Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a31343a3a2f34382d3438203d3e203237363738.roa
File:                     323030313a313339383a31343a3a2f34382d3438203d3e203237363738.roa (raw, json)
Hash identifier:          n0VVzO8n6zK23UmECEwgBGp11OSUxqU5AdPxTBrtBXA=
Subject key identifier:   D8:08:78:7E:C0:8A:0E:B1:E6:04:E3:F5:5C:35:D6:43:A1:EF:AB:89
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       16161AB6917F0576ABF1201A6525F41B709C7E01
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a31343a3a2f34382d3438203d3e203237363738.roa
Signing time:             Mon 10 Aug 2026 17:24:53 +0000
ROA not before:           Mon 10 Aug 2026 17:19:53 +0000
ROA not after:            Mon 09 Aug 2027 17:24:53 +0000
asID:                     27678
IP address blocks:        2001:1398:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:16:1a:b6:91:7f:05:76:ab:f1:20:1a:65:25:f4:1b:70:9c:7e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Aug 10 17:19:53 2026 GMT
            Not After : Aug  9 17:24:53 2027 GMT
        Subject: CN=D808787EC08A0EB1E604E3F55C35D643A1EFAB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:55:64:9e:95:2e:7f:a7:c8:03:fc:f8:b5:
                    a0:a8:9c:b4:33:85:08:c4:07:14:ba:9a:ad:fc:10:
                    bf:ff:2e:02:c6:35:ac:72:e6:38:a3:7e:c9:86:bf:
                    79:cb:04:d6:04:c3:49:79:0b:f9:1b:39:04:17:e3:
                    bd:7f:55:94:d6:f3:b0:ea:87:90:d2:5a:5e:b5:52:
                    7c:01:56:12:3e:f9:30:2e:2c:3a:f5:05:cb:bd:83:
                    4a:c5:86:1a:3f:2f:7a:38:b8:f4:78:90:e3:95:7e:
                    fe:71:34:28:b1:1f:08:49:32:d5:34:48:4e:ab:9b:
                    14:0e:ea:34:1c:84:2b:a1:99:14:05:5d:b9:6c:d4:
                    29:63:ad:50:1f:f6:b0:a4:92:14:fb:90:04:bc:7e:
                    ad:cf:0c:4d:fc:41:26:48:d4:1f:a4:12:84:3b:39:
                    da:56:06:90:01:c9:85:e2:06:68:42:4e:d5:c5:32:
                    9b:83:19:3f:6d:63:f4:be:9a:c6:13:51:d7:ad:b6:
                    a5:62:9a:f2:1f:1f:b2:37:a8:98:56:07:4f:1c:a2:
                    89:19:00:c4:f2:26:6f:3f:e8:18:79:a6:d7:34:ad:
                    28:ef:2a:59:da:11:72:ae:dd:62:4f:af:6e:14:96:
                    a5:43:2f:51:6c:d7:b2:be:ff:b7:21:1f:e5:fa:4a:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:78:7E:C0:8A:0E:B1:E6:04:E3:F5:5C:35:D6:43:A1:EF:AB:89
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a31343a3a2f34382d3438203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:87:91:2d:24:d3:08:ee:26:bd:df:43:c7:23:bd:6f:1c:
         b5:f5:87:95:e4:c8:4f:1e:dd:bc:6f:92:26:ad:86:1e:90:7c:
         ef:fa:ae:11:08:1c:d1:80:2b:26:bf:41:66:0f:13:7c:b1:6e:
         89:7e:2e:bb:12:45:6d:39:ce:33:56:e6:2c:52:f0:eb:b1:69:
         3a:4d:36:ee:ca:c0:0f:3b:a7:8b:a9:0a:d7:62:bd:87:1b:3b:
         ae:ff:3c:73:50:dd:bd:d7:42:52:e4:0b:ab:30:e1:ee:b7:9e:
         4b:d0:86:2a:35:f1:c6:d1:81:d5:b3:be:4d:f3:c0:6e:c9:08:
         3a:c0:eb:4d:70:68:42:78:84:23:22:52:f5:05:31:a4:86:9f:
         70:a5:d5:2d:a3:88:c3:ed:43:dd:0e:0f:ef:66:56:cd:98:ab:
         26:02:51:e7:61:b5:56:2d:d8:ec:01:cd:9a:64:7a:f7:88:c9:
         49:36:bc:95:3c:e6:ab:05:49:aa:2b:eb:ec:6a:d4:d3:6b:eb:
         c5:11:69:2b:3f:16:2d:99:40:1e:9a:27:85:80:ae:50:c2:0e:
         c3:39:0b:3d:76:c7:ce:54:d4:01:d5:51:8c:6a:68:68:a6:73:
         31:d1:8e:1d:07:3c:4d:ab:fb:24:64:da:10:d2:31:01:96:a4:
         3b:9f:12:68
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUFhYatpF/BXar8SAaZSX0G3CcfgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RkMyNjQ2QTlGQzg5MjlCNjk0QUFBRTA0RDUyMDIz
QUE0NjgwQzAeFw0yNjA4MTAxNzE5NTNaFw0yNzA4MDkxNzI0NTNaMDMxMTAvBgNV
BAMTKEQ4MDg3ODdFQzA4QTBFQjFFNjA0RTNGNTVDMzVENjQzQTFFRkFCODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWj1VknpUuf6fIA/z4taConLQz
hQjEBxS6mq38EL//LgLGNaxy5jijfsmGv3nLBNYEw0l5C/kbOQQX471/VZTW87Dq
h5DSWl61UnwBVhI++TAuLDr1Bcu9g0rFhho/L3o4uPR4kOOVfv5xNCixHwhJMtU0
SE6rmxQO6jQchCuhmRQFXbls1CljrVAf9rCkkhT7kAS8fq3PDE38QSZI1B+kEoQ7
OdpWBpAByYXiBmhCTtXFMpuDGT9tY/S+msYTUdettqVimvIfH7I3qJhWB08cookZ
AMTyJm8/6Bh5ptc0rSjvKlnaEXKu3WJPr24UlqVDL1Fs17K+/7chH+X6SimdAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU2Ah4fsCKDrHmBOP1XDXWQ6Hvq4kwHwYDVR0j
BBgwFoAU41/CZGqfyJKbaUqq4E1SAjqkaAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDBFMDU0NjIzQUM5MDQzQzBFMjk5QzJDOTBCMTQzODAz
QkQ4OTEyNUIwRTg2Mzg1NUM0OUMzQjczRjdCQUExLzAvRTM1RkMyNjQ2QTlGQzg5
MjlCNjk0QUFBRTA0RDUyMDIzQUE0NjgwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVGQzI2NDZBOUZDODkyOUI2
OTRBQUFFMDRENTIwMjNBQTQ2ODBDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QwRTA1NDYyM0FDOTA0M0MwRTI5OUMyQzkwQjE0MzgwM0JEODkxMjVC
MEU4NjM4NTVDNDlDM0I3M0Y3QkFBMS8wLzMyMzAzMDMxM2EzMTMzMzkzODNhMzEz
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAg
AROYABQwDQYJKoZIhvcNAQELBQADggEBAHXDh5EtJNMI7ia930PHI71vHLX1h5Xk
yE8e3bxvkiathh6QfO/6rhEIHNGAKya/QWYPE3yxbol+LrsSRW05zjNW5ixS8Oux
aTpNNu7KwA87p4upCtdivYcbO67/PHNQ3b3XQlLkC6sw4e63nkvQhio18cbRgdWz
vk3zwG7JCDrA601waEJ4hCMiUvUFMaSGn3Cl1S2jiMPtQ90OD+9mVs2YqyYCUedh
tVYt2OwBzZpkeveIyUk2vJU85qsFSaor6+xq1NNr68URaSs/Fi2ZQB6aJ4WArlDC
DsM5Cz12x85U1AHVUYxqaGimczHRjh0HPE2r+yRk2hDSMQGWpDufEmg=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:32:17 2026 by rpki-client