Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5113FFCB51056B16A713394416129951338DF8F9C7E333E02589F5D7A38BB20/0/323030313a313230363a3a2f33322d3430203d3e203238343632.roa
File:                     323030313a313230363a3a2f33322d3430203d3e203238343632.roa (raw, json)
Hash identifier:          XlOnAd8xNeTtaa9fNYgOSkDwo7J+d6KZ4DQ8Po3YFL4=
Subject key identifier:   CF:42:BE:20:75:41:A8:8E:C8:82:B5:8C:ED:1F:6F:3E:8E:07:C8:7E
Certificate issuer:       /CN=B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F
Certificate serial:       632369888FCFCC0D223CC612D5D836397B238091
Authority key identifier: B7:F9:7F:BD:20:B9:C7:84:1A:31:9B:E0:8C:A7:C8:BB:15:B2:51:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A5113FFCB51056B16A713394416129951338DF8F9C7E333E02589F5D7A38BB20/0/323030313a313230363a3a2f33322d3430203d3e203238343632.roa
Signing time:             Fri 10 Apr 2026 17:30:00 +0000
ROA not before:           Fri 10 Apr 2026 17:25:00 +0000
ROA not after:            Fri 09 Apr 2027 17:30:00 +0000
asID:                     28462
IP address blocks:        2001:1206::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A5113FFCB51056B16A713394416129951338DF8F9C7E333E02589F5D7A38BB20/0/B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A5113FFCB51056B16A713394416129951338DF8F9C7E333E02589F5D7A38BB20/0/B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:23:69:88:8f:cf:cc:0d:22:3c:c6:12:d5:d8:36:39:7b:23:80:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F
        Validity
            Not Before: Apr 10 17:25:00 2026 GMT
            Not After : Apr  9 17:30:00 2027 GMT
        Subject: CN=CF42BE207541A88EC882B58CED1F6F3E8E07C87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:01:fc:56:eb:e5:84:b5:03:9f:cf:20:56:
                    4c:4a:22:5d:dc:7b:25:cf:1a:c2:0b:29:3f:05:62:
                    56:e3:0f:88:2e:d0:ca:c2:4a:3a:5c:61:25:ad:fb:
                    87:90:26:72:75:35:04:39:89:ea:8c:02:9c:11:00:
                    01:f3:46:03:12:05:f5:9e:8e:f8:66:cb:00:2a:f3:
                    a6:1f:12:dc:6f:c8:98:fb:bb:b3:a8:8c:21:fe:36:
                    5e:82:c5:3e:f5:f4:3e:a8:d8:a8:92:5f:68:5e:ba:
                    22:47:aa:24:e3:78:42:de:ec:30:52:43:48:c0:26:
                    ec:40:58:d3:fa:1c:ae:49:34:fb:ff:a1:8d:50:2a:
                    90:48:d7:44:31:5a:26:80:bb:c4:70:27:4d:1f:98:
                    9d:7a:75:3e:8d:fb:57:86:1e:bb:97:b5:a4:6c:af:
                    bf:39:44:77:82:f3:b7:49:96:d7:47:0d:83:a0:63:
                    5a:4b:ca:90:1d:41:d7:22:c4:a1:a9:2d:7c:2f:65:
                    20:30:e5:c6:49:ba:d6:ae:7c:3f:30:06:87:e4:8b:
                    32:6d:03:ba:ac:2a:f6:2d:e4:bb:d8:10:cc:a6:41:
                    3d:d8:37:0d:a9:c2:2b:d3:46:4c:87:88:75:bd:6c:
                    e6:80:48:36:ff:6d:88:33:88:83:72:02:3f:87:7a:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:42:BE:20:75:41:A8:8E:C8:82:B5:8C:ED:1F:6F:3E:8E:07:C8:7E
            X509v3 Authority Key Identifier:
                keyid:B7:F9:7F:BD:20:B9:C7:84:1A:31:9B:E0:8C:A7:C8:BB:15:B2:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A5113FFCB51056B16A713394416129951338DF8F9C7E333E02589F5D7A38BB20/0/B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7F97FBD20B9C7841A319BE08CA7C8BB15B2519F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5113FFCB51056B16A713394416129951338DF8F9C7E333E02589F5D7A38BB20/0/323030313a313230363a3a2f33322d3430203d3e203238343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1206::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:05:f8:fa:af:b9:66:41:6e:ce:80:57:31:ee:bb:f4:a1:
         ab:be:4b:7c:bb:66:fb:98:cc:70:30:33:72:9c:df:1f:47:e9:
         c0:ad:58:6a:71:aa:da:df:3e:f0:6a:f2:d1:ed:bc:1b:81:4e:
         d7:16:83:5f:73:6c:d6:78:83:da:dc:2d:10:ba:94:3d:9d:5f:
         3e:36:c6:ce:be:3a:6b:23:f8:74:8b:71:77:73:df:5c:e7:8a:
         f6:c0:ac:6d:2b:25:06:35:18:1d:88:4f:0d:de:87:bf:24:a0:
         ba:4f:5a:47:f5:25:6d:f8:3a:e0:f2:15:d7:08:05:98:06:a7:
         df:3e:53:23:b0:1e:b8:21:29:17:e4:69:5d:4c:76:70:3e:4b:
         9e:a3:e4:61:12:a3:bb:8b:72:6f:79:9d:c6:ff:08:ef:dd:af:
         55:38:8a:cc:18:60:32:b7:ce:15:34:40:71:9e:0b:a4:97:c2:
         2b:d3:e0:8d:51:dd:ea:69:a0:d4:e5:dc:5a:f4:f7:51:4d:ee:
         9f:47:67:b5:2b:a4:4a:a2:b3:4e:0a:89:2b:a4:c5:65:24:b7:
         c9:a5:64:02:22:07:02:cc:81:43:cc:e0:ee:4e:76:76:9e:f7:
         1c:a1:5e:43:dc:9a:6f:8f:0f:44:1c:a1:b3:0c:d9:db:14:15:
         4f:fc:12:77
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYyNpiI/PzA0iPMYS1dg2OXsjgJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGOTdGQkQyMEI5Qzc4NDFBMzE5QkUwOENBN0M4QkIx
NUIyNTE5RjAeFw0yNjA0MTAxNzI1MDBaFw0yNzA0MDkxNzMwMDBaMDMxMTAvBgNV
BAMTKENGNDJCRTIwNzU0MUE4OEVDODgyQjU4Q0VEMUY2RjNFOEUwN0M4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrgH8VuvlhLUDn88gVkxKIl3c
eyXPGsILKT8FYlbjD4gu0MrCSjpcYSWt+4eQJnJ1NQQ5ieqMApwRAAHzRgMSBfWe
jvhmywAq86YfEtxvyJj7u7OojCH+Nl6CxT719D6o2KiSX2heuiJHqiTjeELe7DBS
Q0jAJuxAWNP6HK5JNPv/oY1QKpBI10QxWiaAu8RwJ00fmJ16dT6N+1eGHruXtaRs
r785RHeC87dJltdHDYOgY1pLypAdQdcixKGpLXwvZSAw5cZJutaufD8wBofkizJt
A7qsKvYt5LvYEMymQT3YNw2pwivTRkyHiHW9bOaASDb/bYgziINyAj+HerA3AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUz0K+IHVBqI7IgrWM7R9vPo4HyH4wHwYDVR0j
BBgwFoAUt/l/vSC5x4QaMZvgjKfIuxWyUZ8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNTExM0ZGQ0I1MTA1NkIxNkE3MTMzOTQ0MTYxMjk5NTEz
MzhERjhGOUM3RTMzM0UwMjU4OUY1RDdBMzhCQjIwLzAvQjdGOTdGQkQyMEI5Qzc4
NDFBMzE5QkUwOENBN0M4QkIxNUIyNTE5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0Y5N0ZCRDIwQjlDNzg0MUEz
MTlCRTA4Q0E3QzhCQjE1QjI1MTlGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTUxMTNGRkNCNTEwNTZCMTZBNzEzMzk0NDE2MTI5OTUxMzM4REY4RjlD
N0UzMzNFMDI1ODlGNUQ3QTM4QkIyMC8wLzMyMzAzMDMxM2EzMTMyMzAzNjNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzgzNDM2MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARIGMA0G
CSqGSIb3DQEBCwUAA4IBAQBT6gX4+q+5ZkFuzoBXMe679KGrvkt8u2b7mMxwMDNy
nN8fR+nArVhqcara3z7wavLR7bwbgU7XFoNfc2zWeIPa3C0QupQ9nV8+NsbOvjpr
I/h0i3F3c99c54r2wKxtKyUGNRgdiE8N3oe/JKC6T1pH9SVt+Drg8hXXCAWYBqff
PlMjsB64ISkX5GldTHZwPkueo+RhEqO7i3JveZ3G/wjv3a9VOIrMGGAyt84VNEBx
ngukl8Ir0+CNUd3qaaDU5dxa9PdRTe6fR2e1K6RKorNOCokrpMVlJLfJpWQCIgcC
zIFDzODuTnZ2nvccoV5D3Jpvjw9EHKGzDNnbFBVP/BJ3
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:07:05 2026 by rpki-client