Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa
File:                     323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa (raw, json)
Hash identifier:          ZJakaiKblJhDlNuzvE0HF7SR9FJy10YsA21Jsr++/ms=
Subject key identifier:   01:4A:1F:36:DD:7C:9F:0B:17:06:12:36:BB:05:CC:56:76:85:E6:71
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       27D837BCB0A966E90719A865DF4A2F46D088C419
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa
Signing time:             Tue 17 Mar 2026 13:34:16 +0000
ROA not before:           Tue 17 Mar 2026 13:29:16 +0000
ROA not after:            Tue 16 Mar 2027 13:34:16 +0000
asID:                     52404
IP address blocks:        2001:13c7:6013::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d8:37:bc:b0:a9:66:e9:07:19:a8:65:df:4a:2f:46:d0:88:c4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar 17 13:29:16 2026 GMT
            Not After : Mar 16 13:34:16 2027 GMT
        Subject: CN=014A1F36DD7C9F0B17061236BB05CC567685E671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:b9:76:a0:28:17:43:18:c9:19:80:ce:69:
                    be:a1:25:5f:d9:fd:b4:cf:8a:07:e7:35:ca:9e:76:
                    d4:19:cd:0a:d3:00:d3:5e:e6:af:b3:d8:24:9c:7a:
                    25:11:37:2b:88:04:5c:b4:0d:7a:38:83:a6:80:9a:
                    02:de:a1:24:92:0c:89:4f:a3:a0:6c:4c:c0:48:e2:
                    7b:58:0e:43:51:89:43:95:b2:85:cb:51:48:f3:1e:
                    78:02:51:ec:60:2e:26:40:aa:b0:55:db:a3:02:ba:
                    ad:5c:81:3f:96:fb:6b:98:49:a7:3a:bc:85:21:02:
                    ee:bd:a8:22:b4:08:27:61:d7:1d:17:b4:76:45:53:
                    7f:de:c4:64:77:23:c8:12:cb:dd:f5:61:ad:e8:ae:
                    54:15:42:de:77:56:79:1d:b7:cf:5d:d9:67:84:20:
                    58:de:3b:8a:01:37:24:56:55:f2:86:63:68:6a:33:
                    bc:7f:6e:d1:93:72:5f:81:ac:2b:22:f0:a8:37:ad:
                    c3:0f:c0:e8:b1:3a:c4:d7:67:69:5f:47:3f:c2:3f:
                    fe:ef:56:c0:6c:1c:22:1a:59:b0:99:72:b2:c0:4c:
                    77:05:f8:65:f9:79:ad:18:44:09:3c:03:9f:5d:c0:
                    79:47:f2:6e:79:cf:db:76:39:3a:14:3a:a3:87:6c:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4A:1F:36:DD:7C:9F:0B:17:06:12:36:BB:05:CC:56:76:85:E6:71
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6013::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:9a:a6:02:3c:e8:cb:25:4f:2f:0d:6b:5c:38:3d:47:4d:19:
         ed:88:13:e1:1e:8b:ac:16:c7:b1:33:a8:5f:cd:10:4e:74:6e:
         75:26:f1:58:39:41:7c:1d:1a:ef:38:0d:25:30:85:0d:d3:fb:
         70:da:22:9b:2f:45:94:97:e9:1e:e7:81:a0:e3:cb:9c:c8:6e:
         c8:c9:7a:da:8c:c1:b5:17:88:60:71:09:58:fd:6f:eb:1f:3a:
         1b:5a:84:cb:e0:ea:96:6c:4f:3c:60:ae:e5:24:19:3e:27:1b:
         f3:c4:d8:14:68:12:1e:33:ff:eb:82:3b:9f:4f:ae:59:5a:51:
         b8:cd:68:ad:eb:91:d8:2d:a9:3c:f5:37:e7:95:0d:ac:8e:12:
         f4:fa:6d:3f:2c:b3:87:65:bb:6f:62:f0:23:96:f1:d9:04:d0:
         4d:c0:be:64:12:e4:12:dc:3e:f3:1d:f3:40:0a:f9:3d:2b:ef:
         15:db:5c:d2:ad:83:fc:ee:65:df:36:ee:a8:ce:15:78:d1:64:
         76:c4:5e:7e:b3:c5:b7:1d:8c:58:e8:cb:7e:27:ef:f1:17:c7:
         5b:ca:94:53:fa:9f:a4:f5:44:7e:8b:26:ab:6f:e2:6a:a5:35:
         4d:36:84:4b:77:4b:e5:76:21:3b:8d:87:95:ae:a4:db:9a:ba:
         fb:80:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:57:27 2026 by rpki-client