Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3434203d3e203237393935.roa
File:                     323830303a3534303a3a2f33322d3434203d3e203237393935.roa (raw, json)
Hash identifier:          2CZUBKuVC5P0RZDqV6PbPw+4D2Oe5IAQVpu4/ZDzxjc=
Subject key identifier:   DF:F0:94:26:F7:B6:D8:40:E6:EE:73:96:16:F6:0F:53:AB:F4:77:F1
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4572FBD8AE9583CD4A60A60937CEB389FCEB439F
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3434203d3e203237393935.roa
Signing time:             Wed 18 Feb 2026 06:31:04 +0000
ROA not before:           Wed 18 Feb 2026 06:26:04 +0000
ROA not after:            Wed 17 Feb 2027 06:31:04 +0000
asID:                     27995
IP address blocks:        2800:540::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:72:fb:d8:ae:95:83:cd:4a:60:a6:09:37:ce:b3:89:fc:eb:43:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb 18 06:26:04 2026 GMT
            Not After : Feb 17 06:31:04 2027 GMT
        Subject: CN=DFF09426F7B6D840E6EE739616F60F53ABF477F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:f7:8c:78:1e:a7:45:fb:48:3c:59:8d:21:
                    a5:d6:46:45:06:a8:06:64:83:59:96:da:25:8b:52:
                    48:81:6c:14:54:5d:85:85:7d:73:02:ad:ee:c3:2a:
                    5d:66:91:94:43:cd:87:28:79:af:e9:31:8a:3a:09:
                    97:b2:20:cc:c3:c5:18:c7:10:07:aa:27:09:69:bc:
                    bb:89:01:e2:a7:6a:77:e2:6e:8b:59:98:62:1c:8d:
                    d7:4f:be:f1:65:c6:10:b6:5c:77:d8:2c:30:91:e9:
                    bc:b4:2e:9b:09:ee:58:47:d0:e2:06:0a:ba:5e:5b:
                    f3:68:7a:37:7d:b0:b2:d3:a2:0e:42:ef:66:1d:5f:
                    61:f6:72:c9:f0:32:76:22:40:1a:7c:ff:7e:71:4a:
                    0f:b4:87:63:96:ac:8a:07:54:5e:12:e4:c8:85:6a:
                    a4:3e:57:47:d5:29:47:85:b2:8b:05:9c:c1:c8:36:
                    e9:08:f8:ba:92:c1:5e:6a:90:54:58:83:3e:71:20:
                    16:d1:da:ff:25:24:2e:52:24:ef:ff:dc:29:98:3c:
                    52:92:9a:83:30:e3:24:1d:f9:af:3c:43:1e:ae:3e:
                    55:00:36:5f:9d:10:37:7c:1b:b0:a9:91:3e:9a:4a:
                    dc:0f:e2:bc:d2:15:24:c1:f4:da:06:98:87:02:db:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F0:94:26:F7:B6:D8:40:E6:EE:73:96:16:F6:0F:53:AB:F4:77:F1
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3434203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:51:0e:e9:0d:e7:c1:e2:c7:51:cb:a2:f3:39:6c:0a:57:
         08:22:a0:9d:6d:6b:66:9f:41:d4:ed:67:b6:24:72:53:aa:9e:
         04:61:66:ea:93:90:f8:4a:77:d9:41:60:49:1b:cc:25:8b:59:
         71:35:f7:37:f6:bd:1d:a5:fd:29:5a:fe:c3:bf:0a:19:a7:24:
         b9:96:8f:d6:53:13:a0:8c:35:9e:7f:b9:99:9b:aa:b7:6d:9f:
         0c:be:f8:e8:d2:6e:ea:74:d9:fe:64:b3:04:9d:07:3e:ef:0a:
         46:3e:41:1b:f1:33:ff:32:6b:f1:92:bd:a1:5f:f7:2b:7b:f9:
         12:39:bc:72:cf:ec:2d:02:47:3d:4c:96:10:b9:66:16:49:8c:
         ec:52:27:b0:8a:ce:c3:b0:e8:8d:26:35:33:af:ba:95:42:fa:
         45:a1:35:29:02:8b:ae:4c:1f:71:9a:58:dc:60:76:c9:30:34:
         f4:ca:17:c5:4c:49:51:8b:ac:72:05:08:ed:19:06:54:27:e4:
         f5:79:5e:31:2e:f2:64:c3:67:bb:c1:da:9e:57:71:e3:df:53:
         d9:07:68:bf:f1:7c:12:23:0c:99:4d:b1:19:5b:b8:29:36:e2:
         61:c3:f5:26:72:a3:bc:a3:6f:62:9f:7f:80:4d:3a:c6:d4:b4:
         2d:08:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:17 2026 by rpki-client