Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31333a323830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          7Ii/n0Wix6Zqak6Q/U1A56Cz+tHnXu1gP0IO47DgmfQ=
Subject key identifier:   46:51:03:09:BD:C6:62:04:26:90:93:9A:25:B0:FB:1E:1B:8A:96:6D
Certificate issuer:       /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial:       13F8B982BFDBA745D778AE747C36DB4C6DF3B016
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 19 May 2026 16:05:00 +0000
ROA not before:           Tue 19 May 2026 16:00:00 +0000
ROA not after:            Tue 18 May 2027 16:05:00 +0000
asID:                     27951
IP address blocks:        2801:13:2800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 May 2026 02:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f8:b9:82:bf:db:a7:45:d7:78:ae:74:7c:36:db:4c:6d:f3:b0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
        Validity
            Not Before: May 19 16:00:00 2026 GMT
            Not After : May 18 16:05:00 2027 GMT
        Subject: CN=46510309BDC662042690939A25B0FB1E1B8A966D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:0d:99:7b:39:a3:d1:52:81:2b:0d:70:d3:
                    1c:4a:3d:25:bf:96:46:67:91:58:95:15:38:02:68:
                    bb:bf:06:62:70:37:f7:d5:d7:a3:f3:ab:9c:65:4c:
                    8e:cc:24:a0:b2:7f:90:2f:63:1a:a6:7d:45:67:8d:
                    d0:f0:11:05:5e:8c:e2:02:f9:b5:19:e2:13:33:7c:
                    ff:ec:70:39:0a:73:bb:99:fa:0a:8e:50:bb:3b:36:
                    95:73:3e:4e:5e:41:37:27:94:8d:d9:d2:0d:88:71:
                    b7:fb:76:36:5c:a4:92:fa:ab:1b:59:b1:4c:0c:ec:
                    40:7b:1e:22:22:1b:7c:ea:7f:59:57:1c:47:7f:4e:
                    65:12:7f:bb:61:be:b6:d8:e1:a3:2b:71:ef:8d:05:
                    97:14:a4:0c:7d:47:67:60:c4:ce:a6:59:be:fb:80:
                    76:42:12:5c:d1:9a:31:cf:3d:e8:66:19:ef:5f:55:
                    91:50:78:2e:aa:a5:eb:b0:f8:f8:e0:f7:9e:93:73:
                    1e:7e:12:20:0d:9d:4c:d3:aa:53:c9:64:00:e4:57:
                    5e:28:e8:f7:7a:89:db:0c:34:b6:ad:a2:e9:f3:e0:
                    5b:d4:e0:f0:4e:0d:7a:09:b7:f2:f9:d5:3c:52:8b:
                    92:d4:74:1e:57:ae:b0:21:06:5b:a7:39:79:40:03:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:03:09:BD:C6:62:04:26:90:93:9A:25:B0:FB:1E:1B:8A:96:6D
            X509v3 Authority Key Identifier:
                keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:1c:b1:3f:08:fd:d6:10:17:3c:8b:73:e2:8a:5c:46:35:48:
         f6:40:b6:e6:29:7e:0f:95:6f:4c:29:9c:63:54:0f:01:cd:3c:
         12:15:04:36:f0:0c:da:52:11:51:05:9f:70:a4:00:51:b7:d9:
         ab:a0:f8:29:dd:ff:42:e4:22:f0:f7:55:bf:00:40:44:08:93:
         1a:ae:5f:6a:64:a1:4b:78:ca:f8:1a:72:81:70:d5:c9:31:c1:
         e1:97:4d:ce:d4:18:22:ed:7d:8f:81:fe:96:43:2f:d5:fc:45:
         fc:dc:69:72:89:c9:e8:ae:69:2e:c0:48:f8:58:5a:23:f2:b4:
         5f:bc:b9:63:6a:36:f2:d1:e3:e6:81:3d:f1:58:63:7d:11:5b:
         d4:0a:87:f3:70:df:7c:5c:f0:72:f5:85:5e:16:7c:70:1b:d6:
         c8:9b:f1:2a:dc:2c:1d:84:bf:68:0d:a0:13:de:21:04:c2:4a:
         5f:b0:84:70:4a:4a:39:88:d4:19:31:0c:85:06:e4:3d:d3:15:
         97:76:c5:ca:7a:88:27:af:eb:4d:1c:4c:ec:e5:99:45:ec:37:
         b8:e9:c9:e5:b0:b5:24:b6:59:9f:c0:b6:56:bc:e1:60:1a:78:
         6c:0c:26:e8:37:81:2a:c5:a4:35:45:d3:c5:fe:7b:4c:f7:f1:
         82:38:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 02:43:16 2026 by rpki-client