Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a38303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3161643a38303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          qKEDG6JqHWZa1WjOh+255ZfuxS2Tw4XFEHzDXzAAbe8=
Subject key identifier:   98:40:32:09:6D:40:06:0C:61:56:1B:32:86:1C:B6:84:29:AC:E2:AA
Certificate issuer:       /CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
Certificate serial:       55261E542AEFE6725BD435B703ABE6ECE6EA632B
Authority key identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a38303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Mon 04 May 2026 17:50:00 +0000
ROA not before:           Mon 04 May 2026 17:45:00 +0000
ROA not after:            Mon 03 May 2027 17:50:00 +0000
asID:                     14080
IP address blocks:        2801:1ad:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 22:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:26:1e:54:2a:ef:e6:72:5b:d4:35:b7:03:ab:e6:ec:e6:ea:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
        Validity
            Not Before: May  4 17:45:00 2026 GMT
            Not After : May  3 17:50:00 2027 GMT
        Subject: CN=984032096D40060C61561B32861CB68429ACE2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:9a:72:10:b8:99:0a:ed:b3:68:56:3c:f5:
                    76:a4:82:a6:0c:99:03:0e:62:58:90:4c:f2:b2:c8:
                    63:70:fb:7b:be:a1:e2:71:30:76:fb:a1:42:17:85:
                    68:16:11:a1:1e:bf:f8:97:4b:59:a4:7c:99:80:5f:
                    d0:f9:bb:b5:f7:4a:72:f2:c7:e1:52:d0:13:77:a2:
                    1f:74:01:ca:58:03:c0:15:83:5b:d8:ff:86:78:07:
                    33:ae:e8:49:47:d4:fc:a9:0e:7f:b2:f7:17:f4:b5:
                    13:46:77:63:01:2d:9f:f6:78:4d:62:82:93:f1:02:
                    f6:91:20:e5:5d:1b:b0:d2:3e:79:6c:24:19:aa:ee:
                    52:3b:98:f5:0a:bc:7c:d2:8d:13:cd:26:28:0d:7f:
                    34:96:8a:ee:cd:ed:e6:d8:bf:5e:dd:63:c7:4e:12:
                    0e:68:13:72:6c:6a:a8:9c:39:7a:d5:6a:96:d5:03:
                    a0:65:4d:22:41:b9:40:1b:dc:7d:d1:0d:de:10:47:
                    54:e7:38:2d:f3:91:8d:f2:8b:2d:10:99:f8:fb:a9:
                    a0:a5:d3:e9:0e:2b:17:fa:f3:c7:06:5f:33:44:ad:
                    ba:3d:b4:b2:28:fe:80:f1:ec:59:2d:fe:db:e8:01:
                    29:3a:9a:12:1b:8d:f5:9f:bf:1a:e8:7c:4d:bd:3f:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:32:09:6D:40:06:0C:61:56:1B:32:86:1C:B6:84:29:AC:E2:AA
            X509v3 Authority Key Identifier:
                keyid:08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a38303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ad:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:85:d0:ad:cf:d8:cf:4c:30:79:8a:64:bd:2a:de:1b:65:91:
         43:a8:52:9a:3c:01:57:29:fc:20:ef:69:76:61:37:04:77:c1:
         50:e3:de:3e:8a:93:25:0d:b5:ce:f5:f7:bd:44:36:0a:37:b1:
         d7:88:c4:66:ea:dd:2e:15:da:4b:50:78:f8:2f:09:ac:79:fb:
         97:40:2a:9e:cc:42:92:36:0a:21:61:25:2e:ce:82:8f:54:13:
         eb:09:0d:7d:44:ad:12:5f:95:d9:58:0f:e7:87:24:70:c5:5a:
         e5:bd:e5:58:77:c4:19:05:cd:bb:2b:b1:9e:4d:88:86:63:1f:
         ed:e6:ac:c3:ce:0d:cc:26:2f:e4:b2:22:2b:9c:9b:a6:4e:b6:
         ff:05:08:28:f9:64:06:cf:f2:ff:5e:27:21:d5:25:07:2a:78:
         4b:78:a8:d4:60:c9:d6:79:cc:0b:96:90:3a:7b:58:7e:2b:05:
         d5:e6:0f:57:fa:60:db:db:a1:d6:3d:96:78:a1:ca:fd:7f:20:
         cf:eb:a2:9b:59:56:b5:7f:d7:35:81:3e:96:41:18:b0:b5:d5:
         a5:94:aa:69:69:81:08:88:ca:3d:e7:ff:45:a2:3f:3e:a9:f9:
         d9:b9:06:67:67:5f:76:23:dd:3f:1a:43:6f:5e:09:a9:2b:12:
         69:ce:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:55 2026 by rpki-client