Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a31363a3a2f34372d3437203d3e20323734303236.roa
File:                     323830313a3130343a31363a3a2f34372d3437203d3e20323734303236.roa (raw, json)
Hash identifier:          9Bdo3du2zfcDUlzM9hcnpTHG6E0xGDKH9QKVXZvXeIc=
Subject key identifier:   02:E5:A5:56:8A:52:B5:69:35:13:50:AA:31:15:A2:45:26:AC:99:48
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       7922489FFEFF290023F5C48B97AF40EA04140E61
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a31363a3a2f34372d3437203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:40:00 +0000
ROA not before:           Fri 27 Mar 2026 19:35:00 +0000
ROA not after:            Fri 26 Mar 2027 19:40:00 +0000
asID:                     274026
IP address blocks:        2801:104:16::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:22:48:9f:fe:ff:29:00:23:f5:c4:8b:97:af:40:ea:04:14:0e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:35:00 2026 GMT
            Not After : Mar 26 19:40:00 2027 GMT
        Subject: CN=02E5A5568A52B569351350AA3115A24526AC9948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:04:1d:7f:a7:b2:cd:06:4f:07:5a:80:72:
                    24:1d:1f:29:d8:c5:c7:97:b2:06:1c:cc:b9:fe:37:
                    8f:44:34:6b:bb:ca:d6:53:e9:75:bf:59:63:5b:bb:
                    50:c0:22:d0:aa:c9:b7:7a:cc:5c:46:fc:dc:4a:99:
                    94:20:80:90:0b:e3:89:bf:d3:82:f2:96:73:83:87:
                    11:dc:91:38:7b:cd:a1:d7:c9:54:29:a0:51:f1:20:
                    2e:b7:31:97:3f:3b:09:80:b3:34:ea:d7:c9:6d:d5:
                    90:dd:89:c0:e6:db:ae:9b:57:f9:24:ff:0f:dc:23:
                    2b:1a:94:13:b0:92:35:46:ef:c6:e9:3b:9c:33:fe:
                    98:7f:65:f8:5c:35:5f:28:27:d1:45:91:e7:84:f4:
                    97:56:40:19:f8:1d:4c:1c:07:fa:46:8e:71:68:3f:
                    d6:8c:18:af:73:30:db:43:8f:f3:b5:a7:b8:cb:3f:
                    4d:fa:e7:0f:8a:4b:47:e1:3a:e4:54:f5:15:f6:50:
                    7d:78:a5:11:e7:7f:a4:5d:e6:9c:e4:61:57:ea:b2:
                    cd:6a:1d:82:57:79:fa:74:29:48:36:0c:7c:bd:03:
                    59:c7:b9:2b:23:a3:3b:c3:29:79:f9:b0:18:c5:14:
                    bc:b6:ac:ed:b9:a8:12:67:4f:1b:a6:47:62:a9:ee:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E5:A5:56:8A:52:B5:69:35:13:50:AA:31:15:A2:45:26:AC:99:48
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a31363a3a2f34372d3437203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:16::/47

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:5a:2a:7e:ac:bd:c0:5e:72:41:5c:ce:36:fc:61:0e:26:
         24:fd:53:6b:ce:18:b8:ad:34:5a:47:b0:00:6f:29:32:32:3a:
         1f:20:ec:10:fd:87:e4:43:d2:b0:66:95:22:52:45:16:eb:c9:
         7b:13:3d:79:8e:e7:fb:06:98:a1:4b:0b:08:5b:63:3f:a5:e5:
         59:ee:07:f1:f1:1c:4b:e6:c3:be:74:fe:b0:8d:b4:5b:fd:2b:
         45:13:25:66:94:18:cf:ea:e6:fe:1c:45:18:ce:0b:3b:bc:95:
         cf:57:0b:1c:44:62:aa:92:ce:f9:7f:89:a8:e8:b3:af:a0:cf:
         b4:63:58:77:82:95:7b:35:96:9f:b1:2f:df:65:39:fb:87:79:
         84:51:06:0c:ed:79:d8:da:51:cf:72:4f:2f:97:76:11:22:5e:
         68:5a:44:30:16:64:19:99:e6:18:08:1b:00:35:d4:11:79:95:
         1c:fb:12:b2:1b:b7:30:cd:fb:85:b7:30:48:b2:35:53:f6:52:
         82:33:a8:77:2b:83:e7:3a:2b:c5:c2:eb:92:7a:93:79:a8:f6:
         1d:7d:13:2d:4d:08:ea:ab:4e:79:ff:1b:21:76:73:46:01:21:
         e1:c5:ce:15:d7:b4:e6:2f:46:e9:b1:f6:64:86:6e:de:39:4f:
         b5:07:0b:81
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUeSJIn/7/KQAj9cSLl69A6gQUDmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxOTM1MDBaFw0yNzAzMjYxOTQwMDBaMDMxMTAvBgNV
BAMTKDAyRTVBNTU2OEE1MkI1NjkzNTEzNTBBQTMxMTVBMjQ1MjZBQzk5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwgQdf6eyzQZPB1qAciQdHynY
xceXsgYczLn+N49ENGu7ytZT6XW/WWNbu1DAItCqybd6zFxG/NxKmZQggJAL44m/
04LylnODhxHckTh7zaHXyVQpoFHxIC63MZc/OwmAszTq18lt1ZDdicDm266bV/kk
/w/cIysalBOwkjVG78bpO5wz/ph/ZfhcNV8oJ9FFkeeE9JdWQBn4HUwcB/pGjnFo
P9aMGK9zMNtDj/O1p7jLP0365w+KS0fhOuRU9RX2UH14pRHnf6Rd5pzkYVfqss1q
HYJXefp0KUg2DHy9A1nHuSsjozvDKXn5sBjFFLy2rO25qBJnTxumR2Kp7sELAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUAuWlVopStWk1E1CqMRWiRSasmUgwHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzgzMDMxM2EzMTMwMzQzYTMxMzYz
YTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMjM3MzQzMDMyMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEo
AQEEABYwDQYJKoZIhvcNAQELBQADggEBAEP9Wip+rL3AXnJBXM42/GEOJiT9U2vO
GLitNFpHsABvKTIyOh8g7BD9h+RD0rBmlSJSRRbryXsTPXmO5/sGmKFLCwhbYz+l
5VnuB/HxHEvmw750/rCNtFv9K0UTJWaUGM/q5v4cRRjOCzu8lc9XCxxEYqqSzvl/
iajos6+gz7RjWHeClXs1lp+xL99lOfuHeYRRBgztedjaUc9yTy+XdhEiXmhaRDAW
ZBmZ5hgIGwA11BF5lRz7ErIbtzDN+4W3MEiyNVP2UoIzqHcrg+c6K8XC65J6k3mo
9h19Ey1NCOqrTnn/GyF2c0YBIeHFzhXXtOYvRumx9mSGbt45T7UHC4E=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:22 2026 by rpki-client