Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a31363a3a2f34372d3437203d3e203237383238.roa
File:                     323830313a3130343a31363a3a2f34372d3437203d3e203237383238.roa (raw, json)
Hash identifier:          yqV/S1IUy5dxOg1LOpecup2Dypu+Up4q8hVlq5cPUOY=
Subject key identifier:   61:5C:94:09:65:12:84:19:7D:20:0A:88:CD:92:7E:B9:10:91:B5:C9
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       557ED8728CAA961AFC8BD024E37DA6D2C7FB5642
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a31363a3a2f34372d3437203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 20:50:00 +0000
ROA not before:           Fri 27 Mar 2026 20:45:00 +0000
ROA not after:            Fri 26 Mar 2027 20:50:00 +0000
asID:                     27828
IP address blocks:        2801:104:16::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7e:d8:72:8c:aa:96:1a:fc:8b:d0:24:e3:7d:a6:d2:c7:fb:56:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 20:45:00 2026 GMT
            Not After : Mar 26 20:50:00 2027 GMT
        Subject: CN=615C9409651284197D200A88CD927EB91091B5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:12:8d:14:06:3d:e2:b5:b5:d5:ad:90:cc:
                    68:66:66:97:b7:cd:2c:ae:03:88:99:18:a9:ad:3c:
                    3a:46:a4:95:0e:d5:a9:69:bd:bc:a7:c4:d0:5e:98:
                    70:88:5f:82:b0:7d:04:e3:b5:8e:53:1a:2c:5d:e6:
                    8c:f5:6b:31:c0:21:96:5b:a6:ef:81:97:56:93:04:
                    e2:18:2f:d3:68:23:9a:55:62:fe:d3:bf:3b:e0:18:
                    4d:56:ba:68:e4:97:06:e3:79:89:68:07:ac:d7:18:
                    a6:4b:b0:a6:c2:ad:13:10:e3:df:10:f7:9f:2a:e0:
                    fb:72:65:20:ee:ce:58:2c:0f:32:46:84:d7:af:86:
                    b6:03:36:30:a9:bb:98:16:73:2f:0c:a5:c7:6b:80:
                    87:e4:5a:4d:41:b5:e8:4d:a7:1f:a3:ff:66:f0:5e:
                    96:c1:ea:7f:29:43:63:2d:28:ab:21:80:6e:56:ba:
                    0c:f9:be:76:2a:bf:88:8f:8c:36:4c:51:ad:d0:ef:
                    63:fc:8e:e2:82:c4:6e:0a:7a:23:0b:88:c3:8f:14:
                    b5:af:02:76:b6:05:c4:d9:55:70:a4:e8:dd:69:92:
                    1c:0e:2b:4d:66:a0:49:05:ad:e1:68:35:c5:7b:8f:
                    1d:18:2c:99:fd:d5:63:b8:8d:12:ff:2b:78:6b:1d:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5C:94:09:65:12:84:19:7D:20:0A:88:CD:92:7E:B9:10:91:B5:C9
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a31363a3a2f34372d3437203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:16::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:46:bd:be:37:45:d8:73:51:5f:09:0d:a8:64:92:d7:3a:
         72:b8:0f:c5:77:f2:5f:68:b4:4f:b0:be:ff:e3:5c:2e:e3:14:
         97:b7:3f:e2:91:b5:65:95:cf:71:93:2e:bc:7b:14:5a:75:c9:
         7b:2e:0d:61:39:ec:fd:67:b2:28:e1:af:8b:33:26:61:e0:ff:
         b8:59:b5:d0:75:89:72:a3:04:cf:25:e5:e5:87:47:66:19:28:
         a9:c9:63:34:54:1d:fc:83:34:df:b9:44:3b:fa:9c:29:63:83:
         10:f3:23:eb:36:a4:1b:e1:94:9b:e1:d4:ab:de:40:d8:1d:f0:
         30:a4:4e:29:9c:ca:29:7d:39:96:35:88:24:37:43:c3:f2:85:
         ad:f7:d0:0c:a6:cf:48:c5:cc:26:e8:ac:8a:3f:68:14:93:ae:
         60:1f:69:7c:3e:2f:85:e7:72:fd:18:30:61:30:63:7d:6d:4f:
         96:54:b6:3d:01:cc:72:90:a0:0e:07:24:5b:ac:d1:71:c7:32:
         5b:1e:4f:67:d4:e7:e4:8e:e9:cc:9e:60:45:f8:ef:4c:83:38:
         83:a4:cd:1b:55:7a:99:d0:9e:8c:a5:a9:ab:c7:b1:99:18:1d:
         83:7d:96:c0:ba:2f:7e:2f:3a:d4:24:a3:b7:bd:3d:00:3c:33:
         d7:08:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:50 2026 by rpki-client