Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/323030313a313232343a3a2f33322d3438203d3e20323733323637.roa
File:                     323030313a313232343a3a2f33322d3438203d3e20323733323637.roa (raw, json)
Hash identifier:          oO7BBcSDBIFEro1nrfAjrC+snUyYOgFMAVm9Pt/LI3Y=
Subject key identifier:   A2:D9:16:42:DE:AF:51:6B:BC:A6:99:9E:3D:20:D4:FB:60:1F:0E:8D
Certificate issuer:       /CN=11F658F3ECB47E63D04F4D095F673974FA8ADB33
Certificate serial:       729F8CF2FC7B8691FACD4564FB7121AFADA3FDE7
Authority key identifier: 11:F6:58:F3:EC:B4:7E:63:D0:4F:4D:09:5F:67:39:74:FA:8A:DB:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/323030313a313232343a3a2f33322d3438203d3e20323733323637.roa
Signing time:             Thu 16 Apr 2026 00:05:00 +0000
ROA not before:           Thu 16 Apr 2026 00:00:00 +0000
ROA not after:            Thu 15 Apr 2027 00:05:00 +0000
asID:                     273267
IP address blocks:        2001:1224::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 23:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9f:8c:f2:fc:7b:86:91:fa:cd:45:64:fb:71:21:af:ad:a3:fd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F658F3ECB47E63D04F4D095F673974FA8ADB33
        Validity
            Not Before: Apr 16 00:00:00 2026 GMT
            Not After : Apr 15 00:05:00 2027 GMT
        Subject: CN=A2D91642DEAF516BBCA6999E3D20D4FB601F0E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:72:8c:50:85:71:26:ed:d5:d4:82:a4:55:bd:
                    c7:68:dd:24:9a:33:26:45:d4:78:e9:2d:9b:60:f4:
                    d5:c1:ae:35:53:87:9d:1a:2a:57:d7:cb:db:5d:2a:
                    b7:ec:b9:12:3e:15:e0:08:e8:18:ab:96:ad:18:bd:
                    80:09:99:eb:cf:c1:bf:6a:a5:26:f8:ed:df:4a:c6:
                    ca:66:c7:9d:47:27:b4:fb:9b:73:21:b3:5a:c3:74:
                    77:f7:bd:fe:12:66:89:7d:b8:d5:fe:9e:a4:40:8a:
                    5d:4e:31:79:a4:d1:54:85:6c:97:6f:e7:dd:f1:5a:
                    13:b3:94:45:fd:36:52:e6:46:59:87:89:45:fa:f8:
                    7d:4f:79:d7:94:3c:c1:a3:53:d5:da:24:77:fa:16:
                    30:67:91:49:05:bf:64:7f:9a:a7:0a:88:4c:f2:57:
                    da:ad:ee:5a:26:28:98:6d:80:f9:86:31:20:73:bb:
                    9f:dc:49:67:92:f4:f0:34:88:c9:10:09:7f:e0:96:
                    78:61:82:58:cf:1f:82:0e:cf:a6:1a:fe:a9:ee:6a:
                    d1:03:2f:49:b4:08:76:8e:4b:ec:60:66:44:5e:f8:
                    83:fb:9f:8c:86:78:a9:5d:9a:19:bb:d0:27:b7:f9:
                    d6:60:06:5f:93:a5:ce:05:00:7e:ed:87:9c:49:8c:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D9:16:42:DE:AF:51:6B:BC:A6:99:9E:3D:20:D4:FB:60:1F:0E:8D
            X509v3 Authority Key Identifier:
                keyid:11:F6:58:F3:EC:B4:7E:63:D0:4F:4D:09:5F:67:39:74:FA:8A:DB:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/323030313a313232343a3a2f33322d3438203d3e20323733323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1224::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:a3:f2:9b:56:44:1f:f8:b5:38:5c:66:0b:2b:c2:70:a6:08:
         d9:15:17:f7:40:61:a0:db:8f:26:bb:bb:0b:c4:b1:e4:0e:f8:
         c9:1e:a1:44:86:36:ab:8e:ab:22:17:bf:23:9d:48:80:07:48:
         c7:d9:c3:ec:d8:0e:58:42:4f:d5:c7:74:b9:45:b9:ea:5f:f6:
         1d:1a:ae:97:08:03:30:98:0d:36:ba:79:f1:f9:3b:cc:83:47:
         fc:a0:3e:ad:45:1a:f0:7d:5f:97:04:8f:13:77:89:13:bb:4b:
         a6:35:d6:28:89:24:2f:8f:03:df:27:d0:d8:38:45:cc:02:31:
         48:50:6b:b2:52:e4:55:4a:45:e9:1f:cc:10:67:8e:ee:75:78:
         ea:ae:f8:31:78:e7:b1:64:5d:3c:39:41:64:c7:74:2e:be:d2:
         ce:cd:a5:d3:ff:3f:46:70:45:8c:d6:7d:32:9c:c6:ab:5c:d2:
         ca:8b:d1:99:ba:5d:d7:e8:1a:03:1f:c8:e2:b8:4d:82:10:19:
         6e:4d:66:a8:47:16:8e:07:a8:d1:d6:e3:ba:68:40:88:e2:8c:
         be:00:ef:1f:9b:2a:c2:d8:62:79:00:b0:a8:06:a8:16:78:53:
         7f:7f:75:4b:c1:c2:9b:c3:06:d2:bb:ff:82:a3:0a:77:f4:16:
         33:97:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:06 2026 by rpki-client