Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a643030303a3a2f33362d3438203d3e203238343539.roa
File:                     323030313a313230373a643030303a3a2f33362d3438203d3e203238343539.roa (raw, json)
Hash identifier:          Z4sjrb0Cacpd5CaLsGir6tvd8zPDIB9EAUXts/+FwoM=
Subject key identifier:   F9:7C:B8:09:A2:99:5E:07:31:AD:EB:C6:37:75:71:6A:6F:66:2F:07
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       ED71810C3331E98262E8B656B1D016CE6C3720
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a643030303a3a2f33362d3438203d3e203238343539.roa
Signing time:             Sun 01 Mar 2026 21:05:15 +0000
ROA not before:           Sun 01 Mar 2026 21:00:15 +0000
ROA not after:            Sun 28 Feb 2027 21:05:15 +0000
asID:                     28459
IP address blocks:        2001:1207:d000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 00:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ed:71:81:0c:33:31:e9:82:62:e8:b6:56:b1:d0:16:ce:6c:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: Mar  1 21:00:15 2026 GMT
            Not After : Feb 28 21:05:15 2027 GMT
        Subject: CN=F97CB809A2995E0731ADEBC63775716A6F662F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:2e:c6:ba:c2:76:92:7c:d1:fa:b3:44:14:
                    b9:cc:e3:31:f2:e2:00:40:17:6a:81:38:84:7c:99:
                    f5:00:4c:46:89:53:7c:f1:65:7a:bc:a0:bb:b2:66:
                    29:27:0f:4f:a2:b7:04:f9:e6:6b:6f:24:dc:54:12:
                    aa:74:e5:ee:ac:f0:c9:5d:cd:6f:b2:54:45:79:cd:
                    3b:58:a1:25:9a:ba:38:f5:8a:4a:b0:13:20:82:d8:
                    5f:8f:e6:a9:02:3c:10:d8:9b:e1:32:51:b9:a5:28:
                    39:13:ff:cc:73:c1:bc:1f:f9:eb:2d:62:a1:28:03:
                    51:6b:00:60:5e:3e:27:43:2a:16:5b:28:d9:03:71:
                    21:c1:1d:e7:be:b6:96:d6:53:8c:ca:20:11:a0:cb:
                    f4:ea:56:b1:6b:cf:4b:f6:7e:fd:11:5e:fa:a0:d9:
                    00:3d:92:b8:c5:20:15:45:1e:cb:8d:1c:c8:a6:0f:
                    f4:87:36:ce:17:a9:b0:ab:be:9a:b5:06:bc:3b:0b:
                    e2:57:bb:11:bb:39:1f:34:23:03:d9:51:63:5f:fb:
                    53:5a:5d:cf:d1:81:9c:2e:80:6a:16:f3:ba:6b:ec:
                    dd:b4:f5:c7:79:e6:aa:1a:34:56:93:57:db:af:eb:
                    0d:2c:e9:07:e0:d3:30:0e:81:9f:b7:88:0f:0a:bd:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7C:B8:09:A2:99:5E:07:31:AD:EB:C6:37:75:71:6A:6F:66:2F:07
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a643030303a3a2f33362d3438203d3e203238343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1207:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:84:92:9e:e4:be:a2:94:47:dd:53:26:70:2f:63:fa:66:68:
         2c:92:a8:09:bc:28:3c:23:53:b1:90:4f:f8:aa:74:0f:37:1d:
         38:aa:d1:63:c3:b9:98:69:6c:ca:32:a5:f3:3e:50:cb:50:b6:
         d2:59:ad:eb:ce:2f:1d:0f:20:69:f0:ef:80:cc:d9:77:0e:f8:
         17:41:b3:33:5e:d8:ac:bd:3b:e8:db:ea:99:43:58:3c:bb:82:
         68:55:b0:3b:89:6f:b3:48:65:dc:5a:7d:77:2f:07:58:2f:9a:
         94:2d:96:43:db:7d:0c:71:ce:ef:10:72:b0:e4:fa:bb:af:51:
         9b:72:61:03:1a:5e:70:3d:5c:7e:a7:3c:0a:78:cc:ac:3b:26:
         da:81:ee:2a:cb:c4:99:d0:fd:ce:17:26:37:54:99:10:49:59:
         35:13:31:09:f7:b3:b4:48:a2:d9:80:ce:52:fc:34:f4:93:2e:
         8f:34:85:2d:12:41:48:79:10:ea:8f:8e:d1:ba:92:39:4c:51:
         a8:91:09:f8:96:a0:1c:32:fa:40:43:d9:96:2a:9a:22:c6:fb:
         19:59:3c:38:7b:b2:8a:c1:9a:c6:e8:d7:b9:cd:ac:cc:14:04:
         89:9c:f7:12:78:5b:6a:23:a2:a4:85:0a:e8:e2:01:74:bd:59:
         7d:a1:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:22 2026 by rpki-client