Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa
File:                     323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa (raw, json)
Hash identifier:          joD+D2LZ5q2JVMQynM5L9/xKzuyrksy6VQA0s++nx3w=
Subject key identifier:   93:52:3E:74:A9:B3:BD:51:10:17:0B:69:B9:D4:A2:7A:C5:44:AB:CD
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       6395E0098057CDB8C9E12D410903347B6E63B2C0
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa
Signing time:             Tue 05 May 2026 01:41:14 +0000
ROA not before:           Tue 05 May 2026 01:36:14 +0000
ROA not after:            Tue 04 May 2027 01:41:14 +0000
asID:                     28459
IP address blocks:        2001:1207:ffc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:95:e0:09:80:57:cd:b8:c9:e1:2d:41:09:03:34:7b:6e:63:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: May  5 01:36:14 2026 GMT
            Not After : May  4 01:41:14 2027 GMT
        Subject: CN=93523E74A9B3BD5110170B69B9D4A27AC544ABCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:f1:8c:c6:27:19:80:18:36:2f:5d:3b:55:
                    8e:b8:a7:6d:4e:84:9f:99:9a:ca:02:1b:08:cb:5b:
                    4a:03:fa:ab:6b:04:fb:3d:fb:b3:8e:e6:d7:57:14:
                    59:2d:5e:99:91:fb:8b:22:5b:bc:02:e1:0d:ed:40:
                    48:d8:ae:9c:a0:a7:7d:a1:1e:7e:b3:60:8b:79:cf:
                    89:9a:63:f8:1c:f5:97:b7:fc:f2:9e:c4:cc:b5:39:
                    db:75:1f:6c:d6:93:99:fa:a6:c9:64:a6:e3:97:8c:
                    fe:36:48:f0:64:c4:d8:2b:c6:4d:37:10:08:0a:e1:
                    e7:c5:6a:a0:4b:31:e1:40:11:c5:b2:90:86:e6:cb:
                    c4:c4:e1:da:28:34:f9:50:bf:f4:2e:0c:b5:11:ad:
                    e5:00:85:98:15:24:7e:59:f2:47:05:38:52:35:a6:
                    67:0f:8f:df:75:fa:65:41:a1:10:0b:0c:98:76:1b:
                    68:17:a6:b2:ef:fc:45:64:85:ce:c5:db:0e:1d:18:
                    10:3e:b8:a1:48:61:f4:a4:ee:b9:ac:28:c2:b4:51:
                    87:54:9f:1e:54:97:80:2a:7d:6b:28:c9:41:25:0c:
                    dc:ea:e5:09:a9:59:e0:6b:99:2f:f3:17:37:68:04:
                    3a:32:1a:f5:7a:84:3d:42:11:d5:ce:f2:44:7a:fc:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:52:3E:74:A9:B3:BD:51:10:17:0B:69:B9:D4:A2:7A:C5:44:AB:CD
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1207:ffc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:d5:a8:f7:e4:7a:2b:a6:78:d0:05:ea:af:6a:47:8e:1b:
         af:96:77:53:d5:f2:3a:4b:19:5d:96:53:1f:ab:91:3c:d7:ec:
         fc:7b:00:bf:56:1d:c6:38:fc:77:05:b7:f7:79:e3:2d:da:d8:
         c5:5f:b7:66:81:8a:7a:81:f0:93:8d:40:4e:58:39:2b:c2:36:
         4f:a1:a4:aa:f1:30:19:97:fa:d8:6b:2c:69:61:0b:72:86:c5:
         9a:f6:4e:f9:23:1f:59:6e:48:44:98:88:17:e2:41:4d:48:8f:
         63:de:7c:cd:d8:9a:fd:40:a8:3a:24:49:76:77:49:bf:ad:ea:
         c7:6b:40:15:92:59:65:dc:a9:9d:91:ed:6d:ec:83:85:86:51:
         5c:e7:ae:b5:14:82:83:f6:f2:d8:b5:56:ef:13:50:44:21:5d:
         9a:c0:6b:5a:c3:04:a1:55:dd:f2:cf:fe:e2:66:17:df:f5:9a:
         20:02:cf:40:f2:9d:aa:b4:16:3b:ab:1a:ee:47:1e:a7:26:69:
         6f:0f:0b:15:b6:d2:2f:02:6d:9f:e3:b0:e0:87:86:6e:f8:4f:
         67:06:3c:66:d6:ff:3b:95:5a:e0:84:d9:dc:9b:cd:04:dc:c1:
         24:b0:1f:5f:a3:9b:c2:74:31:9f:ea:94:fb:63:8a:1d:5d:5f:
         17:6c:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:31:15 2026 by rpki-client