Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B5AE3011D821890318B1E66857F996ED9196318C9B19EA79D8F070F3C8FBB68/0/323830313a31633a643030303a3a2f34382d3438203d3e20323635363430.roa
File:                     323830313a31633a643030303a3a2f34382d3438203d3e20323635363430.roa (raw, json)
Hash identifier:          /MgOg4fja37WPCU25AV/AgXFCiNPQywJcFzVZ2Dm2Xo=
Subject key identifier:   F7:C5:5D:3F:92:D9:B1:82:09:79:39:9D:86:2A:4C:E0:81:7A:44:51
Certificate issuer:       /CN=FDE4AF794CFF0F2A731267B2B0DDE38E02847739
Certificate serial:       6B34A59161469280DBC794D5E13697C7A7F963C3
Authority key identifier: FD:E4:AF:79:4C:FF:0F:2A:73:12:67:B2:B0:DD:E3:8E:02:84:77:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDE4AF794CFF0F2A731267B2B0DDE38E02847739.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B5AE3011D821890318B1E66857F996ED9196318C9B19EA79D8F070F3C8FBB68/0/323830313a31633a643030303a3a2f34382d3438203d3e20323635363430.roa
Signing time:             Tue 19 May 2026 11:25:00 +0000
ROA not before:           Tue 19 May 2026 11:20:00 +0000
ROA not after:            Tue 18 May 2027 11:25:00 +0000
asID:                     265640
IP address blocks:        2801:1c:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B5AE3011D821890318B1E66857F996ED9196318C9B19EA79D8F070F3C8FBB68/0/FDE4AF794CFF0F2A731267B2B0DDE38E02847739.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B5AE3011D821890318B1E66857F996ED9196318C9B19EA79D8F070F3C8FBB68/0/FDE4AF794CFF0F2A731267B2B0DDE38E02847739.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDE4AF794CFF0F2A731267B2B0DDE38E02847739.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:34:a5:91:61:46:92:80:db:c7:94:d5:e1:36:97:c7:a7:f9:63:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDE4AF794CFF0F2A731267B2B0DDE38E02847739
        Validity
            Not Before: May 19 11:20:00 2026 GMT
            Not After : May 18 11:25:00 2027 GMT
        Subject: CN=F7C55D3F92D9B1820979399D862A4CE0817A4451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:c8:68:33:27:cf:a3:62:a3:ff:94:76:82:
                    a5:bf:4c:86:f1:44:3b:38:ec:a8:be:6b:5b:5a:9c:
                    af:2a:b6:4c:ce:2a:32:82:0c:ba:8b:05:06:96:02:
                    62:14:3b:4b:77:05:81:93:7a:d5:73:30:22:2c:22:
                    8f:9b:e5:42:16:9a:13:4c:7f:31:66:e0:ec:e3:0c:
                    e7:1f:7e:a0:89:46:06:a7:a0:8c:bd:61:f5:07:84:
                    3e:66:2a:e7:eb:1c:97:c3:86:db:d6:1f:7a:cc:56:
                    71:b8:9f:8e:7e:75:0b:40:b1:85:5f:a6:ea:f4:fe:
                    cf:ae:ff:6c:f6:6a:f3:8a:63:52:bc:8a:c6:4d:86:
                    b7:eb:33:96:37:41:36:87:2a:a5:2a:d0:e0:77:d1:
                    90:76:72:a4:25:84:c4:9e:11:ab:16:1e:c0:6e:bb:
                    1a:be:93:5a:3b:c9:7a:9e:09:6d:d2:12:d8:3b:02:
                    8c:9c:e2:4f:7f:8e:28:7c:47:9e:10:8b:2b:f6:9f:
                    a5:f2:bb:73:75:d9:22:9e:24:7b:36:9b:0a:af:9c:
                    9a:e5:91:96:ee:d1:ac:56:2c:4d:4b:ed:5a:e5:38:
                    c3:1c:02:b8:6b:dc:ae:5f:67:09:31:ad:73:b1:17:
                    60:d5:fc:53:24:bc:28:21:22:8c:6b:9c:38:df:74:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C5:5D:3F:92:D9:B1:82:09:79:39:9D:86:2A:4C:E0:81:7A:44:51
            X509v3 Authority Key Identifier:
                keyid:FD:E4:AF:79:4C:FF:0F:2A:73:12:67:B2:B0:DD:E3:8E:02:84:77:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B5AE3011D821890318B1E66857F996ED9196318C9B19EA79D8F070F3C8FBB68/0/FDE4AF794CFF0F2A731267B2B0DDE38E02847739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDE4AF794CFF0F2A731267B2B0DDE38E02847739.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B5AE3011D821890318B1E66857F996ED9196318C9B19EA79D8F070F3C8FBB68/0/323830313a31633a643030303a3a2f34382d3438203d3e20323635363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:1d:d8:44:29:cd:5a:70:ef:ca:cc:1f:e5:46:fa:76:a8:c3:
         89:45:29:fc:1a:65:4e:e1:0a:f0:19:26:f7:11:d0:1c:c3:5e:
         a4:6e:2c:0e:1b:39:cf:20:ec:91:08:d0:53:a4:53:6e:6e:0b:
         ea:9e:70:aa:8d:78:ac:06:78:6f:01:35:50:53:8f:3c:3a:0b:
         8b:7e:e6:7d:55:d2:d0:b6:2d:e0:a0:29:26:03:e5:50:9f:4e:
         c8:4a:4a:6a:c0:f0:62:64:db:2a:1d:54:c1:1d:68:3c:07:70:
         b5:53:65:5a:95:5c:94:4d:c7:f8:07:e8:b1:76:92:8b:9d:e8:
         02:68:4d:b0:7d:3b:62:d7:a7:13:3c:d1:7e:1b:a1:6c:93:af:
         de:68:0a:4a:48:9c:9a:5b:ba:50:32:ae:10:b0:6a:f4:15:13:
         93:8e:0b:34:98:24:b9:dd:8d:d4:9d:49:c6:66:2f:14:d8:73:
         e0:41:f2:69:62:89:5e:78:f1:03:f6:de:cd:37:56:fa:c0:01:
         8d:57:73:5c:5e:4f:b1:19:9a:fa:cf:5e:55:e9:ad:bb:23:2a:
         5d:88:8e:a4:2d:eb:88:e2:db:14:ed:9d:79:a3:ce:25:ad:01:
         f5:2a:ed:c2:77:8d:5c:88:07:1e:42:9b:f2:8e:dc:91:cc:e3:
         1c:fd:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:01:41 2026 by rpki-client