Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1F5167A94AD73FCEB15C540F2A595FA0E6F671EAB4E5A0AB54C317278A1D8D2/0/323830363a3362333a3a2f33322d3332203d3e20323730313132.roa
File:                     323830363a3362333a3a2f33322d3332203d3e20323730313132.roa (raw, json)
Hash identifier:          f2Lls0i4Ffo4ZKO07PQciDHxZGSBUCXuku68tbSa0M4=
Subject key identifier:   4F:BD:F5:F2:5B:A8:F6:E7:A9:41:E7:6E:68:80:53:AE:C1:EA:A0:BF
Certificate issuer:       /CN=50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B
Certificate serial:       61B9A211878802C8E83C52156A24EAC7AF10FB1D
Authority key identifier: 50:C7:E8:E5:EC:7D:81:E5:74:FC:6B:09:E7:AB:88:8C:AF:A1:4C:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1F5167A94AD73FCEB15C540F2A595FA0E6F671EAB4E5A0AB54C317278A1D8D2/0/323830363a3362333a3a2f33322d3332203d3e20323730313132.roa
Signing time:             Mon 20 Apr 2026 22:40:00 +0000
ROA not before:           Mon 20 Apr 2026 22:35:00 +0000
ROA not after:            Mon 19 Apr 2027 22:40:00 +0000
asID:                     270112
IP address blocks:        2806:3b3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1F5167A94AD73FCEB15C540F2A595FA0E6F671EAB4E5A0AB54C317278A1D8D2/0/50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1F5167A94AD73FCEB15C540F2A595FA0E6F671EAB4E5A0AB54C317278A1D8D2/0/50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b9:a2:11:87:88:02:c8:e8:3c:52:15:6a:24:ea:c7:af:10:fb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B
        Validity
            Not Before: Apr 20 22:35:00 2026 GMT
            Not After : Apr 19 22:40:00 2027 GMT
        Subject: CN=4FBDF5F25BA8F6E7A941E76E688053AEC1EAA0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:cf:d6:e8:77:45:b8:ec:04:b9:da:75:7d:
                    05:4b:dd:e6:d0:34:52:c9:f1:7a:87:4a:f3:6a:f9:
                    44:e1:e8:c2:8e:3f:5b:d9:45:55:39:75:34:57:c2:
                    b6:73:9c:a4:6d:5f:89:72:9d:16:ac:ad:c2:0f:b1:
                    10:fb:d5:9c:e4:38:b5:96:fd:e4:85:07:8c:a2:66:
                    bd:87:0a:68:0c:44:e9:52:b6:df:a8:66:32:34:42:
                    8d:3b:ac:62:f5:82:ca:8f:97:02:08:cb:83:72:98:
                    72:44:2a:d8:a4:67:27:fc:cb:29:04:fe:3f:44:14:
                    fa:c2:7e:97:99:38:09:8d:f4:cb:30:a6:d6:35:e9:
                    ee:db:f5:31:26:a7:7f:9b:1e:d6:b9:53:31:5f:4b:
                    09:96:c9:c0:19:33:c5:1e:99:fb:84:09:d2:6b:46:
                    28:20:d8:dd:e9:8b:ac:6a:3e:4a:c4:8f:43:b7:b8:
                    6d:d8:da:50:db:44:ee:fa:de:44:da:a8:c7:d2:81:
                    af:e2:4e:1f:70:6d:c9:fc:30:ed:37:d2:c0:e2:9e:
                    bc:72:4f:b4:9c:72:4d:4f:cb:36:8c:be:5a:f9:22:
                    1d:b5:7e:75:80:51:df:d2:1e:6a:70:4e:9a:e1:aa:
                    ad:e0:f8:0e:24:1c:31:5d:94:6c:e5:49:a9:a3:00:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BD:F5:F2:5B:A8:F6:E7:A9:41:E7:6E:68:80:53:AE:C1:EA:A0:BF
            X509v3 Authority Key Identifier:
                keyid:50:C7:E8:E5:EC:7D:81:E5:74:FC:6B:09:E7:AB:88:8C:AF:A1:4C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1F5167A94AD73FCEB15C540F2A595FA0E6F671EAB4E5A0AB54C317278A1D8D2/0/50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50C7E8E5EC7D81E574FC6B09E7AB888CAFA14C4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1F5167A94AD73FCEB15C540F2A595FA0E6F671EAB4E5A0AB54C317278A1D8D2/0/323830363a3362333a3a2f33322d3332203d3e20323730313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b3::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:62:df:4f:23:77:66:fa:24:88:2a:51:3f:93:73:3f:66:
         19:40:47:40:aa:08:35:70:99:5f:40:c0:88:0b:d1:1f:f0:a8:
         91:e9:9e:5b:bb:14:30:7a:e7:cd:f6:71:65:df:32:12:11:c8:
         80:12:b1:d7:01:47:d2:77:5c:1d:3a:0d:22:ae:a7:af:8c:8e:
         af:be:52:5c:20:2c:84:18:d5:e2:c0:4d:0d:7a:1d:2e:a6:d2:
         41:6c:ca:1d:10:79:47:eb:80:e0:7d:3c:a9:88:7c:53:16:e2:
         29:9e:9f:f6:71:92:d1:ba:16:f6:7d:b9:a4:b2:76:97:5a:5a:
         1f:2b:5d:db:e8:9e:e6:d2:40:d9:26:55:3d:6e:59:57:43:3a:
         fc:12:a3:fd:95:3c:24:95:99:1c:d1:34:b4:ea:9f:ba:7f:4b:
         83:32:37:4b:9f:03:35:9c:3c:77:d4:f1:67:fd:ce:a8:cb:05:
         3d:7d:d0:af:9c:40:11:f7:aa:72:83:f9:c6:38:42:4c:2f:b1:
         e7:85:40:be:7b:49:51:a7:d5:92:ff:57:87:8d:6d:ba:84:90:
         83:48:8a:2d:94:50:0e:22:01:55:0f:54:9e:ee:39:32:30:7b:
         c1:3c:65:d7:ac:7b:4d:a5:4e:66:70:3d:ca:7c:f9:29:f5:4b:
         6b:fe:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:24:42 2026 by rpki-client