Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/323830363a3365323a3a2f33322d3332203d3e203133393539.roa
File:                     323830363a3365323a3a2f33322d3332203d3e203133393539.roa (raw, json)
Hash identifier:          Xpu3bzidlGioyEWmdX54qZJfifKpJ3bnxshnUBkbsOc=
Subject key identifier:   DB:36:37:35:A2:66:92:1D:19:89:B1:30:6E:21:93:31:D8:C1:9F:72
Certificate issuer:       /CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC
Certificate serial:       21B6E26309CEFCB1DCFEFB416773C89FBF8BD1C0
Authority key identifier: 2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/323830363a3365323a3a2f33322d3332203d3e203133393539.roa
Signing time:             Fri 01 May 2026 19:30:00 +0000
ROA not before:           Fri 01 May 2026 19:25:00 +0000
ROA not after:            Fri 30 Apr 2027 19:30:00 +0000
asID:                     13959
IP address blocks:        2806:3e2::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 05:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b6:e2:63:09:ce:fc:b1:dc:fe:fb:41:67:73:c8:9f:bf:8b:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC
        Validity
            Not Before: May  1 19:25:00 2026 GMT
            Not After : Apr 30 19:30:00 2027 GMT
        Subject: CN=DB363735A266921D1989B1306E219331D8C19F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:c3:b9:2c:7b:8f:94:76:db:5c:af:f6:f4:
                    17:a6:9d:84:f0:95:6e:3f:26:8f:51:ef:7c:7a:72:
                    cd:f5:d4:72:19:9d:8c:a8:61:c0:f3:fc:bc:6d:cf:
                    37:69:79:0c:f3:ec:4c:4a:13:87:4d:ec:fb:27:3d:
                    3c:dc:89:da:0b:ba:2b:ca:7e:1e:3a:a5:b0:a0:91:
                    5b:bd:67:b2:31:1f:b9:cb:4f:74:aa:5b:ef:3a:de:
                    0d:51:1c:23:8b:a8:28:0d:5b:89:b4:3a:34:b4:82:
                    cd:6a:d2:b2:08:74:71:9f:76:2c:4a:a3:d3:0c:bc:
                    a4:12:6a:3d:c0:6f:ba:5c:3d:d5:12:7d:2e:c9:e3:
                    e8:2b:a0:f5:96:9b:e2:21:c0:ad:37:e0:ac:13:01:
                    cf:9e:0e:73:54:c4:10:41:89:d4:c9:e9:c0:d2:12:
                    8b:2a:4e:15:15:d9:15:ed:51:bc:e3:06:7a:06:fb:
                    14:1e:8f:64:7b:58:71:f3:57:63:83:ab:e6:d3:71:
                    57:61:b7:0b:75:b3:53:84:de:7b:9a:15:e8:04:3a:
                    33:bb:b2:81:de:e8:d0:fc:ab:a8:fa:2d:5c:6c:49:
                    36:66:72:39:78:17:75:a4:87:43:5d:1b:a9:18:e6:
                    96:5e:68:aa:50:d8:3c:5d:8f:8d:cd:44:0c:f8:fa:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:37:35:A2:66:92:1D:19:89:B1:30:6E:21:93:31:D8:C1:9F:72
            X509v3 Authority Key Identifier:
                keyid:2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/323830363a3365323a3a2f33322d3332203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:47:62:50:98:d3:c3:6b:a5:0f:65:69:73:82:1f:a5:6e:96:
         a4:93:9a:01:03:a9:aa:2b:d3:ad:94:6c:cc:0e:2d:77:28:66:
         fd:c3:69:2e:ac:18:72:e7:be:82:05:f4:56:e5:e2:41:ac:d3:
         58:c4:18:a8:48:dc:62:07:ac:85:81:e7:1a:8f:39:26:ac:d5:
         05:3f:88:68:61:07:be:df:ba:b9:f7:99:99:a6:26:62:92:88:
         2e:1d:e0:f4:fb:64:db:c9:75:9e:c2:3f:25:1d:20:6d:92:dd:
         e6:98:a9:d1:e9:4d:6d:7b:ac:77:54:a1:51:cd:5a:89:19:2b:
         b4:f8:9a:f8:67:42:43:ec:01:08:70:40:69:93:38:57:11:ac:
         14:ad:41:db:78:b8:41:f2:d7:58:c1:2d:e5:04:e4:5a:ae:9e:
         f4:ea:03:1a:56:71:3e:7b:aa:af:e3:b6:92:34:5c:8c:f4:97:
         21:38:61:dc:f3:3e:a7:1d:34:d3:88:26:f8:6c:eb:da:cf:32:
         63:d9:61:e6:3b:00:4c:42:69:2f:60:2a:4c:e6:03:ec:43:57:
         02:fa:6e:44:ae:69:55:75:bf:f3:ca:09:f1:97:9e:2c:a7:be:
         62:52:ad:9e:42:0c:97:0c:57:e8:30:d1:19:43:bb:6c:0f:ad:
         1b:7e:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:35 2026 by rpki-client