Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a63303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3161643a63303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          TXeez6fopIA/M5RgiU+lghMLQ+ELknxXZbp+SNejkSk=
Subject key identifier:   49:B3:B8:60:23:F2:C7:14:62:4F:58:6C:B9:D2:D5:48:8E:86:9B:15
Certificate issuer:       /CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
Certificate serial:       4A37F975E748F7DEE29D07CB6F7526FB2C8CE675
Authority key identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a63303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Mon 04 May 2026 17:50:00 +0000
ROA not before:           Mon 04 May 2026 17:45:00 +0000
ROA not after:            Mon 03 May 2027 17:50:00 +0000
asID:                     14080
IP address blocks:        2801:1ad:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 22:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:f9:75:e7:48:f7:de:e2:9d:07:cb:6f:75:26:fb:2c:8c:e6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
        Validity
            Not Before: May  4 17:45:00 2026 GMT
            Not After : May  3 17:50:00 2027 GMT
        Subject: CN=49B3B86023F2C714624F586CB9D2D5488E869B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:9d:1c:f2:2a:67:97:df:81:9a:c7:73:7c:
                    8b:f1:91:a3:dc:1c:8a:0d:bd:6a:76:22:ea:1f:49:
                    cd:93:4e:8a:33:b4:1f:b4:b5:53:cc:eb:8e:cd:f2:
                    4b:cf:db:30:c3:32:0b:87:7a:3e:b7:83:75:01:e3:
                    60:fb:45:c0:33:bb:48:c6:46:16:b8:1a:c1:1c:1a:
                    66:df:28:98:68:91:57:49:d5:ee:e7:bd:31:c9:73:
                    d7:e3:ed:09:b9:a5:83:81:d4:a8:45:9f:46:bc:4f:
                    39:be:0f:c5:a8:3c:8b:85:b3:dd:cf:40:7a:4f:8e:
                    bf:9a:69:7a:31:b9:90:0f:9e:0b:20:b5:2e:8e:52:
                    24:89:01:48:71:ce:d1:53:ed:da:44:2f:92:dc:6c:
                    a8:6a:79:1a:d0:ea:ff:30:e1:be:42:b9:95:70:d6:
                    c6:e7:2d:51:49:5d:13:e2:3f:70:4e:80:29:da:84:
                    ed:7d:39:7b:37:6c:bb:7c:be:b2:48:e0:24:fc:53:
                    70:8f:59:b9:d8:db:b1:87:ac:a6:e2:d4:40:01:c0:
                    8a:3a:54:c6:1f:f4:de:e6:12:c4:73:44:d3:33:45:
                    33:3c:92:90:7c:6a:4e:0c:a4:40:5e:1c:6d:8f:d7:
                    e2:11:cd:52:57:ac:9d:af:c6:e3:3f:c5:80:0f:9a:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:B8:60:23:F2:C7:14:62:4F:58:6C:B9:D2:D5:48:8E:86:9B:15
            X509v3 Authority Key Identifier:
                keyid:08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a63303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ad:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:30:a9:ea:ee:56:dd:f4:de:63:30:7e:59:12:cb:b0:4d:ee:
         03:47:c9:92:a1:37:f9:ee:d0:de:37:06:93:73:7d:44:a9:0b:
         2a:5e:d5:da:63:39:1d:3d:52:8c:21:35:03:c9:b2:ef:8d:83:
         dc:3e:5e:bc:6d:49:48:4b:94:0c:9f:91:76:ef:df:30:4a:02:
         24:f0:cb:85:26:b3:07:93:7e:d7:05:9b:3e:24:8f:03:51:2a:
         84:95:71:8a:ed:23:1a:5d:d4:5d:d9:ee:f9:cd:08:68:e5:0b:
         3f:3a:b6:97:8e:48:ef:10:1e:5f:04:82:0b:5e:84:da:f4:8d:
         64:1e:63:97:36:6e:fd:ab:7c:b2:96:c7:cb:2a:15:83:3a:c4:
         88:3d:72:1d:ba:68:4c:aa:4b:1d:20:97:dd:8d:ff:ec:e6:89:
         f0:ff:2d:00:ac:f6:bc:7e:76:a7:9d:85:bc:a2:f5:c5:10:e3:
         fa:e7:7d:79:74:fa:d2:42:15:bc:ac:e4:c1:25:34:ca:ac:ea:
         71:13:60:49:78:ee:8f:80:41:f7:f3:fb:d2:09:50:dd:fa:34:
         54:28:df:5e:c9:15:ac:f3:a2:f1:15:be:96:15:a8:7a:2b:40:
         7f:35:91:5b:79:42:23:a8:e8:b6:98:e7:5e:8f:8b:cb:37:37:
         7b:32:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:02:06 2026 by rpki-client