Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/323830313a31663a663830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31663a663830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          n9PXgN7rEwFQrMp68PND3l/x0E5ESMqMKiAWu2rHTG4=
Subject key identifier:   A7:B0:26:4A:1E:1C:95:F9:BF:C8:62:CF:C3:AE:EC:10:84:FC:00:C4
Certificate issuer:       /CN=BD81A89E733FE559256F66E37ABBC0B30E73E2D2
Certificate serial:       76AB557BD625037D39287A82D491F8CB5009BD02
Authority key identifier: BD:81:A8:9E:73:3F:E5:59:25:6F:66:E3:7A:BB:C0:B3:0E:73:E2:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/323830313a31663a663830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Wed 11 Mar 2026 15:33:32 +0000
ROA not before:           Wed 11 Mar 2026 15:28:32 +0000
ROA not after:            Wed 10 Mar 2027 15:33:32 +0000
asID:                     13489
IP address blocks:        2801:1f:f800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 10:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ab:55:7b:d6:25:03:7d:39:28:7a:82:d4:91:f8:cb:50:09:bd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD81A89E733FE559256F66E37ABBC0B30E73E2D2
        Validity
            Not Before: Mar 11 15:28:32 2026 GMT
            Not After : Mar 10 15:33:32 2027 GMT
        Subject: CN=A7B0264A1E1C95F9BFC862CFC3AEEC1084FC00C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:00:1b:0e:5b:e2:84:f0:d3:a7:06:b4:bd:
                    3d:e0:87:29:92:49:47:7f:73:91:08:ff:d1:be:13:
                    0f:81:5e:bb:3b:93:f5:6f:d2:a6:b5:53:61:03:4f:
                    c1:fe:a8:a1:67:65:d6:bf:02:e2:58:45:58:60:81:
                    5e:ed:86:38:af:99:47:d8:cf:be:4f:8f:8e:ff:56:
                    61:b9:9e:c7:52:4b:3f:86:c0:63:d8:31:36:42:96:
                    ab:c3:43:88:56:38:24:4e:a1:83:ba:5a:c0:de:35:
                    b6:43:b1:c6:69:98:2b:6c:76:e8:c4:ed:20:3b:c0:
                    0f:ff:2b:3c:66:c5:21:6f:1c:90:8c:c9:44:93:a8:
                    b8:b4:05:74:f0:2c:c7:19:2e:8c:d3:ab:8f:77:75:
                    ab:92:eb:f6:07:7f:f3:63:39:35:72:7d:b6:41:dd:
                    de:56:c9:c7:7a:e6:7d:0f:f4:dd:ee:2d:53:44:46:
                    c3:d4:33:35:be:8f:1e:69:24:b3:b8:5d:37:9f:27:
                    05:f7:31:bc:68:88:15:ba:03:2f:23:b4:9f:5e:53:
                    23:de:3d:c4:54:f0:4f:ac:03:f0:16:84:22:9f:9c:
                    14:32:e2:73:35:14:80:8c:18:8e:7c:cd:a5:c3:08:
                    29:1d:69:87:ac:3c:51:1a:cb:aa:09:71:0e:89:4f:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B0:26:4A:1E:1C:95:F9:BF:C8:62:CF:C3:AE:EC:10:84:FC:00:C4
            X509v3 Authority Key Identifier:
                keyid:BD:81:A8:9E:73:3F:E5:59:25:6F:66:E3:7A:BB:C0:B3:0E:73:E2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD81A89E733FE559256F66E37ABBC0B30E73E2D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C476F6EB3B8C1D645A6BB294C69DC108B6EB7C7247BE391A6CCC862C49C13CC0/0/323830313a31663a663830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:38:f5:53:d3:a6:bd:17:1d:b7:8d:d8:ad:03:7c:ec:6f:cf:
         74:71:f2:dd:9a:fb:fc:2d:fc:5b:bc:9c:ea:7e:e6:32:72:b0:
         01:0c:03:e7:de:cb:5f:a9:e8:b1:13:54:2c:35:d0:11:a6:4e:
         bf:2d:c9:10:71:4f:b2:7b:d3:3a:a8:c2:3d:58:65:22:e5:9b:
         ac:7f:26:99:e5:00:ae:a2:d2:5b:c2:69:91:6f:4e:dc:a5:42:
         6a:46:17:72:c3:1d:e5:e1:4a:e3:99:2e:08:8a:d2:c3:ad:9d:
         63:74:a3:aa:f7:93:6e:71:d4:c5:c7:59:20:73:0e:93:13:c2:
         9c:c0:2b:88:c2:77:05:d1:25:09:fd:cb:fb:2c:a9:86:fc:44:
         6f:fc:1a:35:4d:ca:d9:ec:98:27:21:f3:27:05:8e:09:89:06:
         22:c5:bc:fa:c5:d0:84:b4:9c:22:36:99:9a:72:6c:44:d6:45:
         1b:7a:77:46:dc:a0:e0:7e:33:5c:d1:89:08:d8:20:c9:27:a7:
         f8:21:c4:af:48:8e:9c:22:61:0a:d1:c3:cf:16:bd:5c:de:8a:
         7a:ae:2f:64:b1:52:8d:81:f8:fe:d8:ab:2b:db:bb:9c:85:ab:
         ea:e7:76:76:96:5e:20:87:ba:a1:7b:18:2e:c6:28:cb:bf:38:
         f1:74:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:46:38 2026 by rpki-client