Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a34303a3a2f34342d3434203d3e20323734303236.roa
File:                     323830313a3130343a34303a3a2f34342d3434203d3e20323734303236.roa (raw, json)
Hash identifier:          uio1j+7GtE56ujZooZNnHJkZN3uGJswLm+4WJ7uGp5k=
Subject key identifier:   6E:82:68:F8:5D:04:CD:C0:0A:6A:8B:94:88:ED:87:11:7C:9D:8C:05
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       74E8F11273DEFBBEEACB7D24576155F27E075F5B
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a34303a3a2f34342d3434203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:40:01 +0000
ROA not before:           Fri 27 Mar 2026 19:35:01 +0000
ROA not after:            Fri 26 Mar 2027 19:40:01 +0000
asID:                     274026
IP address blocks:        2801:104:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e8:f1:12:73:de:fb:be:ea:cb:7d:24:57:61:55:f2:7e:07:5f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:35:01 2026 GMT
            Not After : Mar 26 19:40:01 2027 GMT
        Subject: CN=6E8268F85D04CDC00A6A8B9488ED87117C9D8C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:dd:b3:e1:df:44:0c:86:a9:42:7b:2f:18:
                    5d:92:e8:35:6d:de:b9:65:6f:8f:21:47:08:92:ed:
                    26:b2:05:69:fe:69:f8:26:6a:76:a5:43:0e:eb:18:
                    80:66:5e:ac:66:38:61:38:cc:9f:da:62:e4:51:8e:
                    e2:ac:fa:6d:ea:7f:70:d9:7b:f6:4f:8f:3e:ef:86:
                    a2:24:f6:42:2b:9a:75:66:2f:eb:71:72:4a:d7:b4:
                    40:3b:5f:6c:7d:15:f4:18:e4:30:a1:7a:ca:46:c1:
                    90:6b:1a:40:7e:df:96:fb:9d:c6:86:2d:4a:eb:f3:
                    19:fd:31:38:be:ec:e8:19:5d:32:06:ef:59:63:5c:
                    97:2c:a1:8a:e0:82:17:d0:9d:81:e2:2f:76:a2:29:
                    ea:3d:c5:44:e0:32:6a:ca:1a:6b:c9:c5:66:37:b6:
                    e1:55:1e:99:9b:33:74:16:18:bb:4d:4a:01:2e:1e:
                    c6:de:ab:12:56:e1:31:a9:15:c5:33:76:cc:f4:13:
                    57:8b:e2:be:50:54:49:55:8e:db:93:ca:9a:96:10:
                    d4:4d:ab:56:84:6f:b6:bb:f2:04:57:1c:fc:35:4d:
                    e2:06:f4:c2:74:03:8f:8e:be:47:91:fe:19:c1:e3:
                    f7:b5:56:52:06:65:c1:0a:cd:bf:69:53:eb:b7:72:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:68:F8:5D:04:CD:C0:0A:6A:8B:94:88:ED:87:11:7C:9D:8C:05
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a34303a3a2f34342d3434203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:a7:49:a9:41:7b:bc:b7:3d:de:0f:e9:70:1d:13:25:02:dc:
         48:25:ff:c5:8f:12:65:a2:18:72:c8:26:6e:3a:75:9d:8b:3a:
         65:29:f8:92:20:6b:1c:a4:7c:94:c1:2c:fd:14:3f:89:a8:df:
         ef:a9:8f:e7:cc:bd:f3:9a:29:1e:7c:50:28:38:2d:9d:bd:4c:
         56:2e:19:59:a7:e9:f6:e6:01:67:d9:b9:07:d8:53:71:95:cf:
         7d:10:a2:8b:dd:34:17:44:89:9a:8f:5d:96:f0:34:e7:0f:18:
         dc:85:77:4d:28:4c:15:38:fa:49:d7:c3:ec:b2:5a:c7:99:16:
         94:e2:de:cb:59:ff:a1:6a:7e:88:f4:e0:7c:f4:72:70:bc:28:
         93:e5:a8:3d:b1:75:12:de:39:de:50:78:3d:e6:10:0f:0c:c5:
         06:31:0c:5d:e6:b4:aa:2d:29:bf:9b:ad:af:cc:6d:80:6f:4d:
         8f:fd:24:e8:de:c0:7d:7e:ba:a8:7f:f0:13:19:a2:47:72:87:
         a4:58:9e:f6:ee:77:3a:f6:5a:0c:40:2e:e7:29:10:ce:f5:76:
         67:92:b1:06:59:e0:f4:3d:f1:72:e0:9f:3c:36:90:f5:90:fc:
         67:ad:5d:8c:d2:b4:07:67:35:da:c3:51:2b:2f:4e:5b:b6:9e:
         fa:1f:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:44 2026 by rpki-client