Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e2031383030.roa
File:                     323830313a3135343a3a2f34322d3432203d3e2031383030.roa (raw, json)
Hash identifier:          lKMukR4CbZmbuXvVPhKZMR1F59w+pARhapIICO/isOY=
Subject key identifier:   10:59:DD:1D:9F:66:05:4A:3B:64:D9:F1:28:29:9F:8C:20:FD:81:95
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       617115B3348404A5A48EE7D1B3480147A4394297
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e2031383030.roa
Signing time:             Fri 17 Apr 2026 01:39:14 +0000
ROA not before:           Fri 17 Apr 2026 01:34:14 +0000
ROA not after:            Fri 16 Apr 2027 01:39:14 +0000
asID:                     1800
IP address blocks:        2801:154::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 12:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:71:15:b3:34:84:04:a5:a4:8e:e7:d1:b3:48:01:47:a4:39:42:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Apr 17 01:34:14 2026 GMT
            Not After : Apr 16 01:39:14 2027 GMT
        Subject: CN=1059DD1D9F66054A3B64D9F128299F8C20FD8195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:49:94:2c:6c:6c:be:97:ae:1b:e6:d6:e6:
                    94:c0:da:9f:73:c9:04:2c:24:e6:94:45:75:c7:4e:
                    16:51:06:c9:f4:20:ab:97:7d:54:e9:04:43:5e:fc:
                    c2:6f:9a:ed:5b:11:7e:3d:86:2e:02:6c:86:81:dd:
                    ba:e8:68:b2:49:c2:49:60:95:24:f0:48:ec:3c:59:
                    94:fa:06:51:52:a2:11:80:71:8b:91:de:4a:16:54:
                    cb:c6:97:f5:3b:87:24:f7:b0:e2:ee:82:80:34:67:
                    63:e3:61:c6:02:e4:8b:12:f4:21:56:23:da:3d:08:
                    a7:e2:57:72:13:c2:73:ea:4c:ad:a9:7d:e0:de:93:
                    c2:fc:f5:50:26:0e:c8:95:71:71:3f:a8:09:3f:f2:
                    c1:c6:51:59:ab:ef:6a:1a:45:7b:5e:71:6e:cf:99:
                    de:b7:22:ef:b0:17:95:eb:38:11:7b:40:04:de:d4:
                    67:56:a5:76:2c:63:8d:39:9a:04:c5:f7:10:08:ba:
                    82:69:94:71:b8:99:b8:bb:7a:22:83:d5:1d:09:fa:
                    41:f9:44:7a:2b:d4:4a:77:2b:28:1f:8a:8f:82:c6:
                    51:a6:5f:26:26:d6:70:43:7d:70:de:42:b9:6b:4b:
                    4e:95:b5:f4:84:fa:cd:6b:88:69:f1:f9:21:b8:12:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:59:DD:1D:9F:66:05:4A:3B:64:D9:F1:28:29:9F:8C:20:FD:81:95
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e2031383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:154::/42

    Signature Algorithm: sha256WithRSAEncryption
         a1:31:50:99:f4:11:b5:be:92:e8:3c:0d:0c:e5:0a:27:98:cf:
         b2:c4:af:aa:55:fc:da:1a:46:a8:e1:cc:8e:d1:92:a2:85:01:
         d5:75:92:bd:c4:2a:60:9b:cd:59:d4:1f:cc:fc:d1:33:12:7f:
         69:c0:6e:7e:d1:b0:95:00:a9:a8:2d:fa:0c:59:5f:cb:84:74:
         17:32:b8:6b:5e:9c:a6:fa:06:32:74:80:2a:83:7c:99:ea:82:
         f1:a4:7d:c5:02:18:fb:20:d5:54:7f:b9:2f:83:c7:31:9b:28:
         de:fe:3e:53:70:fd:fa:d4:21:c9:66:b3:7c:37:e2:96:f9:f1:
         8a:f5:c2:2f:1a:e4:98:43:72:65:54:cd:1d:bd:0b:ad:f4:dc:
         e4:49:65:99:53:e0:37:20:8c:21:69:f5:da:49:b5:34:1f:28:
         90:5d:aa:d0:0a:21:cb:23:8e:c9:a5:16:bc:cd:bf:9a:50:21:
         ac:6b:f7:ef:35:b6:6b:35:87:a2:ee:30:4d:1c:3f:00:45:25:
         4f:de:8a:e9:fd:5c:a1:00:a9:4d:cb:3b:3a:6c:40:32:26:15:
         52:bb:81:33:2c:44:07:2e:f7:7a:84:ce:f3:b0:5b:35:98:62:
         38:37:8a:1f:db:39:7c:3b:cd:51:ee:d8:d9:0e:6d:53:c7:38:
         19:4b:64:21
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUYXEVszSEBKWkjufRs0gBR6Q5QpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE3MTg5Qzc1RTlCRkNCNDFBMzc2QUYzMzMwM0Y2MkU4
MDlBRDFERjAeFw0yNjA0MTcwMTM0MTRaFw0yNzA0MTYwMTM5MTRaMDMxMTAvBgNV
BAMTKDEwNTlERDFEOUY2NjA1NEEzQjY0RDlGMTI4Mjk5RjhDMjBGRDgxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3UmULGxsvpeuG+bW5pTA2p9z
yQQsJOaURXXHThZRBsn0IKuXfVTpBENe/MJvmu1bEX49hi4CbIaB3broaLJJwklg
lSTwSOw8WZT6BlFSohGAcYuR3koWVMvGl/U7hyT3sOLugoA0Z2PjYcYC5IsS9CFW
I9o9CKfiV3ITwnPqTK2pfeDek8L89VAmDsiVcXE/qAk/8sHGUVmr72oaRXtecW7P
md63Iu+wF5XrOBF7QATe1GdWpXYsY405mgTF9xAIuoJplHG4mbi7eiKD1R0J+kH5
RHor1Ep3Kygfio+CxlGmXyYm1nBDfXDeQrlrS06VtfSE+s1riGnx+SG4En/RAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUEFndHZ9mBUo7ZNnxKCmfjCD9gZUwHwYDVR0j
BBgwFoAUqnGJx16b/LQaN2rzMwP2LoCa0d8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMEVENEMwN0VCNjY2ODdCMDIxMkM1NTMzMkQwRkJEMTc2
NDBDODlGNEE4RjYwOTZDNzY5RkFEOEI4MTlFQkZFLzAvQUE3MTg5Qzc1RTlCRkNC
NDFBMzc2QUYzMzMwM0Y2MkU4MDlBRDFERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTcxODlDNzVFOUJGQ0I0MUEz
NzZBRjMzMzAzRjYyRTgwOUFEMURGLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjBFRDRDMDdFQjY2Njg3QjAyMTJDNTUzMzJEMEZCRDE3NjQwQzg5RjRB
OEY2MDk2Qzc2OUZBRDhCODE5RUJGRS8wLzMyMzgzMDMxM2EzMTM1MzQzYTNhMmYz
NDMyMmQzNDMyMjAzZDNlMjAzMTM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigBAVQAADANBgkq
hkiG9w0BAQsFAAOCAQEAoTFQmfQRtb6S6DwNDOUKJ5jPssSvqlX82hpGqOHMjtGS
ooUB1XWSvcQqYJvNWdQfzPzRMxJ/acBuftGwlQCpqC36DFlfy4R0FzK4a16cpvoG
MnSAKoN8meqC8aR9xQIY+yDVVH+5L4PHMZso3v4+U3D9+tQhyWazfDfilvnxivXC
LxrkmENyZVTNHb0LrfTc5EllmVPgNyCMIWn12km1NB8okF2q0AohyyOOyaUWvM2/
mlAhrGv37zW2azWHou4wTRw/AEUlT96K6f1coQCpTcs7OmxAMiYVUruBMyxEBy73
eoTO87BbNZhiODeKH9s5fDvNUe7Y2Q5tU8c4GUtkIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:56 2026 by rpki-client