Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/323830363a3435623a3a2f33322d3336203d3e20323734343036.roa
File:                     323830363a3435623a3a2f33322d3336203d3e20323734343036.roa (raw, json)
Hash identifier:          cStJvc2hBKEi5eWsObX+tVVQoLcXiwrz35C/AT33LGU=
Subject key identifier:   C6:B2:AC:60:B8:13:D0:55:D0:25:D3:81:CE:11:4A:D8:F8:AE:93:FF
Certificate issuer:       /CN=59239F1135AE5106ACDF5EFA334927DE8BC131C3
Certificate serial:       1FE1074FA72FB12C2E271C72AD6173B98597A0D2
Authority key identifier: 59:23:9F:11:35:AE:51:06:AC:DF:5E:FA:33:49:27:DE:8B:C1:31:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/323830363a3435623a3a2f33322d3336203d3e20323734343036.roa
Signing time:             Tue 24 Mar 2026 01:40:00 +0000
ROA not before:           Tue 24 Mar 2026 01:35:00 +0000
ROA not after:            Tue 23 Mar 2027 01:40:00 +0000
asID:                     274406
IP address blocks:        2806:45b::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e1:07:4f:a7:2f:b1:2c:2e:27:1c:72:ad:61:73:b9:85:97:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59239F1135AE5106ACDF5EFA334927DE8BC131C3
        Validity
            Not Before: Mar 24 01:35:00 2026 GMT
            Not After : Mar 23 01:40:00 2027 GMT
        Subject: CN=C6B2AC60B813D055D025D381CE114AD8F8AE93FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:0f:e8:58:59:34:70:ac:38:c2:c0:ec:fd:
                    61:a8:39:9f:46:fe:3b:61:b2:e7:7d:d9:65:74:8c:
                    69:46:4a:a8:b7:12:de:f0:a0:fb:ad:32:1b:3e:3f:
                    27:2b:d6:41:98:21:de:98:14:f0:bf:37:7f:a0:b2:
                    80:52:30:81:0f:13:23:d5:97:39:61:62:c1:69:d1:
                    49:f9:b9:77:97:08:19:92:f0:0c:3a:3c:94:2f:5d:
                    f0:ff:cb:55:5a:01:4a:81:c0:e8:7a:a0:0d:a9:47:
                    10:8c:1c:fa:3d:4c:b7:32:72:fe:da:44:d0:e4:dc:
                    78:62:b9:c7:d9:f9:86:4a:ce:02:ef:c0:fd:0a:4c:
                    3c:3c:e4:cd:a6:11:09:e2:18:fe:57:fc:de:6c:87:
                    9c:60:d4:1e:9f:84:a4:ba:be:cd:de:1f:e6:cb:e9:
                    af:cd:bd:e5:20:42:e6:d6:14:61:8d:2f:e9:61:5b:
                    56:0e:72:dc:8a:79:1b:64:0c:55:01:62:81:49:96:
                    d5:82:2a:bd:c0:c5:f6:2a:47:4d:e8:26:83:9c:bb:
                    87:a3:7d:ab:b5:af:b8:ad:47:9f:e9:88:9d:2d:42:
                    19:13:d6:71:38:7a:5f:ed:31:6f:83:cb:38:89:52:
                    9d:b7:08:2c:79:b5:d1:3f:54:b4:22:6d:e6:5e:c3:
                    b8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B2:AC:60:B8:13:D0:55:D0:25:D3:81:CE:11:4A:D8:F8:AE:93:FF
            X509v3 Authority Key Identifier:
                keyid:59:23:9F:11:35:AE:51:06:AC:DF:5E:FA:33:49:27:DE:8B:C1:31:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/323830363a3435623a3a2f33322d3336203d3e20323734343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:45b::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:b2:b2:d6:3d:71:5f:53:c0:e2:c6:9a:39:d4:8a:73:d8:
         4f:68:d8:32:5f:46:e2:d5:b5:30:34:c4:4a:ee:10:53:b5:24:
         65:dc:74:63:7a:c6:f0:a0:a9:04:2d:46:ba:23:a9:8f:c0:ec:
         00:23:ca:78:f2:dd:79:7c:82:16:0e:19:5e:5d:68:f8:f0:98:
         4a:59:29:43:fe:54:e9:ee:ff:ab:b7:89:1e:6b:98:6f:ff:37:
         cd:72:6d:09:99:e0:f1:4b:3d:58:33:ae:0f:e9:8c:ec:31:f9:
         97:e0:d7:42:26:6b:12:3a:a5:11:1f:fe:6e:a9:aa:39:e3:88:
         39:e4:db:6e:03:e8:f2:50:4d:fd:f4:cf:15:94:ca:d3:ad:49:
         a1:4c:c2:af:9d:3f:b5:7c:93:7f:42:73:a5:3a:f4:04:a8:1b:
         4d:87:46:34:e3:67:36:5c:f0:e0:b7:e4:67:5a:0b:2a:95:5a:
         d5:44:0b:49:56:13:db:0f:a9:f2:4d:43:dd:36:77:68:29:57:
         2e:8d:42:ef:1f:75:a2:ee:e8:e0:66:5c:b8:cb:69:8c:4c:71:
         e9:d6:b2:4b:1b:7d:99:00:87:11:19:4f:5d:8a:a9:e8:4b:92:
         3d:d4:cc:ae:18:95:c2:8a:08:e3:2e:75:43:ee:b7:d2:7e:24:
         65:ab:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:54 2026 by rpki-client