Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a32303a3a2f34342d3434203d3e203237383238.roa
File:                     323830313a3130343a32303a3a2f34342d3434203d3e203237383238.roa (raw, json)
Hash identifier:          jKFmuQjgxv6q7XQHwMLO5elZLczuQE1rWvRYN/r4GnY=
Subject key identifier:   00:80:22:22:FB:AC:A8:68:80:93:1B:30:3F:3B:8A:A1:5B:7B:7B:A5
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       67ED0FA96F75DBDE2D4830B6A635849EB58FA08D
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a32303a3a2f34342d3434203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 20:50:01 +0000
ROA not before:           Fri 27 Mar 2026 20:45:01 +0000
ROA not after:            Fri 26 Mar 2027 20:50:01 +0000
asID:                     27828
IP address blocks:        2801:104:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ed:0f:a9:6f:75:db:de:2d:48:30:b6:a6:35:84:9e:b5:8f:a0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 20:45:01 2026 GMT
            Not After : Mar 26 20:50:01 2027 GMT
        Subject: CN=00802222FBACA86880931B303F3B8AA15B7B7BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:35:ab:cd:02:fe:34:a4:91:b5:a3:6f:75:
                    43:b4:13:ea:bf:79:3e:ef:45:55:80:84:2b:a8:84:
                    ab:13:26:28:29:18:aa:7c:25:59:ca:67:0c:8a:6a:
                    44:06:12:8e:b2:57:f6:6f:f8:33:9e:69:20:7a:68:
                    89:de:9f:37:ba:4a:77:83:e3:df:a8:db:08:9a:16:
                    c4:de:ee:ce:d4:a4:14:90:e8:81:34:a3:9f:01:19:
                    42:a4:85:b6:92:74:a2:d0:f7:3b:24:f3:7f:29:85:
                    99:5c:45:83:97:84:59:8c:c4:34:b4:8a:5b:fa:e4:
                    5e:3b:ae:aa:4b:e5:0f:98:2b:9e:bb:7a:eb:e0:f0:
                    54:16:a8:9f:0e:d9:61:f3:ce:6e:be:98:b7:09:71:
                    b8:9d:29:be:90:27:44:57:21:82:e1:7d:7b:b7:19:
                    0e:c3:38:a5:66:eb:00:86:b3:16:6d:e0:d0:f3:11:
                    6f:24:d8:be:7c:3e:dd:51:c7:5d:97:d1:85:a2:1b:
                    1c:e0:60:a4:ec:05:17:58:ec:1a:9b:8a:38:95:1f:
                    48:37:dc:bc:6a:81:22:93:42:0e:ef:61:1f:45:89:
                    2a:ca:a6:3e:32:7b:c9:25:cd:de:13:2b:32:1b:e0:
                    1d:90:25:7e:83:69:e5:3c:19:29:1b:c0:fa:0c:15:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:22:22:FB:AC:A8:68:80:93:1B:30:3F:3B:8A:A1:5B:7B:7B:A5
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a32303a3a2f34342d3434203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:73:ae:35:d3:85:60:f0:3e:31:3e:7b:ed:8e:1e:cb:04:af:
         45:de:78:8e:93:a3:09:d0:82:4a:8c:dd:01:77:0e:ff:e5:64:
         e2:45:ea:33:f9:bd:67:24:80:5d:cf:e9:2f:0f:c9:d8:07:b1:
         83:76:81:d9:a3:de:88:ab:f0:bc:0b:ca:fa:0f:af:07:86:14:
         6d:45:c6:af:31:82:8f:ec:b1:d7:3d:93:6e:20:cb:18:8d:d5:
         ed:49:42:01:44:c2:38:a2:47:54:9c:07:e8:78:41:55:30:dc:
         88:59:5f:0c:37:e3:9f:b6:db:57:96:a9:36:cf:08:7c:81:a3:
         3e:9d:b5:ee:3d:c6:44:54:02:b2:a7:d7:e4:e7:d1:2d:76:5f:
         53:93:c8:eb:3a:76:35:58:0c:72:d1:91:b3:1e:d3:ea:64:65:
         d9:af:f6:fb:4a:e4:02:71:93:33:c9:58:42:8a:29:9f:1b:9e:
         0b:1c:8f:63:2e:ea:2e:50:6d:5b:28:49:9a:0d:78:54:1b:02:
         16:77:74:d5:ef:6a:5a:86:b1:51:bd:5c:dd:4f:6f:aa:c6:01:
         e8:52:f6:a1:dd:2f:32:1f:ff:a8:40:ae:bc:3f:1b:7f:81:46:
         7b:44:60:b6:ee:76:2e:15:8f:13:88:00:91:5c:70:58:9c:b1:
         72:a2:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:01 2026 by rpki-client