Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036613a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          +bNA40uHqVybIlx0EDPCU3W7F11ak4xeH8rx30PHJUU=
Subject key identifier:   71:02:8D:D4:84:7B:F6:0D:91:35:64:E3:96:F6:A8:B8:D1:DF:AC:80
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       635AAA3DC12DA5261208FB49F248C5B2CB750DB2
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34382d3438203d3e2033353733.roa
Signing time:             Fri 03 Apr 2026 15:37:24 +0000
ROA not before:           Fri 03 Apr 2026 15:32:24 +0000
ROA not after:            Fri 02 Apr 2027 15:37:24 +0000
asID:                     3573
IP address blocks:        2801:1f0:406a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5a:aa:3d:c1:2d:a5:26:12:08:fb:49:f2:48:c5:b2:cb:75:0d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Apr  3 15:32:24 2026 GMT
            Not After : Apr  2 15:37:24 2027 GMT
        Subject: CN=71028DD4847BF60D913564E396F6A8B8D1DFAC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:ef:62:88:4d:e9:58:db:46:d0:6e:2d:ae:
                    71:45:2f:9c:c7:27:ef:29:ac:7d:e7:63:c8:10:fe:
                    47:72:25:46:1f:9b:79:11:a2:24:a7:21:bd:ce:f2:
                    90:e6:39:9d:20:27:13:d8:08:cc:d7:32:dc:8c:fd:
                    11:08:0d:d8:0e:75:68:03:01:6d:5d:5d:b0:81:01:
                    72:9c:6e:3a:5f:f3:5a:8c:32:d5:f9:6a:2e:2e:67:
                    b6:71:1e:76:e5:01:a1:eb:7e:34:b2:78:99:32:0d:
                    e5:35:b3:cc:2e:cf:c2:1e:42:3a:35:ec:04:fe:d0:
                    7f:66:74:da:db:55:29:30:76:33:1a:98:df:d7:9a:
                    5c:e4:26:8e:fa:4e:ed:5c:46:21:8a:e2:69:d5:15:
                    87:f5:b6:e9:b1:d2:dc:da:d7:60:c6:ec:81:dd:11:
                    dc:cb:21:ab:5e:48:33:11:2b:18:ac:be:d1:f7:8e:
                    10:ea:18:4e:d9:79:b2:c5:eb:94:a1:dc:63:ee:6a:
                    c7:0d:c4:04:84:f4:78:d8:29:70:0d:70:5d:f1:25:
                    20:9b:80:b3:51:71:43:23:bb:bc:20:1a:22:66:75:
                    b6:4c:7a:aa:75:d3:1d:7f:25:10:d5:75:fd:f8:c6:
                    55:f5:bd:7e:b5:27:27:eb:e7:9b:f5:22:7e:4b:e0:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:02:8D:D4:84:7B:F6:0D:91:35:64:E3:96:F6:A8:B8:D1:DF:AC:80
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036613a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406a::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:7a:f4:f5:16:30:09:6d:9c:86:89:ad:61:4e:35:9d:30:48:
         ee:45:02:b5:6d:be:fd:63:38:89:ed:f3:6c:72:0d:fb:c9:1c:
         d6:b3:e9:02:4e:9f:83:64:e9:4f:81:69:09:57:94:af:27:9f:
         fa:c3:8b:79:f4:9d:27:a5:c6:7f:ff:eb:d5:a4:03:0f:cb:9b:
         5f:33:f8:90:c6:32:42:7d:cb:bf:f1:fe:d2:92:7e:28:59:2c:
         92:b4:0a:01:c9:04:80:f9:d6:d9:d8:cc:53:d4:a5:e0:ef:f9:
         3f:1c:6a:d9:48:fb:0b:91:e1:1e:97:8c:82:fb:31:51:4e:1b:
         44:6f:cc:87:9f:a9:7b:96:bb:06:ad:a1:2b:1a:2e:2d:99:42:
         fa:c6:7a:22:af:bd:dc:e3:a6:70:06:ca:5c:ab:92:06:91:d0:
         0a:b2:4e:e1:ad:87:15:ef:99:bc:3e:2a:88:67:56:76:fe:1c:
         22:27:23:d9:5c:54:3f:57:39:64:e1:4a:e3:9c:55:b9:5f:47:
         b1:d3:dd:92:c0:26:d7:c3:9b:8f:f8:e5:99:fd:13:ef:e1:fc:
         87:3f:86:8c:87:16:fe:c4:81:35:00:67:c6:b9:91:0f:7c:c7:
         c9:be:4b:fd:99:04:d2:c7:84:17:bb:b6:ee:c6:29:5e:ab:d8:
         c9:34:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:44:56 2026 by rpki-client