Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031323132.roa
File:                     323830303a3730303a3a2f33322d3634203d3e2031323132.roa (raw, json)
Hash identifier:          N8/IjXHt49yJDtzp9Ea6ujqN0m6cGCo76cGXCR92B4I=
Subject key identifier:   51:97:72:10:C6:07:62:46:CB:59:77:9F:1D:C5:70:B8:5C:C3:4B:71
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       404B94C12D167D40289CF3F2E76311BCBD79C9B0
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031323132.roa
Signing time:             Fri 24 Jul 2026 19:35:10 +0000
ROA not before:           Fri 24 Jul 2026 19:30:10 +0000
ROA not after:            Fri 23 Jul 2027 19:35:10 +0000
asID:                     1212
IP address blocks:        2800:700::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 17:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:94:c1:2d:16:7d:40:28:9c:f3:f2:e7:63:11:bc:bd:79:c9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Jul 24 19:30:10 2026 GMT
            Not After : Jul 23 19:35:10 2027 GMT
        Subject: CN=51977210C6076246CB59779F1DC570B85CC34B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:9f:28:e7:ef:0b:8e:84:8c:e9:49:88:24:
                    6e:dd:d6:9e:5f:ad:6b:64:98:f4:76:24:36:86:47:
                    3a:f3:f4:20:3c:ea:64:ca:9f:88:84:7d:b1:fa:1b:
                    75:90:c3:62:92:82:26:f6:78:09:de:76:da:6b:6b:
                    de:3c:40:19:67:1e:43:70:68:36:33:6e:22:d5:b2:
                    04:46:92:a8:82:d4:b1:ba:2e:f1:08:ee:8d:9c:fa:
                    20:23:5a:a4:84:04:dd:81:7f:5a:90:9a:88:53:01:
                    99:21:48:86:a3:1a:ae:95:c7:0b:18:6f:5d:5c:84:
                    9b:c5:05:3e:55:8b:81:f5:c6:d2:b9:5f:54:21:05:
                    4d:fe:8c:15:33:6a:44:c5:89:90:9a:53:eb:94:d7:
                    5e:21:85:e2:70:b1:5a:29:a5:64:fb:b1:07:40:4a:
                    bf:1f:5a:1b:c4:33:70:59:e8:a6:f4:dd:29:ba:ba:
                    f1:fc:3c:88:3a:3a:67:e6:39:83:90:f1:2d:39:81:
                    ca:33:86:75:fb:09:77:62:61:cc:9a:6e:a2:d5:e1:
                    68:01:50:aa:8a:1f:18:bd:a2:19:23:2f:1f:39:0b:
                    f7:05:11:f3:ad:46:52:69:a4:09:fb:bf:02:b8:5c:
                    8b:be:1e:f1:6e:71:fa:9b:bb:d5:ab:79:24:d2:79:
                    d7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:97:72:10:C6:07:62:46:CB:59:77:9F:1D:C5:70:B8:5C:C3:4B:71
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:64:bb:51:9d:23:b7:e9:57:ac:b6:c9:90:c9:1d:4d:ba:
         bf:f5:44:f8:4b:bc:64:fd:8c:62:65:42:27:bd:e1:fc:95:d8:
         34:50:81:0c:e5:ac:ce:ce:c9:e6:f4:02:b8:67:c5:64:9a:88:
         48:6f:e3:32:a8:24:32:21:c3:d6:62:7f:09:fa:70:1e:8e:db:
         0a:26:c2:2c:54:6d:8b:6a:7e:ef:81:b6:3f:6e:c3:05:dc:77:
         e8:8b:ae:1b:ee:44:96:de:af:bd:06:d5:f9:e5:a2:7a:27:55:
         1c:39:e0:dd:3d:df:66:89:0c:10:fc:23:4d:d6:3b:82:c6:90:
         dd:a1:f9:aa:d5:b7:94:e8:e4:71:ff:ea:04:6e:1e:1e:a1:08:
         b9:bb:a5:c6:a8:ee:a0:06:5c:8c:5b:ce:70:ba:5b:c6:c5:e5:
         6d:fa:c3:b0:bb:f2:60:62:f4:e2:c7:2a:e8:5d:c0:26:dd:a6:
         79:cf:e8:53:e8:43:43:aa:b1:8e:58:d5:75:dd:4a:1d:ff:47:
         4d:97:e2:66:95:48:39:aa:f5:79:7f:67:49:ff:b8:d3:0d:eb:
         0d:f6:a3:86:ff:54:6a:d5:22:ad:b7:73:90:df:e8:36:f0:61:
         b5:60:c8:65:7d:e6:ff:e2:8f:94:2f:fd:65:7a:4d:ca:74:a0:
         56:91:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:44:17 2026 by rpki-client