Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3413558B78D5DD79B2D4277C9A08302304AEED8E6376FCD3A16AF74E717AB73D/0/323830313a31613a3430303a3a2f34382d3438203d3e20323734313837.roa
File:                     323830313a31613a3430303a3a2f34382d3438203d3e20323734313837.roa (raw, json)
Hash identifier:          P0h/Pv6p3o77KT2Z6Zt3FkAMQZvoGJ8DJuhDJqiUPPk=
Subject key identifier:   14:F7:70:66:37:FB:50:DE:20:26:F5:B3:61:BE:7E:2A:5B:D0:63:05
Certificate issuer:       /CN=B833E8E6FF482D1CB1A631754B0A49324309AB19
Certificate serial:       0BA38CA5F3F21FC007D23ED1FF7819192A2FE0D1
Authority key identifier: B8:33:E8:E6:FF:48:2D:1C:B1:A6:31:75:4B:0A:49:32:43:09:AB:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B833E8E6FF482D1CB1A631754B0A49324309AB19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3413558B78D5DD79B2D4277C9A08302304AEED8E6376FCD3A16AF74E717AB73D/0/323830313a31613a3430303a3a2f34382d3438203d3e20323734313837.roa
Signing time:             Tue 11 Aug 2026 00:24:59 +0000
ROA not before:           Tue 11 Aug 2026 00:19:59 +0000
ROA not after:            Tue 10 Aug 2027 00:24:59 +0000
asID:                     274187
IP address blocks:        2801:1a:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3413558B78D5DD79B2D4277C9A08302304AEED8E6376FCD3A16AF74E717AB73D/0/B833E8E6FF482D1CB1A631754B0A49324309AB19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3413558B78D5DD79B2D4277C9A08302304AEED8E6376FCD3A16AF74E717AB73D/0/B833E8E6FF482D1CB1A631754B0A49324309AB19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B833E8E6FF482D1CB1A631754B0A49324309AB19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a3:8c:a5:f3:f2:1f:c0:07:d2:3e:d1:ff:78:19:19:2a:2f:e0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B833E8E6FF482D1CB1A631754B0A49324309AB19
        Validity
            Not Before: Aug 11 00:19:59 2026 GMT
            Not After : Aug 10 00:24:59 2027 GMT
        Subject: CN=14F7706637FB50DE2026F5B361BE7E2A5BD06305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:3c:f3:f1:4d:ce:e6:2d:c6:b1:d5:b9:15:
                    d6:c1:a1:07:ea:74:38:d9:d5:f4:ef:ba:46:60:1b:
                    8a:15:44:94:c7:60:d0:5f:15:a0:27:5f:48:05:a2:
                    5a:70:79:ac:2c:f4:17:49:ca:ca:23:32:6f:cd:59:
                    40:79:98:7a:38:31:93:b6:f9:97:60:95:90:00:ac:
                    28:39:1b:a5:cb:f5:03:0c:a8:f3:ee:17:dd:7c:17:
                    c5:a8:9f:16:86:b3:4d:fc:00:b7:62:01:11:08:d5:
                    50:9b:c8:07:83:f2:46:e7:86:fe:b5:0e:2d:2e:8f:
                    0b:0f:3f:d0:be:4b:f4:a8:01:b9:42:74:22:13:e0:
                    5f:cb:ac:4d:78:37:95:64:2a:15:21:04:41:a0:0b:
                    62:39:81:ba:e6:e6:02:7b:c4:f5:d3:be:e1:89:41:
                    d6:1d:d5:99:ed:a9:85:b5:39:56:03:88:13:6e:1b:
                    4c:1e:03:49:75:c6:30:14:a5:75:9b:78:67:34:e4:
                    1e:76:03:7d:7c:bd:de:c9:30:f4:44:f1:ba:1f:d5:
                    7a:d0:f8:31:af:f2:7b:f3:df:13:c9:d3:02:e4:6a:
                    50:3b:17:b4:7b:1c:ad:70:3c:ea:36:0a:a3:ba:97:
                    b3:0d:1e:a8:71:3f:a4:9c:6c:33:67:fb:cc:66:81:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:70:66:37:FB:50:DE:20:26:F5:B3:61:BE:7E:2A:5B:D0:63:05
            X509v3 Authority Key Identifier:
                keyid:B8:33:E8:E6:FF:48:2D:1C:B1:A6:31:75:4B:0A:49:32:43:09:AB:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3413558B78D5DD79B2D4277C9A08302304AEED8E6376FCD3A16AF74E717AB73D/0/B833E8E6FF482D1CB1A631754B0A49324309AB19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B833E8E6FF482D1CB1A631754B0A49324309AB19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3413558B78D5DD79B2D4277C9A08302304AEED8E6376FCD3A16AF74E717AB73D/0/323830313a31613a3430303a3a2f34382d3438203d3e20323734313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:89:a5:1c:6d:41:76:c2:a7:aa:f9:8f:2f:a3:a1:8d:44:13:
         99:58:56:b7:54:d4:b3:48:f2:69:d8:7c:9c:12:5a:26:04:fb:
         0e:67:d3:76:1a:86:9e:68:9b:9f:ee:74:5a:72:cf:68:6e:9e:
         c4:39:fb:9e:33:3a:66:a9:58:65:d2:c4:c1:37:25:1b:ac:6b:
         e5:9d:ca:f6:11:93:8b:9e:42:3f:11:61:b3:27:46:6f:53:a2:
         e6:ef:70:6c:27:d0:b2:34:3d:56:af:ce:b2:f0:5b:64:02:ae:
         06:4e:f2:ac:ae:a1:67:17:cd:92:1d:27:a9:b7:bf:f6:b7:83:
         dd:cc:9d:97:c3:ca:89:30:c8:c0:e9:2d:7e:90:77:70:3f:06:
         ea:4b:ec:ea:6e:66:9b:46:0b:01:56:7c:33:5d:2d:1d:0e:74:
         ce:a9:b8:0c:9d:e2:e1:ea:1a:4b:b4:f4:5a:8a:5a:b5:01:f7:
         05:15:86:df:14:4a:bc:6a:3b:ed:1a:d5:52:ac:da:8a:f5:73:
         04:78:eb:87:d4:f2:8f:6d:48:99:b7:0f:42:f6:cb:5e:6a:86:
         e4:62:12:50:9d:8a:6f:ea:00:2a:6b:d3:01:19:97:aa:81:45:
         ed:4b:f1:a0:28:72:78:7b:82:6a:12:7d:55:fd:74:f6:9e:89:
         f4:4c:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:45:39 2026 by rpki-client