Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/323030313a313237303a3a2f33322d3438203d3e203232303131.roa
File:                     323030313a313237303a3a2f33322d3438203d3e203232303131.roa (raw, json)
Hash identifier:          2u78H/nKrlCSPu0Yo+9FYM4YaSYv8IrDr8ZQh0iDKgY=
Subject key identifier:   27:2A:F3:BA:00:6A:91:64:2F:C3:A9:3C:9E:C1:3F:EA:61:70:5A:32
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       144F1570E65191AABA8BF27A2683B15089A4CFA7
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/323030313a313237303a3a2f33322d3438203d3e203232303131.roa
Signing time:             Tue 07 Jul 2026 20:05:00 +0000
ROA not before:           Tue 07 Jul 2026 20:00:00 +0000
ROA not after:            Tue 06 Jul 2027 20:05:00 +0000
asID:                     22011
IP address blocks:        2001:1270::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4f:15:70:e6:51:91:aa:ba:8b:f2:7a:26:83:b1:50:89:a4:cf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 20:00:00 2026 GMT
            Not After : Jul  6 20:05:00 2027 GMT
        Subject: CN=272AF3BA006A91642FC3A93C9EC13FEA61705A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:fd:dc:8d:03:b4:de:21:37:05:2a:2a:e5:
                    ae:a1:52:b5:57:f7:2e:6b:8b:62:3b:82:3d:be:1c:
                    57:3e:52:42:3d:dc:5b:50:4c:c3:75:aa:27:3f:80:
                    96:ce:07:ae:31:28:e9:f4:21:f0:0f:00:a5:32:15:
                    a4:da:c7:2f:4b:9d:c0:76:88:13:49:40:0f:90:5a:
                    59:18:95:f9:86:d7:79:52:47:eb:3a:86:c4:b5:ee:
                    0b:b7:a6:db:3a:f0:b9:d3:3b:e9:ee:3b:a5:0e:b0:
                    ce:58:bd:a2:07:a7:bf:df:f9:8b:0b:db:83:6e:0f:
                    a3:40:9d:81:0c:a2:d3:46:38:af:c5:53:38:ca:82:
                    b5:60:e1:09:bb:36:bf:be:1f:73:6e:6f:bf:0b:8f:
                    2d:29:ef:2e:39:de:62:e3:a4:08:8f:47:99:4f:2b:
                    0a:b1:00:49:14:ec:d6:f2:e7:59:db:e8:19:dd:98:
                    fd:31:83:20:69:33:57:e7:76:8e:7b:0e:f6:fd:de:
                    f5:74:23:22:76:b1:03:02:da:44:a7:b0:13:91:5d:
                    6a:38:fa:12:ed:7a:0b:e0:50:e5:cc:77:2f:c7:0a:
                    68:43:07:56:14:10:40:1c:a4:5b:8b:18:df:35:79:
                    75:8a:8b:2c:7f:3c:60:79:9d:7e:b2:7f:16:18:ab:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2A:F3:BA:00:6A:91:64:2F:C3:A9:3C:9E:C1:3F:EA:61:70:5A:32
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/323030313a313237303a3a2f33322d3438203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1270::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:a2:5f:53:80:8c:c2:e3:2d:fe:82:49:65:e6:1a:22:01:31:
         e3:2a:12:8d:e7:c7:a8:21:d8:2f:d4:17:02:15:0a:93:0c:c8:
         45:f8:2c:8b:b0:71:a6:b8:48:da:18:3b:8e:78:7b:9a:0a:de:
         ba:ad:41:3d:6a:38:80:c7:6b:d8:53:02:26:63:8b:a9:91:8a:
         64:c6:c4:0f:4e:1b:42:8e:83:e1:8b:bc:60:00:13:b2:0d:cc:
         04:8f:d6:88:ae:e5:45:3c:92:59:3b:cd:93:48:7b:94:44:92:
         be:5e:46:de:74:6d:16:43:23:56:b2:8f:3b:f1:2a:9b:86:29:
         45:76:60:8e:56:4e:5c:43:c0:4c:bf:3f:84:a4:cb:6f:91:93:
         d0:4f:3c:0b:36:45:a9:35:dd:98:55:c9:1f:e7:64:5a:f4:40:
         03:46:65:c0:17:e7:9a:13:a3:76:9f:51:2f:46:bd:eb:f0:fa:
         43:d0:0d:fc:ea:99:02:62:81:2b:75:30:9e:4a:1c:28:ae:49:
         cb:2f:f4:91:2f:34:a1:87:6b:51:b9:f9:70:f4:82:a9:b6:31:
         c4:5f:47:66:1a:89:cd:f5:3a:55:76:6b:a4:6f:5b:f6:6c:b9:
         cb:32:aa:e0:3c:c4:10:de:e8:cb:dc:76:15:b1:98:5d:90:d1:
         cd:bd:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:37:54 2026 by rpki-client