Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          XRy3H4JXohwCBjcmE/Nt542dX/6CJaUDFuWaeRCEYvM=
Subject key identifier:   B4:B6:B9:30:65:A1:F3:4A:25:D6:4F:30:45:3B:9D:52:17:29:8A:EB
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       586ABEAAD25C328D9A548A27A875C3C85F72AC6B
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Tue 28 Apr 2026 15:40:08 +0000
ROA not before:           Tue 28 Apr 2026 15:35:08 +0000
ROA not after:            Tue 27 Apr 2027 15:40:08 +0000
asID:                     273142
IP address blocks:        2803:2c50:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 09:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6a:be:aa:d2:5c:32:8d:9a:54:8a:27:a8:75:c3:c8:5f:72:ac:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Apr 28 15:35:08 2026 GMT
            Not After : Apr 27 15:40:08 2027 GMT
        Subject: CN=B4B6B93065A1F34A25D64F30453B9D5217298AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8e:ed:20:c9:86:48:d6:c1:07:69:95:e8:5b:
                    e6:03:b6:44:08:9d:4c:82:33:52:e9:29:fe:88:eb:
                    b8:0e:84:94:35:85:a1:bc:31:e5:e1:51:45:67:8f:
                    75:ac:01:4e:44:69:25:cc:ce:51:45:ec:d0:16:85:
                    fd:7c:2c:b9:52:70:fb:c7:45:b0:20:e3:33:3f:a9:
                    ae:a6:42:da:2c:d7:1d:a5:d2:7d:04:50:f1:64:0e:
                    87:33:32:a5:c5:c8:07:e7:c9:7c:47:44:2e:25:f0:
                    f6:2a:83:9c:ce:74:63:ec:8a:bf:bd:72:6c:ce:3d:
                    96:f2:07:22:2e:fe:8b:c7:89:41:35:11:b5:c2:b4:
                    ce:84:4c:80:39:62:e8:9f:32:8d:ff:9b:63:05:ae:
                    d2:94:02:0a:d3:0e:25:df:8e:29:33:5a:33:59:84:
                    65:7b:37:52:d2:25:3c:e5:09:8c:58:72:c2:85:76:
                    ff:bb:d0:78:ee:47:6e:ec:f0:49:e9:54:f1:41:8c:
                    8a:d3:2c:d0:d1:a2:4d:77:fe:b6:57:55:fd:f7:06:
                    fc:c0:8b:18:51:ea:86:57:1f:00:42:a2:4e:b9:be:
                    84:98:3b:9f:a5:72:ae:1e:90:94:62:58:87:1c:45:
                    79:84:9f:67:76:c7:31:c0:9d:13:81:31:30:3f:8f:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B6:B9:30:65:A1:F3:4A:25:D6:4F:30:45:3B:9D:52:17:29:8A:EB
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:f6:fb:3d:e4:e3:e4:5e:fc:ae:85:25:01:02:91:62:22:
         3c:69:5b:28:06:e4:45:e2:94:02:c8:dd:5d:c2:8f:0b:9d:1e:
         d9:b0:d1:15:6c:20:3b:d4:a5:fb:44:e0:2f:34:5d:e0:17:9f:
         90:6b:ec:61:db:16:88:92:85:a4:9d:37:c8:85:28:ef:1c:b9:
         8d:68:55:ab:17:72:cf:57:86:35:a3:a6:22:16:32:a7:87:06:
         3d:dc:e4:a5:b1:57:94:29:ca:40:32:ed:1d:de:21:86:8d:b0:
         ab:50:b2:57:94:0d:70:7a:0a:8b:86:41:e4:06:56:b7:6f:20:
         27:c3:4d:50:01:ee:b8:ba:50:b0:8d:d3:2d:65:3f:6e:e9:db:
         67:f3:cb:80:18:4d:ac:cb:cd:3f:99:50:bc:c8:d6:5b:de:5b:
         03:8a:ad:bc:a0:d5:9c:58:4e:ee:5d:a4:c7:37:09:c7:a3:3b:
         2a:32:4f:17:be:94:b8:e0:54:b2:e5:69:a7:ce:35:6c:48:9c:
         d6:9b:25:84:ad:dc:6a:e3:48:b9:56:f1:45:b7:04:f2:f6:2e:
         a0:01:03:30:8b:b6:1d:10:f6:32:6e:aa:5b:a8:8b:d4:f5:47:
         73:1f:c5:24:a5:2d:37:07:8e:5b:18:a9:bd:52:0b:73:58:1c:
         30:cc:29:b7
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUWGq+qtJcMo2aVIonqHXDyF9yrGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFCODEwM0RDRTg4RERERUFEQkFDMzA4NzlDNEE3ODVG
MTUxN0VFMjAeFw0yNjA0MjgxNTM1MDhaFw0yNzA0MjcxNTQwMDhaMDMxMTAvBgNV
BAMTKEI0QjZCOTMwNjVBMUYzNEEyNUQ2NEYzMDQ1M0I5RDUyMTcyOThBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkju0gyYZI1sEHaZXoW+YDtkQI
nUyCM1LpKf6I67gOhJQ1haG8MeXhUUVnj3WsAU5EaSXMzlFF7NAWhf18LLlScPvH
RbAg4zM/qa6mQtos1x2l0n0EUPFkDoczMqXFyAfnyXxHRC4l8PYqg5zOdGPsir+9
cmzOPZbyByIu/ovHiUE1EbXCtM6ETIA5YuifMo3/m2MFrtKUAgrTDiXfjikzWjNZ
hGV7N1LSJTzlCYxYcsKFdv+70HjuR27s8EnpVPFBjIrTLNDRok13/rZXVf33BvzA
ixhR6oZXHwBCok65voSYO5+lcq4ekJRiWIccRXmEn2d2xzHAnROBMTA/jyw7AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUtLa5MGWh80ol1k8wRTudUhcpiuswHwYDVR0j
BBgwFoAUQbgQPc6I3d6tusMIecSnhfFRfuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTc4MjU1QUIzOTlEMURBNTM4QUQyRTA5QjMxMjkyRkZC
QkY0REE3NjY1NkQzOThFQ0JCRUUwRkNCRUYwOURFLzAvNDFCODEwM0RDRTg4RERE
RUFEQkFDMzA4NzlDNEE3ODVGMTUxN0VFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MUI4MTAzRENFODhERERFQURC
QUMzMDg3OUM0QTc4NUYxNTE3RUUyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3ODI1NUFCMzk5RDFEQTUzOEFEMkUwOUIzMTI5MkZGQkJGNERBNzY2
NTZEMzk4RUNCQkVFMEZDQkVGMDlERS8wLzMyMzgzMDMzM2EzMjYzMzUzMDNhMzIz
MDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM0MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoAyxQIDANBgkqhkiG9w0BAQsFAAOCAQEAerT2+z3k4+Re/K6FJQECkWIi
PGlbKAbkReKUAsjdXcKPC50e2bDRFWwgO9Sl+0TgLzRd4BefkGvsYdsWiJKFpJ03
yIUo7xy5jWhVqxdyz1eGNaOmIhYyp4cGPdzkpbFXlCnKQDLtHd4hho2wq1CyV5QN
cHoKi4ZB5AZWt28gJ8NNUAHuuLpQsI3TLWU/bunbZ/PLgBhNrMvNP5lQvMjWW95b
A4qtvKDVnFhO7l2kxzcJx6M7KjJPF76UuOBUsuVpp841bEic1pslhK3cauNIuVbx
RbcE8vYuoAEDMIu2HRD2Mm6qW6iL1PVHcx/FJKUtNweOWxipvVILc1gcMMwptw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:59:48 2026 by rpki-client