Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3333203d3e203133343839.roa
File:                     323830303a3538303a3a2f33322d3333203d3e203133343839.roa (raw, json)
Hash identifier:          85Y46yzPZ8EIwhhEZlGYswGaNudZpKlrP2hEMBf+Hns=
Subject key identifier:   5A:F9:48:9C:6F:A4:81:62:3E:65:51:56:1F:CC:C3:DF:54:9F:B3:88
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       41FAEBF78367618F1C10B84E544379DB2AAD6E56
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3333203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:04 +0000
ROA not before:           Thu 19 Mar 2026 20:30:04 +0000
ROA not after:            Thu 18 Mar 2027 20:35:04 +0000
asID:                     13489
IP address blocks:        2800:580::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fa:eb:f7:83:67:61:8f:1c:10:b8:4e:54:43:79:db:2a:ad:6e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:04 2026 GMT
            Not After : Mar 18 20:35:04 2027 GMT
        Subject: CN=5AF9489C6FA481623E6551561FCCC3DF549FB388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:27:7c:a6:4a:24:02:5c:15:0b:e3:d0:ef:
                    b2:85:54:7f:ad:a2:ad:54:15:5e:e3:b6:23:90:4c:
                    83:bc:82:fc:bb:55:15:95:09:f5:ab:c4:53:57:fe:
                    a4:40:9d:0e:57:c7:af:63:8b:bd:6e:d0:9f:2b:a3:
                    be:64:9c:e8:97:a1:4f:f9:23:80:de:d3:0a:9f:75:
                    d6:8a:85:04:3d:5e:18:93:a8:96:15:df:cd:51:ea:
                    89:df:56:78:22:80:6f:72:66:26:e4:d6:6a:55:56:
                    97:2f:fb:6c:ba:7e:f7:dc:55:f3:a5:aa:2f:d6:1e:
                    22:b5:24:af:82:e4:38:6b:a3:9c:75:6b:9a:46:2b:
                    12:ce:6d:35:92:c1:cb:80:4d:d7:b6:e1:bd:d8:a5:
                    87:2c:25:b5:59:7b:2b:9b:87:ea:7f:53:f8:1a:e1:
                    a7:8c:f0:36:fd:a4:c5:9a:b9:d9:b2:a5:ce:18:da:
                    ab:16:34:ba:4e:9e:00:3d:80:94:22:79:a6:22:71:
                    74:6a:83:30:d7:f1:36:a5:9c:71:e4:8c:f0:0e:d1:
                    fa:28:f2:22:37:0b:93:54:a5:ec:e5:36:cf:5f:13:
                    ef:65:2d:0d:29:20:5c:fd:84:8b:1e:4a:61:84:34:
                    ec:f5:71:0c:e0:e9:0b:73:8e:01:94:ab:20:04:e1:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:48:9C:6F:A4:81:62:3E:65:51:56:1F:CC:C3:DF:54:9F:B3:88
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3333203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:32:55:1f:ff:9b:e4:2b:cf:6f:2d:b2:eb:3a:31:93:f2:
         cb:9a:93:c4:33:f9:2f:4d:85:09:1a:ab:51:ab:ca:33:78:fc:
         80:fd:c2:c9:67:51:79:97:cf:3d:29:1a:fa:8f:14:25:f0:24:
         5e:dd:aa:1c:54:11:3b:68:ee:3d:9b:98:e4:f0:62:cd:82:97:
         ea:93:ba:dc:96:9e:0b:f4:b2:53:77:b1:a7:64:44:a6:04:e6:
         cd:94:68:d9:3c:95:e3:fc:15:ce:51:cd:1d:29:26:1d:5d:4d:
         1b:d7:df:60:cc:5d:1c:c0:ef:41:7a:d2:e3:88:b8:44:5e:e3:
         cd:a9:67:dd:85:de:af:39:55:06:54:53:ff:d5:76:26:84:76:
         34:e0:e6:2e:d0:ff:1e:41:dc:27:2c:ac:cc:05:5f:fa:76:ca:
         9f:96:b2:f4:af:16:d5:65:85:f0:cf:6b:f9:3a:71:10:02:78:
         ce:07:bb:8e:ca:05:38:db:c6:bc:e4:73:54:ee:6d:84:31:92:
         73:aa:87:a9:94:11:10:95:24:8f:6f:96:ee:a2:86:71:5c:8a:
         bd:7c:f3:81:71:62:9d:40:62:39:af:3f:93:d6:17:30:9e:30:
         bf:34:b5:f1:41:a0:79:ad:c8:36:e1:c2:ce:da:c4:d7:e9:0f:
         96:25:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:03 2026 by rpki-client