Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a6335333a3a2f34382d3438203d3e203532333036.roa
File:                     323030313a313339383a6335333a3a2f34382d3438203d3e203532333036.roa (raw, json)
Hash identifier:          ZbxaCvBCSQ/qoYCoC62Q3U/mK+P0izKQguLToYfk52E=
Subject key identifier:   80:4E:13:DF:0C:03:57:97:57:6A:A9:C2:C0:91:F6:FB:41:15:59:4D
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       6164FD82ABAA21947E259857DBAA196B850A1A3D
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a6335333a3a2f34382d3438203d3e203532333036.roa
Signing time:             Wed 06 May 2026 00:41:26 +0000
ROA not before:           Wed 06 May 2026 00:36:26 +0000
ROA not after:            Wed 05 May 2027 00:41:26 +0000
asID:                     52306
IP address blocks:        2001:1398:c53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 07:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:64:fd:82:ab:aa:21:94:7e:25:98:57:db:aa:19:6b:85:0a:1a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: May  6 00:36:26 2026 GMT
            Not After : May  5 00:41:26 2027 GMT
        Subject: CN=804E13DF0C035797576AA9C2C091F6FB4115594D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:77:a1:9c:51:be:27:51:7e:0e:89:46:9d:
                    c0:0f:4b:ac:0b:50:48:95:29:d8:f7:d6:b6:45:47:
                    a0:39:54:42:4b:e7:3a:d7:80:b6:1f:c1:2f:56:50:
                    24:40:3a:db:7c:90:9d:7b:e6:66:58:af:97:38:42:
                    d4:10:81:6a:fc:9f:57:0e:c2:12:f0:88:59:61:99:
                    5a:a1:88:88:b9:cc:04:fc:af:3a:ad:82:8b:ee:33:
                    f4:fd:5e:8a:7f:4f:a6:b7:cb:92:14:92:01:6b:76:
                    f4:a4:b6:47:26:2b:2d:d9:3d:68:88:52:5e:1b:82:
                    e4:98:f9:ac:a1:bf:73:fb:2d:43:b6:34:0d:62:ca:
                    ef:c2:1b:83:3e:9e:d3:03:6b:7c:ee:a3:17:9b:d4:
                    b7:14:1b:40:df:9b:00:dc:a6:b6:f9:f0:58:65:a4:
                    f4:f1:f3:69:3d:3f:f1:72:ac:97:0e:e8:9a:b4:2c:
                    b5:5a:0f:92:de:e1:7c:fd:18:71:1c:9c:68:99:4a:
                    af:87:5c:9e:9b:d8:49:a2:9e:9d:fe:66:9c:7b:4e:
                    6c:f5:55:0b:07:b5:2d:35:c5:05:00:82:73:a7:ca:
                    6e:dd:79:d7:95:93:ee:7e:28:25:6b:80:d6:14:48:
                    fa:bb:3a:87:5e:70:75:db:15:23:eb:9f:99:3c:4a:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:13:DF:0C:03:57:97:57:6A:A9:C2:C0:91:F6:FB:41:15:59:4D
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a6335333a3a2f34382d3438203d3e203532333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:c53::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:37:af:47:20:b1:9a:9b:c2:a0:1c:18:6a:df:f0:d1:e4:
         9f:fc:f4:a1:76:39:06:32:c0:b6:52:5f:5a:af:df:14:6b:85:
         4a:22:1f:1d:b4:67:66:e1:8c:b6:12:7e:41:b1:fb:53:96:5f:
         d9:d1:64:ed:02:fa:17:c4:7d:f8:8c:d9:8c:48:d4:e0:83:c5:
         77:6e:c2:5c:78:82:dd:a7:f5:f2:42:e9:9b:7b:4a:c6:45:68:
         43:2e:ca:74:65:b7:74:f0:01:78:d5:38:fd:3f:23:80:ca:7e:
         b1:e6:9f:c2:16:c8:b8:7b:6f:83:b5:45:d3:2b:d6:41:1d:56:
         50:13:e6:57:13:d1:37:1e:d6:41:97:93:45:83:a1:5c:a2:50:
         32:58:b1:33:73:82:58:4e:11:98:cb:5e:b6:30:8a:bf:25:af:
         1b:8f:d7:a6:2d:7d:4f:e5:4a:3b:d7:64:77:91:a3:d5:9a:e8:
         6d:63:3f:67:2a:85:dd:08:c9:fd:e0:7d:8a:61:05:29:1a:fc:
         a7:74:09:3b:d3:98:83:35:e9:69:7e:02:db:92:e1:28:cc:29:
         7c:2c:e6:4d:56:05:c3:ac:49:78:c6:68:68:2b:c6:d7:61:44:
         5b:43:1f:b1:b5:ef:15:26:fb:bc:8b:96:9f:31:61:4d:2c:d1:
         06:14:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:00 2026 by rpki-client