Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa
File:                     323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa (raw, json)
Hash identifier:          YvrE7lOgzs8uC1fbu5Se+MByhePez5ey2bDhG3/HTlk=
Subject key identifier:   DA:23:12:A9:C4:99:7A:E9:AD:0E:4A:D7:AE:AD:0F:33:ED:00:FF:ED
Certificate issuer:       /CN=DD284B15EC8E065D133B2F9315470527232784D4
Certificate serial:       36F5B80FD1C1C70D5EEFB868B26D4095BC97EC27
Authority key identifier: DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa
Signing time:             Mon 02 Mar 2026 06:32:18 +0000
ROA not before:           Mon 02 Mar 2026 06:27:18 +0000
ROA not after:            Mon 01 Mar 2027 06:32:18 +0000
asID:                     28000
IP address blocks:        2801:17:7800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 15:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f5:b8:0f:d1:c1:c7:0d:5e:ef:b8:68:b2:6d:40:95:bc:97:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD284B15EC8E065D133B2F9315470527232784D4
        Validity
            Not Before: Mar  2 06:27:18 2026 GMT
            Not After : Mar  1 06:32:18 2027 GMT
        Subject: CN=DA2312A9C4997AE9AD0E4AD7AEAD0F33ED00FFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:5c:db:f1:0c:4f:72:01:7c:c4:fa:77:58:
                    c2:c3:5d:7e:21:39:2d:e2:7c:5d:7a:cb:cf:ee:07:
                    0b:17:8c:6c:e2:9d:8e:5a:b4:a6:1e:71:03:88:16:
                    f9:13:a9:53:30:08:97:eb:0f:e2:82:6d:31:ca:29:
                    d7:68:1b:d3:d2:32:c6:ee:3e:55:86:f9:d6:b1:ea:
                    c5:fc:a9:57:65:e0:de:63:b4:68:f5:5f:a3:87:81:
                    08:58:dd:ea:a7:ed:a8:c0:fb:39:d8:b6:c7:a7:b5:
                    02:df:3c:f1:c6:a3:16:24:67:2f:dc:4e:2a:79:c0:
                    69:e1:98:19:ae:c3:57:64:21:7a:d6:c0:34:25:34:
                    c8:3b:cb:7a:e4:a2:ff:cd:53:77:37:3b:b1:5b:6d:
                    0e:e7:fb:39:d4:b3:7f:89:d8:dc:e6:6b:f7:bc:43:
                    00:3a:6d:b8:9c:1b:3e:33:f5:84:17:c4:4e:7f:bd:
                    13:73:9d:45:82:97:3c:41:32:5f:64:19:dd:14:0c:
                    6a:6f:4e:a0:d4:6b:48:25:69:13:25:9d:e9:c8:e4:
                    f3:45:98:e8:38:a0:d2:ff:7b:40:8b:31:fb:65:e8:
                    fe:39:69:29:2a:7c:49:98:d3:76:53:0b:9d:68:4c:
                    49:58:22:62:64:45:ae:60:2f:fd:1d:00:9b:b1:0b:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:23:12:A9:C4:99:7A:E9:AD:0E:4A:D7:AE:AD:0F:33:ED:00:FF:ED
            X509v3 Authority Key Identifier:
                keyid:DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:c2:19:40:77:68:19:1e:a1:aa:78:7c:29:74:8c:c1:07:
         86:5d:7d:87:e9:c5:c5:24:db:36:9a:29:77:0e:81:dc:be:c3:
         1b:0c:75:49:f0:b2:75:30:35:42:76:0f:37:20:a2:60:49:67:
         d2:3c:9d:72:4b:b9:9a:68:3d:71:41:37:26:b5:90:93:db:c6:
         57:68:83:4a:7d:82:20:fc:75:0f:6b:95:5f:d6:f2:66:06:0f:
         9a:79:8d:cc:d4:66:15:6f:aa:da:0f:93:76:07:1e:cc:09:a1:
         8e:e7:ec:44:71:c9:ed:8b:95:b1:1e:ed:01:c5:e8:4f:17:fc:
         da:d8:45:76:01:c0:c9:37:b6:13:12:76:70:1c:97:fa:50:cd:
         aa:8d:df:3e:e1:9f:f2:b7:da:26:6c:74:c0:b3:40:85:08:8a:
         c4:72:a8:6d:69:0c:cd:81:54:3b:00:1e:e4:dc:1d:7e:29:46:
         04:be:87:b5:6a:5f:49:0f:8c:40:24:ea:f1:b3:14:ee:0e:2c:
         55:96:59:e2:6c:2c:92:e6:8d:2f:16:91:9a:ec:37:c0:1a:39:
         4e:ca:b8:2e:b7:66:97:cc:1f:c6:4e:2c:4e:a2:6e:dc:df:01:
         26:f1:bc:a8:0d:fc:10:a2:8b:93:19:18:f9:ac:9c:07:84:af:
         6e:5d:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:01:46 2026 by rpki-client