Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/323830313a31363a633830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31363a633830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          Kcv6xl2YiNtV8S9xERCV7aPh7pOiJMAlGOKgd71pHuw=
Subject key identifier:   B5:6F:2A:67:D1:30:C1:44:E3:F9:3E:88:44:28:D6:F0:68:0C:69:A9
Certificate issuer:       /CN=4A71F051F94009816889CBD49D890004C1D85E37
Certificate serial:       4B8161B1C3ED7EE95E6E88714E5A8ABB3294490B
Authority key identifier: 4A:71:F0:51:F9:40:09:81:68:89:CB:D4:9D:89:00:04:C1:D8:5E:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A71F051F94009816889CBD49D890004C1D85E37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/323830313a31363a633830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 30 Jun 2026 15:50:21 +0000
ROA not before:           Tue 30 Jun 2026 15:45:21 +0000
ROA not after:            Tue 29 Jun 2027 15:50:21 +0000
asID:                     27951
IP address blocks:        2801:16:c800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/4A71F051F94009816889CBD49D890004C1D85E37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/4A71F051F94009816889CBD49D890004C1D85E37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A71F051F94009816889CBD49D890004C1D85E37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:81:61:b1:c3:ed:7e:e9:5e:6e:88:71:4e:5a:8a:bb:32:94:49:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A71F051F94009816889CBD49D890004C1D85E37
        Validity
            Not Before: Jun 30 15:45:21 2026 GMT
            Not After : Jun 29 15:50:21 2027 GMT
        Subject: CN=B56F2A67D130C144E3F93E884428D6F0680C69A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:be:ce:94:59:82:a6:5d:e4:75:db:17:de:
                    d7:0b:dc:4d:6b:ca:9e:7d:74:c5:72:64:3b:0c:50:
                    eb:ab:c4:6c:d6:0f:1a:df:0c:b4:f4:e8:0d:07:12:
                    a1:a0:b2:a9:9a:09:dd:de:c9:3a:4b:c5:a3:72:95:
                    3a:96:ac:da:86:38:4b:16:0c:d6:12:d1:3f:4b:cb:
                    68:8e:8c:59:8e:5f:4c:f0:19:a6:81:d1:8c:fb:32:
                    f4:05:59:68:18:21:7b:5e:4f:65:1c:8b:01:a9:b4:
                    ad:56:e2:6c:07:e2:6f:04:a2:db:f3:c1:52:b2:b3:
                    b4:72:ad:09:d7:64:8d:16:3f:57:32:f0:06:d3:7e:
                    cd:dc:30:ca:10:27:56:0c:9f:88:ed:39:6c:13:b8:
                    0d:fb:a1:19:4b:bd:d8:69:cc:fe:23:32:58:d8:f5:
                    f8:df:ef:1f:c9:0a:86:87:df:04:80:0c:7e:de:da:
                    91:78:ca:7c:4c:77:a8:d3:b6:6a:90:ae:12:3b:81:
                    27:b8:9f:71:b4:e1:53:e2:51:3d:48:3f:c0:70:e2:
                    7d:ff:bf:ef:55:53:82:2a:b9:b2:e8:58:dd:a4:b8:
                    9c:93:09:e1:2c:97:14:8a:9b:f2:9f:86:94:e8:6f:
                    e1:d3:f3:f8:19:00:a1:6b:72:31:eb:ee:dd:e1:60:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6F:2A:67:D1:30:C1:44:E3:F9:3E:88:44:28:D6:F0:68:0C:69:A9
            X509v3 Authority Key Identifier:
                keyid:4A:71:F0:51:F9:40:09:81:68:89:CB:D4:9D:89:00:04:C1:D8:5E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/4A71F051F94009816889CBD49D890004C1D85E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A71F051F94009816889CBD49D890004C1D85E37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/323830313a31363a633830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:26:1c:22:02:84:21:26:49:79:2f:d8:36:d0:83:76:9e:b7:
         bf:67:1a:05:ce:04:21:30:d0:3f:76:e6:c8:8c:ca:54:02:f0:
         88:3a:bd:21:4f:3e:cc:90:6c:54:2f:66:01:e7:a4:00:74:55:
         35:f2:30:14:c8:15:70:fa:56:c6:92:d9:cd:93:e4:66:c4:79:
         a1:8a:eb:e7:17:4d:d7:ab:1d:51:9a:f9:b9:6c:21:78:a1:09:
         70:a7:6b:4a:74:c1:7a:9f:60:9b:5f:e7:9d:dc:82:0f:5c:69:
         80:f2:94:0a:86:91:a8:94:01:4d:61:36:51:f3:c2:f8:a1:c0:
         4a:86:20:5f:ed:63:32:cf:4e:7b:94:73:4f:fe:c8:db:a1:57:
         af:af:5e:9d:e5:23:9e:13:4e:87:15:d1:4f:9b:b6:80:dc:cc:
         47:29:15:86:f1:d2:cf:8d:46:7c:54:78:b3:28:cf:0a:0f:20:
         55:5f:6b:89:09:9a:7a:c3:65:16:b8:b2:f1:35:42:4a:42:f2:
         d8:99:23:81:ed:74:e9:fa:d1:c0:53:9b:86:06:e5:65:1e:8d:
         5d:11:55:fd:1f:1e:2c:ce:3e:19:cd:fe:4f:78:97:ec:f4:82:
         c2:62:b1:e4:cf:f3:40:12:da:c2:50:c5:88:ce:0e:b5:fe:81:
         df:fb:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:43:52 2026 by rpki-client