d:5f:78:9e:01:a1:
                    2f:d7:aa:a8:e8:70:44:54:39:16:e0:42:0f:2d:89:
                    79:26:03:a1:f5:61:19:78:f6:96:69:c9:7e:5a:f2:
                    a2:4d:df:cf:7d:de:81:94:8a:c1:6f:da:b5:f5:f5:
                    34:1b:72:40:c3:cc:e0:71:ff:1d:84:e0:03:f5:c2:
                    b9:1f:0c:87:a2:48:36:4a:4f:f6:f0:34:72:00:65:
                    fb:5d:85:c0:e0:98:7b:01:d0:5c:90:2b:95:97:6a:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:22:7F:18:E4:68:3C:D7:5C:39:8F:42:BF:E6:81:78:2D:74:18:7D
            X509v3 Authority Key Identifier:
                keyid:A2:52:23:31:0D:86:11:34:9B:6A:C3:BA:70:22:52:E2:D0:5B:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/A25223310D8611349B6AC3BA702252E2D05BE514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A25223310D8611349B6AC3BA702252E2D05BE514.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/323830363a3366303a313030303a3a2f34302d3438203d3e20323730313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:cb:1a:8a:aa:04:d6:be:32:3e:9f:80:38:d3:28:5e:32:8b:
         e8:5f:1d:47:80:17:c9:75:27:78:0e:62:58:b9:a8:09:ab:fa:
         5d:e7:a2:01:2f:68:a0:ee:00:c9:90:06:5a:c2:06:37:75:b0:
         e7:2c:14:de:4f:28:4b:95:76:0a:60:67:91:9e:2d:d6:18:c5:
         eb:61:d5:eb:1f:ed:8d:ec:24:77:2c:d7:69:de:59:c5:8a:26:
         55:f0:3b:f0:6d:56:b7:f3:05:56:31:ea:bc:d6:7e:3a:61:e4:
         e2:48:38:ac:32:8d:41:76:86:33:1c:66:75:c3:c9:86:78:3e:
         1c:e1:6a:06:59:5f:64:7c:a3:3e:fd:a9:70:30:e7:c6:1d:ef:
         65:1d:b0:27:2b:84:e9:8d:7b:f9:48:dc:e8:34:d9:8f:93:4b:
         7b:d6:b6:40:8e:a9:f1:7d:41:8d:b2:52:9c:49:ca:37:37:81:
         74:59:84:17:1a:e2:8e:08:e7:5f:58:37:58:e4:9e:1d:03:ca:
         33:73:79:44:55:39:83:35:8e:3a:d9:39:ea:8d:b9:c6:b9:cc:
         17:01:06:1b:6d:65:8f:c4:68:9d:31:fe:1b:56:53:c1:bc:56:
         1e:be:5d:cd:b0:c5:1a:aa:d6:1f:ac:5f:cf:06:4f:90:8d:b6:
         0d:9e:30:3c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUUjRCEyiVl+EANHxg2QV5W+mZb6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI1MjIzMzEwRDg2MTEzNDlCNkFDM0JBNzAyMjUyRTJE
MDVCRTUxNDAeFw0yNjA0MzAxNjIwMDBaFw0yNzA0MjkxNjI1MDBaMDMxMTAvBgNV
BAMTKEU5MjI3RjE4RTQ2ODNDRDc1QzM5OEY0MkJGRTY4MTc4MkQ3NDE4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QUd/rcr8QUjuBGKcySBrv7VY
p6xLUIehYDBtwtgnzOTH3y2MI0IT166r/zTrqGkr4ZB/Y3qmbszmX3YjMEkQpkrl
vPgRwb5weJeySQRn9i3GuZkHqHbYDr6txbZwtLqcS1cAmli41iA0nX0P5ePcjZoV
/aQItmURhxmxNh61pkIJTyxovCtM55lz6/pXv+bBS1UjaHmjNrrbcAhLRp1feJ4B
oS/XqqjocERUORbgQg8tiXkmA6H1YRl49pZpyX5a8qJN38993oGUisFv2rX19TQb
ckDDzOBx/x2E4AP1wrkfDIeiSDZKT/bwNHIAZftdhcDgmHsB0FyQK5WXahF1AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU6SJ/GORoPNdcOY9Cv+aBeC10GH0wHwYDVR0j
BBgwFoAUolIjMQ2GETSbasO6cCJS4tBb5RQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMzBFMjYyNzY1MTQzOTE1NDAzMkFGQUUxMDEyNjJFNjY1
MDAwQzBCOUI5Q0UzODUwRjQwQzc0M0ExQzkxMDc0LzAvQTI1MjIzMzEwRDg2MTEz
NDlCNkFDM0JBNzAyMjUyRTJEMDVCRTUxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjUyMjMzMTBEODYxMTM0OUI2
QUMzQkE3MDIyNTJFMkQwNUJFNTE0LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTMwRTI2Mjc2NTE0MzkxNTQwMzJBRkFFMTAxMjYyRTY2NTAwMEMwQjlC
OUNFMzg1MEY0MEM3NDNBMUM5MTA3NC8wLzMyMzgzMDM2M2EzMzY2MzAzYTMxMzAz
MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNzMwMzEzNzM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAYD8BAwDQYJKoZIhvcNAQELBQADggEBAJLLGoqqBNa+Mj6fgDjTKF4yi+hf
HUeAF8l1J3gOYli5qAmr+l3nogEvaKDuAMmQBlrCBjd1sOcsFN5PKEuVdgpgZ5Ge
LdYYxeth1esf7Y3sJHcs12neWcWKJlXwO/BtVrfzBVYx6rzWfjph5OJIOKwyjUF2
hjMcZnXDyYZ4PhzhagZZX2R8oz79qXAw58Yd72UdsCcrhOmNe/lI3Og02Y+TS3vW
tkCOqfF9QY2yUpxJyjc3gXRZhBca4o4I519YN1jknh0DyjNzeURVOYM1jjrZOeqN
uca5zBcBBhttZY/EaJ0x/htWU8G8Vh6+Xc2wxRqq1h+sX88GT5CNtg2eMDw=
-----END CERTIFICATE-----
Generated at Wed May 13 16:52:55 2026 by rpki-client