Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/008106BF9F233EFAA4766DA67464EBF1143A85E3FABB9D710A3245E3F2C61758/0/323830313a31643a653030303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31643a653030303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          VybVRLG6DkM1EuAMHGMO6foq1tO9ZtUgeh/quEuUbRI=
Subject key identifier:   A5:CF:54:44:0E:9F:3F:03:27:F9:EA:2F:96:C0:4E:8D:B0:4B:6A:CC
Certificate issuer:       /CN=46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3
Certificate serial:       4C728FA39B3973E10321BC80E0AC332BB992E4A3
Authority key identifier: 46:AB:DB:71:38:7A:3C:DB:B3:3A:4C:BA:F9:5B:AC:53:66:32:0C:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/008106BF9F233EFAA4766DA67464EBF1143A85E3FABB9D710A3245E3F2C61758/0/323830313a31643a653030303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Wed 03 Sep 2025 13:25:08 +0000
ROA not before:           Wed 03 Sep 2025 13:20:08 +0000
ROA not after:            Wed 02 Sep 2026 13:25:08 +0000
asID:                     27951
IP address blocks:        2801:1d:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/008106BF9F233EFAA4766DA67464EBF1143A85E3FABB9D710A3245E3F2C61758/0/46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/008106BF9F233EFAA4766DA67464EBF1143A85E3FABB9D710A3245E3F2C61758/0/46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 14:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:72:8f:a3:9b:39:73:e1:03:21:bc:80:e0:ac:33:2b:b9:92:e4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3
        Validity
            Not Before: Sep  3 13:20:08 2025 GMT
            Not After : Sep  2 13:25:08 2026 GMT
        Subject: CN=A5CF54440E9F3F0327F9EA2F96C04E8DB04B6ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:b5:0a:35:db:cd:e0:51:b5:3f:33:e7:c8:
                    5e:0d:67:fc:bd:4c:05:ce:ab:4a:26:85:19:c5:b3:
                    48:e7:54:25:f3:7d:26:12:a5:4a:a7:50:8a:42:e9:
                    ca:47:5c:78:67:94:63:4a:62:ac:5c:6e:e7:eb:5c:
                    e6:b7:d9:53:9f:94:a6:03:a8:88:d1:b7:88:c5:f5:
                    bb:60:00:5a:08:f9:ee:95:47:b5:30:3d:c5:a2:2d:
                    dd:49:75:35:a8:82:51:47:40:1a:fb:69:1e:3e:35:
                    ad:d5:5f:54:02:3c:c4:4e:50:0b:5f:44:6a:8a:d1:
                    37:67:28:28:54:67:4c:31:04:0b:df:5c:db:d9:7c:
                    91:6d:56:00:e0:65:19:3d:bb:67:8f:98:7f:b1:52:
                    2b:a4:56:83:f4:15:85:b8:96:80:00:26:de:94:b2:
                    fe:fb:81:7b:ef:cd:4c:2b:84:c7:15:03:e2:ba:1f:
                    53:66:07:42:51:cd:96:69:bc:48:8d:d7:da:f9:d4:
                    bc:39:0e:4f:0a:c7:44:ca:12:73:ed:9a:d5:25:61:
                    07:ce:24:3b:07:a3:9a:6f:e5:40:bf:ca:61:2d:ee:
                    cc:3c:ff:04:bc:f4:50:de:f6:fe:d9:d4:7e:52:6d:
                    84:6e:5f:ae:4b:3f:aa:8f:3d:c6:e1:2b:e3:05:50:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CF:54:44:0E:9F:3F:03:27:F9:EA:2F:96:C0:4E:8D:B0:4B:6A:CC
            X509v3 Authority Key Identifier:
                keyid:46:AB:DB:71:38:7A:3C:DB:B3:3A:4C:BA:F9:5B:AC:53:66:32:0C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/008106BF9F233EFAA4766DA67464EBF1143A85E3FABB9D710A3245E3F2C61758/0/46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46ABDB71387A3CDBB33A4CBAF95BAC5366320CE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/008106BF9F233EFAA4766DA67464EBF1143A85E3FABB9D710A3245E3F2C61758/0/323830313a31643a653030303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:05:21:96:7c:e5:46:2e:2a:b6:d7:cf:bb:42:fb:f2:1a:af:
         ef:7b:0e:8d:2e:be:10:11:ed:8a:92:11:c5:1f:db:6f:e8:8a:
         7e:2c:79:c4:db:6e:12:ee:6f:e3:b3:ec:c4:fc:09:27:81:78:
         90:61:b0:37:8f:f9:be:2d:6c:ad:2d:44:ec:08:f7:e4:4d:0f:
         09:d8:04:35:b9:a5:a5:cc:75:3b:f4:90:64:0a:dc:09:98:b0:
         69:6a:de:51:e8:44:4d:c0:d7:c0:40:42:3e:2e:4d:ac:82:7d:
         29:62:58:0a:47:1a:f5:3b:e8:93:c5:2f:39:8f:d9:a0:8f:3c:
         b6:62:41:cd:37:03:94:df:d0:1e:b4:19:00:44:d3:cf:16:72:
         7e:14:3f:0e:8c:32:ee:72:8c:f6:25:68:8c:f9:fa:f8:83:00:
         49:b9:22:0b:55:48:24:15:88:98:8d:77:d7:0b:d5:ac:7d:42:
         2d:ee:b3:e1:42:ee:6a:0d:05:71:69:f8:67:1c:31:51:db:f9:
         7e:ab:60:a7:2c:a8:ae:75:bd:fb:c8:8d:88:7e:3c:cf:b5:4a:
         ec:b9:b3:1b:da:ad:c7:d4:e0:c2:ab:60:7d:bc:88:9d:a4:21:
         2e:7c:46:b1:64:27:08:97:d5:21:68:04:82:3c:df:14:3c:bf:
         00:a3:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 06:10:37 2025 by rpki-client