Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3435203d3e203237393531.roa
File:                     323830313a3136613a3a2f34342d3435203d3e203237393531.roa (raw, json)
Hash identifier:          Vw4A5UXawOkya7NUWeQ49W4HHFf9LnwmAPXdpAasTlY=
Subject key identifier:   F7:31:ED:F7:42:4E:08:E8:66:DA:5B:7C:79:13:8F:99:99:90:B8:18
Certificate issuer:       /CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
Certificate serial:       4E3D802613C2D47B379061AF6D24ECED6B5DE7D7
Authority key identifier: 0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3435203d3e203237393531.roa
Signing time:             Thu 30 Apr 2026 22:00:00 +0000
ROA not before:           Thu 30 Apr 2026 21:55:00 +0000
ROA not after:            Thu 29 Apr 2027 22:00:00 +0000
asID:                     27951
IP address blocks:        2801:16a::/44 maxlen: 45
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 06:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3d:80:26:13:c2:d4:7b:37:90:61:af:6d:24:ec:ed:6b:5d:e7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
        Validity
            Not Before: Apr 30 21:55:00 2026 GMT
            Not After : Apr 29 22:00:00 2027 GMT
        Subject: CN=F731EDF7424E08E866DA5B7C79138F999990B818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:8d:d8:ad:1c:35:cf:cd:78:45:c7:66:78:
                    8e:4f:31:3e:35:5f:3c:f3:67:85:1e:ea:ed:a7:86:
                    50:63:36:e2:48:bf:04:81:23:89:79:f4:99:75:dc:
                    5e:82:b3:08:29:c5:20:a9:bc:43:c6:d4:3c:8d:d6:
                    36:83:32:d6:3b:55:f9:d6:68:80:1f:69:a2:3c:38:
                    43:19:9e:b0:64:d2:0d:cd:1e:43:15:43:5a:92:93:
                    30:51:6f:18:97:15:7e:21:48:8b:81:ad:77:a6:83:
                    d9:b5:dc:2f:1e:06:0b:66:63:34:05:0f:8b:2c:5a:
                    bd:6b:18:9d:52:e4:77:79:b4:47:68:82:cb:25:95:
                    5f:e2:6c:5f:84:a4:cc:e0:81:54:34:07:68:af:af:
                    78:b2:ea:bd:d1:88:53:05:30:05:6d:6e:52:eb:08:
                    7b:72:16:5e:d9:1e:e5:81:66:3a:43:52:85:82:99:
                    98:ba:6e:7d:75:f1:78:99:52:77:34:9a:e7:0a:84:
                    dc:6e:ca:9e:b3:5a:f6:20:0e:88:61:ba:d3:78:8e:
                    1e:cc:0b:9b:65:e5:b1:31:a8:c3:af:76:24:e6:43:
                    fe:7f:0a:8b:9f:50:40:51:fe:47:36:9a:60:61:55:
                    d5:9d:41:29:b4:13:27:cd:ba:54:c7:3c:4b:51:9b:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:31:ED:F7:42:4E:08:E8:66:DA:5B:7C:79:13:8F:99:99:90:B8:18
            X509v3 Authority Key Identifier:
                keyid:0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3435203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16a::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:0c:8f:4c:87:c7:8f:f7:35:0e:90:ef:ff:84:33:0f:d2:
         34:f4:84:a4:9c:aa:f3:51:58:ee:97:83:d5:eb:8e:2e:b4:7a:
         6a:01:eb:51:f2:cd:35:f8:75:c1:7a:17:b9:8b:06:9d:48:54:
         c2:ea:bc:7b:0a:2a:3c:d2:09:6a:1f:7f:5b:ac:6a:d8:53:b9:
         f0:98:d4:45:86:8a:98:be:97:56:e7:43:ad:4e:95:fb:ab:89:
         0c:40:7a:51:44:b7:15:ae:48:5a:b1:e4:c1:c4:1e:7e:71:5e:
         07:b3:d0:03:da:af:a2:22:3c:32:29:ca:d8:3a:4f:e8:33:74:
         55:bd:ec:cb:ae:6a:0f:9e:07:04:bc:06:a1:c4:76:13:6d:d5:
         0a:6a:e8:b0:aa:88:9d:d5:2a:98:41:45:b1:77:34:6a:a2:2f:
         59:25:69:e6:04:9a:60:20:9a:e7:62:26:fa:9a:8f:34:33:fd:
         15:d3:03:0a:9c:1a:3a:08:d3:6d:b6:b9:b4:cc:44:0e:ce:10:
         e2:3d:db:84:ea:99:61:0a:36:92:c1:3f:76:40:e7:2a:f4:88:
         32:b9:a6:6c:a5:a2:88:81:75:84:6b:af:9e:2d:21:f4:52:c1:
         38:d7:54:57:51:3e:84:19:74:de:59:a4:22:73:fd:a6:e9:4e:
         e2:f5:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:27:32 2026 by rpki-client