Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3435203d3e203139343239.roa
File:                     323830313a3136613a3a2f34342d3435203d3e203139343239.roa (raw, json)
Hash identifier:          zNa1KGfPEW6DQVKFHxCFNHblpCVIF70fwHYMh7UCzZw=
Subject key identifier:   EB:35:44:90:4C:43:59:50:6D:B9:4E:4E:2E:8C:1E:92:28:4B:B4:E1
Certificate issuer:       /CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
Certificate serial:       71E7B2838074574298188C8F3DD09532385AA5CF
Authority key identifier: 0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3435203d3e203139343239.roa
Signing time:             Thu 30 Apr 2026 16:50:00 +0000
ROA not before:           Thu 30 Apr 2026 16:45:00 +0000
ROA not after:            Thu 29 Apr 2027 16:50:00 +0000
asID:                     19429
IP address blocks:        2801:16a::/44 maxlen: 45
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 06:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e7:b2:83:80:74:57:42:98:18:8c:8f:3d:d0:95:32:38:5a:a5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
        Validity
            Not Before: Apr 30 16:45:00 2026 GMT
            Not After : Apr 29 16:50:00 2027 GMT
        Subject: CN=EB3544904C4359506DB94E4E2E8C1E92284BB4E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:5d:51:bd:c1:1d:3b:84:5b:26:7b:cd:c1:
                    50:7d:cb:5d:0b:75:1a:5f:d7:72:6e:cb:76:17:7a:
                    7c:da:cc:7e:00:1a:32:65:c7:90:9e:b9:6f:ac:6a:
                    84:d1:c4:47:a1:88:b7:32:74:6b:82:db:4c:53:da:
                    83:2f:ad:65:4a:40:41:62:b0:9c:62:93:d9:57:e7:
                    39:e8:19:a1:3a:19:f0:42:38:ad:c4:32:d6:ba:e4:
                    e1:18:d0:e2:7e:5b:09:1f:62:88:4d:1c:af:8f:c3:
                    01:b5:d8:80:86:fa:fc:05:60:7d:52:0c:56:70:d6:
                    35:84:4f:c3:8d:8a:a2:0a:c4:40:8a:95:bd:70:b1:
                    25:1f:99:3d:f3:ad:b5:92:e8:15:60:e7:86:8a:47:
                    0b:a8:2b:33:35:9f:12:78:27:ef:a6:56:af:c2:b0:
                    56:2d:ee:98:ec:40:6b:7e:d2:41:40:70:5d:7d:5c:
                    d8:c7:0d:78:3c:8e:19:4b:ff:5c:d4:ae:fc:40:ce:
                    ec:31:49:3b:cc:c1:88:5a:f6:15:49:48:99:c6:71:
                    b5:ee:37:1b:03:ba:d6:c5:56:16:b5:50:95:f5:f2:
                    e2:02:aa:66:c6:44:ad:54:93:80:2b:ff:4a:94:f6:
                    8c:83:4d:59:39:88:db:e9:1f:0b:43:0b:53:7f:e6:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:35:44:90:4C:43:59:50:6D:B9:4E:4E:2E:8C:1E:92:28:4B:B4:E1
            X509v3 Authority Key Identifier:
                keyid:0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3435203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16a::/44

    Signature Algorithm: sha256WithRSAEncryption
         ef:b8:bd:2c:0a:84:98:4f:c8:37:ac:4e:a6:00:fa:07:7c:80:
         c4:b6:5c:bf:2d:b3:99:2d:e3:e3:d4:90:3d:c4:e2:09:65:94:
         5d:90:6d:b7:ff:fc:c3:16:10:6e:db:12:dc:1e:e6:58:37:eb:
         16:b4:18:b7:77:73:c0:18:52:b4:6d:ef:ee:c7:94:6e:51:d9:
         da:24:8c:26:ca:b7:d6:55:48:b6:0f:d5:a7:cb:d0:eb:09:63:
         4c:e4:60:06:d1:6f:26:63:db:87:8e:75:9a:92:6b:ba:cf:13:
         86:a8:a4:15:05:3a:a1:60:62:b6:2b:c2:b0:30:b5:e1:5f:34:
         88:a5:3e:b5:d9:05:dd:0c:10:5b:4e:16:85:b9:3c:af:95:fe:
         de:95:23:f6:5e:0f:f9:d4:9d:48:cb:32:1f:30:64:71:3f:b0:
         50:20:c9:00:66:ea:ad:97:fc:3f:31:cd:84:3a:08:60:aa:55:
         e2:c6:59:a2:8e:70:c7:2d:37:ad:34:3b:cc:fa:1e:bf:cd:9d:
         dc:61:0a:86:f8:ac:6f:bc:d5:c3:47:96:6c:1d:6c:69:f2:30:
         2b:fa:e7:57:a0:bb:bc:04:df:ac:12:da:4f:ce:5e:38:03:03:
         d8:2f:b6:20:a7:45:68:a1:ba:30:79:81:c7:d9:3f:b6:32:77:
         4c:03:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:39:47 2026 by rpki-client