Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a3a2f33322d3438203d3e203238343539.roa
File:                     323030313a313230373a3a2f33322d3438203d3e203238343539.roa (raw, json)
Hash identifier:          8YUIqFPYN19k7Fk0PaC/4GrnjOarwt46yvE2gI236Qw=
Subject key identifier:   40:91:71:81:40:78:BD:8E:BD:2C:BE:43:9E:C6:98:4B:69:EE:31:5A
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       459E9415AE113FCF960F1489182ECAFB8EF51D29
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a3a2f33322d3438203d3e203238343539.roa
Signing time:             Wed 22 Apr 2026 21:00:00 +0000
ROA not before:           Wed 22 Apr 2026 20:55:00 +0000
ROA not after:            Wed 21 Apr 2027 21:00:00 +0000
asID:                     28459
IP address blocks:        2001:1207::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9e:94:15:ae:11:3f:cf:96:0f:14:89:18:2e:ca:fb:8e:f5:1d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: Apr 22 20:55:00 2026 GMT
            Not After : Apr 21 21:00:00 2027 GMT
        Subject: CN=409171814078BD8EBD2CBE439EC6984B69EE315A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:84:69:c7:23:cc:9c:d1:11:ec:43:5f:c2:
                    7d:c5:1a:65:19:d0:78:2c:2d:c6:cb:9c:16:15:82:
                    27:e9:5d:a4:f1:a0:ea:59:d4:b7:7c:86:37:1a:2b:
                    b5:df:ca:01:c5:ee:b7:2a:49:e5:89:b5:d8:6d:bc:
                    24:38:e8:41:53:56:9f:29:ab:ae:a6:8b:54:76:90:
                    b5:60:94:5d:7e:6c:56:33:73:f7:bc:e2:47:c8:99:
                    47:dd:a8:86:97:c8:d3:35:52:91:d1:3c:71:c3:e9:
                    7b:e7:d4:6b:cb:c2:b8:a5:b3:d6:af:bd:ba:31:87:
                    5e:d6:7f:a1:49:13:0d:6e:93:b5:b1:5b:2d:89:47:
                    e5:6a:71:5f:d4:0d:51:40:46:6b:df:7e:ef:81:06:
                    70:09:0b:52:f5:a7:05:d1:37:2f:f0:f4:20:14:a4:
                    ee:82:69:9d:eb:c0:16:92:43:b1:ce:95:09:89:92:
                    8f:1d:b5:e2:d1:41:08:95:b9:0f:56:65:c7:6b:bc:
                    7a:1b:79:34:dd:49:62:36:8c:a2:ac:27:f2:21:87:
                    2a:e4:5e:88:37:25:0f:f9:0b:38:0d:e6:0f:0d:12:
                    ff:93:7c:ab:6c:06:1a:e2:f4:c5:fd:a5:d6:7f:27:
                    32:bc:5a:b6:0e:40:4e:cb:8e:66:3d:36:ca:b4:bd:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:91:71:81:40:78:BD:8E:BD:2C:BE:43:9E:C6:98:4B:69:EE:31:5A
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a3a2f33322d3438203d3e203238343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1207::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:3a:6e:eb:40:4c:06:db:4b:4f:38:99:f2:16:ad:aa:6f:02:
         f8:ca:ce:75:61:e2:60:80:80:30:09:fc:57:27:5b:27:b3:ee:
         f6:2f:1a:ca:e1:3c:d8:41:0c:2e:df:4b:76:96:6f:b6:18:5b:
         b6:42:81:93:18:64:1f:31:49:50:df:9d:ae:04:08:57:60:33:
         f0:00:0d:f6:31:e2:e7:a3:0d:cc:f6:8e:d2:4e:8d:8e:fd:b0:
         47:b3:6c:ae:63:1c:2b:3b:a1:b1:1a:20:4f:1b:37:81:77:4a:
         f8:cc:63:07:55:6f:11:10:03:10:4e:05:37:f6:dd:7a:5a:00:
         56:23:f8:08:d3:d7:5d:2c:94:75:65:23:dc:a7:1b:77:a0:2f:
         5c:45:ce:82:00:df:c2:b4:15:0a:42:46:c9:b8:1f:01:c2:b2:
         a9:7b:aa:87:12:07:4b:d9:30:fa:15:ec:21:04:72:0c:a9:d9:
         6d:fc:ce:8f:f5:35:48:1e:36:64:f6:ef:77:ec:f9:53:f4:ad:
         fd:ac:67:94:d8:26:20:32:2d:0e:e0:df:10:a2:cf:1d:b8:f4:
         b0:e9:99:4a:60:c5:40:2f:40:cf:36:a2:ed:da:e3:10:9b:f1:
         9c:ee:a6:3d:bb:ac:b7:d5:64:44:fd:de:5a:02:c8:84:5c:5a:
         3a:6f:fe:94
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURZ6UFa4RP8+WDxSJGC7K+471HSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGMzNDMkZFQTU4MjQ5RTgzQjg5NDdGN0M2REVENTM4
QjkxQjE4QjAeFw0yNjA0MjIyMDU1MDBaFw0yNzA0MjEyMTAwMDBaMDMxMTAvBgNV
BAMTKDQwOTE3MTgxNDA3OEJEOEVCRDJDQkU0MzlFQzY5ODRCNjlFRTMxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/oRpxyPMnNER7ENfwn3FGmUZ
0HgsLcbLnBYVgifpXaTxoOpZ1Ld8hjcaK7XfygHF7rcqSeWJtdhtvCQ46EFTVp8p
q66mi1R2kLVglF1+bFYzc/e84kfImUfdqIaXyNM1UpHRPHHD6Xvn1GvLwrils9av
vboxh17Wf6FJEw1uk7WxWy2JR+VqcV/UDVFARmvffu+BBnAJC1L1pwXRNy/w9CAU
pO6CaZ3rwBaSQ7HOlQmJko8dteLRQQiVuQ9WZcdrvHobeTTdSWI2jKKsJ/Ihhyrk
Xog3JQ/5CzgN5g8NEv+TfKtsBhri9MX9pdZ/JzK8WrYOQE7LjmY9Nsq0vajhAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUQJFxgUB4vY69LL5DnsaYS2nuMVowHwYDVR0j
BBgwFoAUiPM8L+pYJJ6DuJR/fG3tU4uRsYswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzM1NUVDRDZBQzFCMEE5QUFDNTJBNTZBRDBBRjM0QjQ1
MzZDMkFDN0ZBRDUyNUMwMkVGMjMwMzQxQkMwNkFFLzAvODhGMzNDMkZFQTU4MjQ5
RTgzQjg5NDdGN0M2REVENTM4QjkxQjE4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OEYzM0MyRkVBNTgyNDlFODNC
ODk0N0Y3QzZERUQ1MzhCOTFCMThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMzNTVFQ0Q2QUMxQjBBOUFBQzUyQTU2QUQwQUYzNEI0NTM2QzJBQzdG
QUQ1MjVDMDJFRjIzMDM0MUJDMDZBRS8wLzMyMzAzMDMxM2EzMTMyMzAzNzNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARIHMA0G
CSqGSIb3DQEBCwUAA4IBAQCWOm7rQEwG20tPOJnyFq2qbwL4ys51YeJggIAwCfxX
J1sns+72LxrK4TzYQQwu30t2lm+2GFu2QoGTGGQfMUlQ352uBAhXYDPwAA32MeLn
ow3M9o7STo2O/bBHs2yuYxwrO6GxGiBPGzeBd0r4zGMHVW8REAMQTgU39t16WgBW
I/gI09ddLJR1ZSPcpxt3oC9cRc6CAN/CtBUKQkbJuB8BwrKpe6qHEgdL2TD6Fewh
BHIMqdlt/M6P9TVIHjZk9u937PlT9K39rGeU2CYgMi0O4N8Qos8duPSw6ZlKYMVA
L0DPNqLt2uMQm/Gc7qY9u6y31WRE/d5aAsiEXFo6b/6U
-----END CERTIFICATE-----
Generated at Tue Apr 28 23:10:19 2026 by rpki-client