Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          x6lCWUjFEf68GXh0XzxJxjnhAlYIZ8TvQ+YHUEdGrMg=
Subject key identifier:   AC:0F:19:07:3A:25:9A:B7:EC:2E:E5:AF:A6:EC:C0:50:65:D1:A6:57
Certificate issuer:       /CN=E001D620B6E014F51D5A8A878F416307AA8F761D
Certificate serial:       283E8B2DCBEC1EE2F488F01F590B8575A8938737
Authority key identifier: E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 07 Apr 2026 13:37:47 +0000
ROA not before:           Tue 07 Apr 2026 13:32:47 +0000
ROA not after:            Tue 06 Apr 2027 13:37:47 +0000
asID:                     27951
IP address blocks:        2801:1aa:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3e:8b:2d:cb:ec:1e:e2:f4:88:f0:1f:59:0b:85:75:a8:93:87:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E001D620B6E014F51D5A8A878F416307AA8F761D
        Validity
            Not Before: Apr  7 13:32:47 2026 GMT
            Not After : Apr  6 13:37:47 2027 GMT
        Subject: CN=AC0F19073A259AB7EC2EE5AFA6ECC05065D1A657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:81:c0:62:2f:a8:3e:8a:96:bb:09:ca:7a:
                    d8:55:bd:16:97:d9:fd:b6:67:88:1d:83:dd:ce:f5:
                    e5:81:2d:af:dc:32:ad:4b:45:c8:83:e9:2f:7f:21:
                    7f:dc:4e:db:d4:c7:95:14:26:5c:20:cd:c7:7a:42:
                    a4:86:22:c6:c2:4e:03:b5:c2:49:3a:b3:71:93:7c:
                    7e:c9:30:8a:b3:25:31:5f:67:0d:42:a4:3f:a3:2c:
                    56:39:98:cb:1a:4d:b3:9b:67:8b:2e:50:57:3f:55:
                    d7:13:56:ce:17:b2:14:8b:63:5f:33:7b:c3:0c:a7:
                    2e:3a:fc:6e:66:2e:2e:d9:de:d0:7e:13:2e:c5:10:
                    90:05:df:4a:f6:c8:ad:74:36:8c:f2:91:96:3f:d3:
                    9e:b9:14:d0:53:84:00:7f:0d:9c:dd:d2:0e:8c:07:
                    a7:2d:eb:d2:e1:72:d0:e5:cb:88:46:ab:78:78:26:
                    57:cb:b7:c1:2a:0e:96:97:23:cf:2b:7b:ec:5e:8d:
                    bb:fb:2a:af:5e:9d:16:f4:99:7b:ce:f1:e1:a5:69:
                    5f:1a:80:e8:c3:63:a3:8c:44:1b:5d:fb:bc:88:53:
                    1e:92:86:e9:f5:e3:67:d2:01:7d:e8:d4:23:db:34:
                    44:13:ab:f2:50:55:65:7e:90:ac:d4:12:4f:e8:a0:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:19:07:3A:25:9A:B7:EC:2E:E5:AF:A6:EC:C0:50:65:D1:A6:57
            X509v3 Authority Key Identifier:
                keyid:E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a323a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1aa:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:db:f7:4e:8d:13:43:51:98:3a:12:cf:d2:69:5f:02:05:
         dc:4a:b1:14:c8:4c:58:c8:51:f3:75:cc:ea:b1:08:85:8b:7c:
         72:bb:18:a0:91:34:72:6c:87:74:90:f6:a8:07:57:a4:63:17:
         7b:b9:95:3f:e9:18:6f:2f:29:50:9d:79:c9:27:95:5b:63:b8:
         08:19:a7:d5:94:24:5b:43:7a:84:ac:b4:a9:30:a7:f2:ff:06:
         bf:ae:f9:08:6d:f1:d6:b4:c2:51:1b:01:01:1e:27:2c:6e:ec:
         08:dd:22:b2:f1:ce:8b:c6:fc:7a:03:ab:2e:39:56:65:75:d4:
         5b:5e:fb:20:f3:f0:9d:d5:e4:4d:53:b3:06:f5:51:75:24:6d:
         34:79:ec:7f:0b:c8:32:1d:da:3d:4b:4c:cf:56:55:0f:21:47:
         89:29:7e:34:0e:03:e8:c8:4f:c3:ba:93:08:97:70:8d:6e:25:
         56:79:97:ac:d4:9c:56:d0:39:56:58:15:9a:5f:1d:51:ea:0e:
         9d:61:1b:43:33:a6:0f:dd:e6:9b:26:4d:c0:49:99:ad:83:87:
         3e:b9:93:41:2e:96:85:90:4d:b7:12:a4:1d:f2:e0:5c:a1:27:
         11:56:b9:83:62:7f:a9:e8:af:37:3d:dd:f1:c0:9b:02:9b:7d:
         7f:b2:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:44:53 2026 by rpki-client