Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05EAAC504BA26A74D162BA785DCF1265F98A0E22CA58A735969618E2B89520FF/0/323030313a313232393a3a2f34302d3430203d3e20323733323835.roa
File:                     323030313a313232393a3a2f34302d3430203d3e20323733323835.roa (raw, json)
Hash identifier:          9B+QyI5FM7OyHP8WDU1kZeiphqRBlkp8wdHwhkmLp/E=
Subject key identifier:   03:B7:A1:C7:E3:2D:25:C4:85:02:07:1A:BE:5A:DA:47:89:08:DC:3F
Certificate issuer:       /CN=9E2546FEA2F8DEDDA74713C57862DE928F26163A
Certificate serial:       6FDC2D82AB32E5E31184D3109D902938901AC612
Authority key identifier: 9E:25:46:FE:A2:F8:DE:DD:A7:47:13:C5:78:62:DE:92:8F:26:16:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E2546FEA2F8DEDDA74713C57862DE928F26163A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05EAAC504BA26A74D162BA785DCF1265F98A0E22CA58A735969618E2B89520FF/0/323030313a313232393a3a2f34302d3430203d3e20323733323835.roa
Signing time:             Wed 01 Apr 2026 15:45:00 +0000
ROA not before:           Wed 01 Apr 2026 15:40:00 +0000
ROA not after:            Wed 31 Mar 2027 15:45:00 +0000
asID:                     273285
IP address blocks:        2001:1229::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05EAAC504BA26A74D162BA785DCF1265F98A0E22CA58A735969618E2B89520FF/0/9E2546FEA2F8DEDDA74713C57862DE928F26163A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05EAAC504BA26A74D162BA785DCF1265F98A0E22CA58A735969618E2B89520FF/0/9E2546FEA2F8DEDDA74713C57862DE928F26163A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E2546FEA2F8DEDDA74713C57862DE928F26163A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 12:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dc:2d:82:ab:32:e5:e3:11:84:d3:10:9d:90:29:38:90:1a:c6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E2546FEA2F8DEDDA74713C57862DE928F26163A
        Validity
            Not Before: Apr  1 15:40:00 2026 GMT
            Not After : Mar 31 15:45:00 2027 GMT
        Subject: CN=03B7A1C7E32D25C48502071ABE5ADA478908DC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:cf:e3:7b:ce:b9:e7:9b:d0:07:c4:18:44:
                    7d:49:67:ee:ae:2f:67:87:57:b9:0f:36:85:b9:6b:
                    58:2d:4a:2c:6d:8e:c9:58:c8:0b:7c:5b:24:0e:6b:
                    fe:38:e4:ac:ff:dc:fb:5a:e8:31:1c:9a:2a:dc:fe:
                    51:32:2b:12:7b:6e:21:6b:2f:ff:7d:3e:8f:3e:44:
                    46:f0:63:0c:76:f8:10:fc:ad:c4:de:20:7c:bc:5a:
                    2d:3b:91:8c:c0:c5:03:a7:5f:02:e6:1a:b2:1b:49:
                    4a:ba:a3:46:3e:3c:0f:81:8b:2c:9b:a0:9d:75:15:
                    cc:e9:53:f5:4e:ac:8c:65:58:ec:53:1d:7a:e9:2f:
                    54:2c:a5:e0:f1:74:b1:0d:63:3b:23:ee:5f:5f:7d:
                    cd:54:08:b1:56:b5:45:7b:f6:33:76:88:db:8c:dc:
                    2b:12:a9:92:a6:7d:e3:78:dc:08:14:76:d3:e5:6f:
                    10:67:28:50:79:f1:89:a9:c0:20:9e:ed:0c:e2:99:
                    50:b1:4b:f6:05:10:b3:83:a4:ce:d6:4e:ca:50:9c:
                    e4:52:37:c0:2b:0a:1d:74:4a:48:0d:b3:b5:cb:04:
                    c3:6a:96:41:61:d0:5c:d9:a5:ec:ce:b6:c7:34:e1:
                    67:bc:df:0c:16:29:62:b2:0b:10:a2:00:c2:f2:2a:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:A1:C7:E3:2D:25:C4:85:02:07:1A:BE:5A:DA:47:89:08:DC:3F
            X509v3 Authority Key Identifier:
                keyid:9E:25:46:FE:A2:F8:DE:DD:A7:47:13:C5:78:62:DE:92:8F:26:16:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05EAAC504BA26A74D162BA785DCF1265F98A0E22CA58A735969618E2B89520FF/0/9E2546FEA2F8DEDDA74713C57862DE928F26163A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E2546FEA2F8DEDDA74713C57862DE928F26163A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05EAAC504BA26A74D162BA785DCF1265F98A0E22CA58A735969618E2B89520FF/0/323030313a313232393a3a2f34302d3430203d3e20323733323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1229::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:4e:39:23:fb:4f:13:51:7b:1d:38:16:d0:bb:56:92:dc:16:
         09:bd:9a:ff:7f:cc:e8:5b:fe:bf:a9:0e:e4:1f:c6:ac:b0:cc:
         49:74:cb:26:58:4f:1a:32:24:90:72:50:cb:bc:f8:fa:b9:f7:
         12:15:96:a9:9d:9e:16:80:c2:9e:1d:33:8f:5f:13:f7:fc:0d:
         25:1f:90:d0:ae:a6:c4:88:06:8a:c9:26:b8:6e:fb:5e:7e:09:
         43:b6:04:8f:ff:82:0e:03:1f:89:89:c3:a4:93:8e:cb:f8:e6:
         85:0c:9e:64:24:88:fc:e5:fe:c4:93:08:40:8c:62:f5:2f:99:
         10:6f:ee:69:c3:fd:8e:9e:6d:f6:4e:8f:dc:ec:93:e0:72:e8:
         9b:b1:96:30:09:54:e4:b4:1d:f2:7f:db:3a:2f:0d:13:55:8a:
         09:28:e0:08:8b:e1:8d:ca:ab:f2:3f:64:fa:d7:e5:bd:b2:5c:
         5f:18:88:89:b3:5f:43:c8:c2:9c:f4:2b:00:a0:82:aa:6c:b4:
         7e:9d:8d:0c:03:88:4d:ca:d1:e5:5e:ff:5f:02:e1:75:dd:68:
         b3:82:7c:98:11:ff:da:47:0b:bf:39:9b:05:1e:4b:8c:d8:09:
         71:a3:fd:17:b5:5f:ca:d5:80:4b:ac:d4:04:ba:1f:0a:a8:8e:
         3e:7f:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:45:31 2026 by rpki-client