Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31663a383830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          O9L49KJe+GawPk3B4mpadYVtyLap02DpAilhbIoUD54=
Subject key identifier:   36:89:F2:85:DB:AE:B0:A9:5F:E7:FE:86:AF:C9:35:EC:DF:A0:A6:68
Certificate issuer:       /CN=45B324200857FB48FC4E02A138D79C676A6968B2
Certificate serial:       6CF03077BC3D7197F00C20E5C55940939D87187B
Authority key identifier: 45:B3:24:20:08:57:FB:48:FC:4E:02:A1:38:D7:9C:67:6A:69:68:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45B324200857FB48FC4E02A138D79C676A6968B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Wed 04 Mar 2026 18:50:00 +0000
ROA not before:           Wed 04 Mar 2026 18:45:00 +0000
ROA not after:            Wed 03 Mar 2027 18:50:00 +0000
asID:                     27951
IP address blocks:        2801:1f:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/45B324200857FB48FC4E02A138D79C676A6968B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/45B324200857FB48FC4E02A138D79C676A6968B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45B324200857FB48FC4E02A138D79C676A6968B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Mar 2026 16:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f0:30:77:bc:3d:71:97:f0:0c:20:e5:c5:59:40:93:9d:87:18:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45B324200857FB48FC4E02A138D79C676A6968B2
        Validity
            Not Before: Mar  4 18:45:00 2026 GMT
            Not After : Mar  3 18:50:00 2027 GMT
        Subject: CN=3689F285DBAEB0A95FE7FE86AFC935ECDFA0A668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:09:c1:9a:2d:14:9e:36:9e:34:c5:9d:d1:b9:
                    99:c8:c4:d1:76:2e:25:01:aa:f1:dc:7e:31:62:1e:
                    e4:09:4e:56:68:e6:06:97:8e:9a:be:b6:41:2b:49:
                    06:a0:c6:34:0f:97:4c:a5:e5:ff:df:9c:9c:ed:a7:
                    ef:b5:a2:09:92:64:06:0e:c2:12:a3:e1:ab:1d:d4:
                    74:de:d5:0f:37:13:1b:9e:1d:68:63:15:b7:0b:af:
                    55:9f:9d:b5:7f:f8:14:34:5a:05:87:62:17:e7:a1:
                    ab:57:f2:c8:f1:bc:d1:00:9a:6b:3c:34:f8:6c:b3:
                    91:82:5d:a7:b6:90:4d:8b:cc:78:62:80:2d:21:69:
                    e4:54:65:ff:9e:2e:56:ad:33:f0:af:50:a6:17:bd:
                    4c:80:d0:2d:c3:b9:9e:c6:7e:cf:b1:83:85:c6:60:
                    b9:7b:80:9e:98:f3:a8:a9:9e:c6:ab:f1:4b:e2:55:
                    27:ba:0f:eb:3e:5e:cf:da:4c:76:2d:c4:a2:4e:39:
                    ab:1b:8c:a9:45:3b:70:cd:77:30:4f:e5:6d:cd:c8:
                    bc:89:ec:5e:9c:4d:d6:ae:03:de:22:3a:ea:fb:5e:
                    83:c0:79:58:07:66:cc:c5:b5:e6:45:1e:8c:3b:e8:
                    e1:a4:40:14:fe:44:77:ce:4f:cf:e9:ea:61:ee:d9:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:89:F2:85:DB:AE:B0:A9:5F:E7:FE:86:AF:C9:35:EC:DF:A0:A6:68
            X509v3 Authority Key Identifier:
                keyid:45:B3:24:20:08:57:FB:48:FC:4E:02:A1:38:D7:9C:67:6A:69:68:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/45B324200857FB48FC4E02A138D79C676A6968B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45B324200857FB48FC4E02A138D79C676A6968B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:28:75:f2:e1:f3:ef:a1:d2:21:fa:ad:40:95:f8:fe:66:
         39:92:7d:74:0d:b4:f8:54:d5:16:91:ae:ba:9f:71:d8:95:be:
         f1:2d:5b:c7:05:ad:42:c7:b3:6f:38:a9:48:3f:43:70:07:fc:
         d4:8e:b2:c8:b0:9e:3e:ca:7d:ec:df:3b:a6:21:be:8b:68:32:
         91:f8:48:71:7c:e2:88:f6:0b:42:e1:04:08:f6:f1:ae:7f:cf:
         97:92:e5:b5:ee:25:87:f4:51:00:d7:1e:b5:9b:26:27:2a:38:
         f1:63:fd:56:1f:af:48:74:9e:7c:80:51:a6:ea:dd:2f:77:e2:
         a9:21:90:fc:5b:9b:45:a6:f1:82:d7:6e:2b:88:b8:e9:07:30:
         e1:d8:77:29:66:82:11:f9:82:b8:1a:9f:e7:12:79:09:ad:ce:
         e5:26:2c:2a:37:ba:3c:ae:14:c2:41:f5:3a:24:4a:e7:9d:20:
         ea:2c:db:48:25:c1:49:ea:c0:3b:12:9f:1c:da:b2:bd:23:0f:
         8c:42:0d:9c:9f:7e:ba:79:e8:1d:d9:0a:ab:d9:5d:91:35:7f:
         d3:ae:87:90:dd:99:86:2e:c5:02:e5:26:a5:8f:2d:88:cc:83:
         a2:c5:de:1a:f0:96:1f:d7:53:46:a9:5b:89:08:09:4f:3d:62:
         85:ec:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:21:46 2026 by rpki-client