Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a34303a3a2f34322d3438203d3e20323733383637.roa
File:                     323830313a3166353a34303a3a2f34322d3438203d3e20323733383637.roa (raw, json)
Hash identifier:          L0sp416JmbYMWAAWhzLCiTgda8yQPb3km2M4euqY1J8=
Subject key identifier:   43:FD:52:7E:2F:B1:DD:95:EA:7B:45:64:1E:D7:93:F4:8A:93:30:21
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       3193F7823AC93E11E9A558F68D2F3E87D2B81DFB
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a34303a3a2f34322d3438203d3e20323733383637.roa
Signing time:             Tue 12 May 2026 07:42:11 +0000
ROA not before:           Tue 12 May 2026 07:37:11 +0000
ROA not after:            Tue 11 May 2027 07:42:11 +0000
asID:                     273867
IP address blocks:        2801:1f5:40::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:93:f7:82:3a:c9:3e:11:e9:a5:58:f6:8d:2f:3e:87:d2:b8:1d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: May 12 07:37:11 2026 GMT
            Not After : May 11 07:42:11 2027 GMT
        Subject: CN=43FD527E2FB1DD95EA7B45641ED793F48A933021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:e1:cc:a6:3d:1e:84:5b:a4:c7:d5:1c:d0:
                    02:e9:99:53:07:ef:df:f2:52:e1:be:42:ce:10:3c:
                    33:2c:18:c3:78:93:e6:8c:80:14:e0:f4:23:fe:7c:
                    9f:a6:87:e0:d4:21:64:3b:e6:08:a8:ad:90:b8:db:
                    18:5c:ac:6e:8b:3d:90:3e:58:7a:b6:92:70:c5:c2:
                    ae:37:d6:f5:3b:5e:28:73:80:4d:40:69:3b:28:ff:
                    27:da:9d:cb:de:cb:73:79:39:d7:32:53:51:6c:20:
                    63:18:e4:c4:fd:ff:ad:4c:87:77:f2:c2:c3:30:2b:
                    99:75:84:fe:d1:e1:bf:09:da:29:fb:5e:90:f1:f2:
                    af:86:4f:a8:88:ea:dc:b8:4f:39:9e:4f:cb:bf:c9:
                    41:68:42:67:2c:de:13:d5:26:4c:8a:ca:46:84:66:
                    7e:2f:fc:93:88:fb:69:cb:bb:0a:f2:4f:47:14:1c:
                    26:64:76:ea:c1:16:6d:5c:e4:c9:63:d6:50:46:6e:
                    c1:8a:23:0a:7e:53:f7:4c:62:a6:4a:bb:ec:3c:f0:
                    32:92:31:0e:d8:f3:55:0f:44:df:44:d7:55:6d:8e:
                    3c:92:a0:db:ae:59:d9:a5:83:4f:94:af:a9:a7:0a:
                    67:09:b0:47:7b:c3:c4:fb:d9:80:7c:6a:96:aa:4b:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:52:7E:2F:B1:DD:95:EA:7B:45:64:1E:D7:93:F4:8A:93:30:21
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a34303a3a2f34322d3438203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f5:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:7c:58:fb:48:d4:86:7e:fe:83:8b:7b:e5:42:b9:13:18:
         0d:56:38:46:4b:3f:c7:5e:3c:0c:25:44:4c:13:04:15:11:0d:
         9f:46:23:8a:08:3f:12:91:fd:c7:3a:54:05:b1:45:f3:ff:1d:
         82:d6:d9:69:de:6d:b5:9d:97:ae:9b:8e:be:b1:89:7c:d2:e6:
         76:b4:f9:fe:32:12:4f:45:ee:7a:5b:52:fc:31:c5:ed:f8:14:
         b7:62:ad:0d:35:49:51:8c:c6:72:91:4f:70:75:61:33:32:e7:
         db:f6:71:17:eb:d4:ba:c4:a1:b9:06:75:8f:b0:f8:7a:c6:25:
         7b:d8:56:0f:93:b0:c9:c0:0c:2a:31:c6:d8:0c:60:fd:81:14:
         1c:d8:cd:57:cb:d2:fa:d1:0e:7a:2d:8c:a4:8c:ae:6d:4c:46:
         38:08:cf:b2:87:3b:47:3e:9f:c1:06:42:6b:4b:52:32:5a:bf:
         54:19:75:97:5b:54:b4:e9:f3:92:4d:e5:52:d1:34:f8:6b:25:
         bd:64:b0:0a:a8:24:ee:a3:74:ef:8c:2b:ec:1a:c0:12:c7:b6:
         94:56:7c:65:b5:0a:7e:ff:95:a7:46:27:85:e2:00:e2:e2:08:
         d0:77:b2:ae:a6:b4:5b:17:b6:d9:5d:75:dc:a0:9e:b5:83:59:
         7b:42:17:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:43 2026 by rpki-client