Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e203138363738.roa
File:                     323830313a3137653a3a2f34342d3438203d3e203138363738.roa (raw, json)
Hash identifier:          hgD0JaqxpKu0IYzkrnTsE3dSQkGvRoBkLN8ik5LLE9I=
Subject key identifier:   16:70:59:6B:33:A9:C3:C4:0A:5D:5B:98:AB:EC:4E:BD:81:30:94:92
Certificate issuer:       /CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5
Certificate serial:       5BD110F603FE7C7F7276FB189EFD23549C7A6F5C
Authority key identifier: 11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e203138363738.roa
Signing time:             Wed 11 Mar 2026 21:10:00 +0000
ROA not before:           Wed 11 Mar 2026 21:05:00 +0000
ROA not after:            Wed 10 Mar 2027 21:10:00 +0000
asID:                     18678
IP address blocks:        2801:17e::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d1:10:f6:03:fe:7c:7f:72:76:fb:18:9e:fd:23:54:9c:7a:6f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5
        Validity
            Not Before: Mar 11 21:05:00 2026 GMT
            Not After : Mar 10 21:10:00 2027 GMT
        Subject: CN=1670596B33A9C3C40A5D5B98ABEC4EBD81309492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:15:64:42:30:59:49:05:b7:5d:c5:3f:bb:
                    13:e3:4d:35:a9:9e:31:da:93:87:5d:9c:9e:d5:32:
                    5c:ef:9e:8c:c9:bc:0d:ba:89:97:77:99:c7:06:fa:
                    8d:77:2b:d8:3c:c5:37:a7:45:ea:5e:39:89:59:71:
                    61:1e:1a:ac:3c:af:fc:bb:50:d6:be:7d:64:27:62:
                    90:38:dd:86:c5:42:78:db:c7:cf:a1:83:46:86:01:
                    a3:33:e2:4e:73:9b:07:5b:1e:77:29:a0:3e:9f:69:
                    55:50:56:0f:cb:82:ea:e7:7a:cb:78:51:dd:04:2d:
                    3e:6a:58:36:95:e8:3a:5f:b2:4c:2b:05:7b:76:8f:
                    16:97:08:d8:7a:88:8f:7d:a1:d6:89:2d:fa:d1:38:
                    d6:1f:c7:05:40:c1:83:71:ec:50:56:cc:c3:95:7b:
                    4e:d3:b7:4a:be:af:e4:89:f2:e6:b4:68:0b:9e:68:
                    8e:99:5e:57:b9:e5:5a:0a:17:27:a6:a0:36:a7:34:
                    17:d3:b9:62:95:5b:fc:36:b9:45:2e:00:5e:b0:0b:
                    e0:9b:29:5d:2e:a8:ce:d2:c0:6f:e4:90:b5:ce:d8:
                    5e:94:a8:4d:a2:43:8e:11:44:d5:42:b6:82:5f:83:
                    80:08:dd:aa:ef:f0:4f:ad:8e:84:22:0d:2d:be:c3:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:70:59:6B:33:A9:C3:C4:0A:5D:5B:98:AB:EC:4E:BD:81:30:94:92
            X509v3 Authority Key Identifier:
                keyid:11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17e::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:66:9b:19:47:89:22:78:35:0b:49:ae:c5:62:1b:01:63:
         35:02:3c:b8:05:b9:9f:05:91:42:ef:84:95:9a:0b:e6:27:61:
         ca:48:8c:32:81:10:94:df:81:7e:5c:9b:25:84:53:cb:c3:c4:
         54:06:23:b0:76:01:e5:d4:68:77:b9:16:ad:aa:e4:17:69:b9:
         03:15:08:88:b3:f3:af:50:43:5e:ad:a2:f7:53:31:c6:9d:ce:
         8b:02:ea:94:7d:a1:7b:f3:06:05:90:05:18:1e:d7:bc:88:cb:
         ec:92:32:c3:44:e0:df:6b:b6:04:36:cd:01:c8:20:a7:61:b0:
         88:b8:93:f5:c4:51:d7:8c:08:54:71:78:8c:77:f9:13:98:d9:
         58:e4:fe:9d:ca:39:8e:c0:28:f9:29:db:fb:a0:f8:b3:b5:d4:
         31:4c:95:a5:68:11:46:de:98:d8:6e:48:a8:e0:e1:1c:fa:31:
         8c:c0:ec:da:a4:9c:d8:63:3d:9d:a6:38:8b:83:fc:e6:f9:12:
         b5:bf:e7:f9:ba:0e:ef:9a:54:eb:dd:d9:58:48:17:03:2a:15:
         60:77:2d:98:a8:3b:3d:a2:2d:53:54:2d:d5:7c:13:d9:8e:f2:
         e3:47:b1:43:4e:c0:4f:24:e5:96:9e:27:65:0b:a6:8a:45:cc:
         d1:b3:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:47:43 2026 by rpki-client