Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a383a3a2f34372d3437203d3e20323734303236.roa
File:                     323830313a3130343a383a3a2f34372d3437203d3e20323734303236.roa (raw, json)
Hash identifier:          HOgv1vwA691jjaZ3GdPj42dT2FxbVNo04Gv1NsoS3yI=
Subject key identifier:   59:79:9B:60:C7:D8:67:1B:1B:0C:1A:08:91:6E:D5:89:A4:AC:12:9F
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       10FD6486B4CFA91F794F6A2275B0D5DD8A5E9B32
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a383a3a2f34372d3437203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:40:02 +0000
ROA not before:           Fri 27 Mar 2026 19:35:02 +0000
ROA not after:            Fri 26 Mar 2027 19:40:02 +0000
asID:                     274026
IP address blocks:        2801:104:8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fd:64:86:b4:cf:a9:1f:79:4f:6a:22:75:b0:d5:dd:8a:5e:9b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:35:02 2026 GMT
            Not After : Mar 26 19:40:02 2027 GMT
        Subject: CN=59799B60C7D8671B1B0C1A08916ED589A4AC129F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:e0:34:c1:ee:7b:24:d6:a0:44:d8:e6:96:
                    8f:e7:c7:28:10:e0:33:c3:8c:78:02:33:81:b8:9c:
                    ae:cf:b5:45:56:7c:2c:95:ef:f5:6d:26:be:09:df:
                    17:bc:1b:86:ab:ee:4c:06:fd:b0:1c:15:e9:47:fd:
                    96:84:62:bd:e7:b2:24:fc:89:0e:e0:df:a4:02:f1:
                    4a:25:1f:c4:64:44:79:4a:e3:78:f9:f8:ae:d0:85:
                    f9:2e:51:32:dd:69:5c:31:0c:87:4c:fd:e2:45:02:
                    0d:58:85:d2:68:29:42:f9:37:08:da:42:86:18:81:
                    ba:3d:99:21:6d:a0:c5:14:e9:ef:c2:d1:c3:18:e6:
                    0b:f0:8a:90:8c:f7:4a:02:dc:24:94:88:f6:1e:f9:
                    f7:46:33:63:65:7c:7a:e0:42:45:ae:9c:a6:7d:c4:
                    8e:76:df:a0:89:8a:ac:8a:30:97:39:52:92:78:6b:
                    fe:4f:03:b8:9b:09:12:73:ef:7a:21:fe:33:ce:69:
                    1a:fc:96:2e:04:a4:a5:7b:8d:ad:b1:25:c7:12:55:
                    2b:72:e2:19:cb:b7:cd:0c:fa:27:5f:90:4f:26:3e:
                    4e:3f:8f:89:07:7f:85:c2:2a:3f:d2:70:67:49:cc:
                    29:63:43:6c:cf:16:02:e3:d2:44:84:97:d9:f1:ad:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:9B:60:C7:D8:67:1B:1B:0C:1A:08:91:6E:D5:89:A4:AC:12:9F
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a383a3a2f34372d3437203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:0d:34:3d:9b:50:3b:cb:f9:25:9a:8d:54:4a:3f:b1:6f:
         af:40:7e:8f:be:e7:5a:fd:62:f8:b7:d5:46:3f:2c:08:4d:ab:
         46:54:f2:cd:fe:e9:15:54:0a:bb:2c:11:73:0d:8e:3e:22:21:
         ed:ac:c3:c9:47:ad:2b:92:62:f9:b1:ef:61:73:fd:99:53:c2:
         9f:96:73:ee:2f:ba:c2:7d:82:87:2e:c6:53:8d:10:3b:08:db:
         6d:27:f1:ab:18:00:df:b4:2b:a0:b4:ca:67:3e:55:78:b3:7a:
         7a:cb:d9:c5:1f:0a:60:60:f1:88:db:c4:b9:ba:34:9e:fa:8c:
         94:71:dc:f5:55:4f:1e:b3:d6:9a:56:09:b8:6e:76:94:ad:49:
         b4:64:87:e7:e9:44:08:0a:b9:0c:0e:d1:4c:7b:74:76:bc:d5:
         30:99:43:ae:93:38:92:a4:82:bb:31:d8:a4:30:2e:7c:f9:15:
         2b:ea:1c:e6:1c:62:6c:77:9a:3d:77:2f:41:3a:8a:43:33:13:
         54:f4:d7:05:f6:0c:c5:8f:8e:36:72:2e:f7:4e:7f:82:bb:d7:
         aa:fd:fc:be:04:1b:e4:71:b5:53:c2:a0:4b:97:c6:1c:e0:8f:
         df:3a:d7:7f:ad:6d:80:da:d1:76:71:8b:b6:eb:9a:4a:b8:77:
         8a:21:f1:45
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUEP1khrTPqR95T2oidbDV3YpemzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxOTM1MDJaFw0yNzAzMjYxOTQwMDJaMDMxMTAvBgNV
BAMTKDU5Nzk5QjYwQzdEODY3MUIxQjBDMUEwODkxNkVENTg5QTRBQzEyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4OA0we57JNagRNjmlo/nxygQ
4DPDjHgCM4G4nK7PtUVWfCyV7/VtJr4J3xe8G4ar7kwG/bAcFelH/ZaEYr3nsiT8
iQ7g36QC8UolH8RkRHlK43j5+K7QhfkuUTLdaVwxDIdM/eJFAg1YhdJoKUL5Nwja
QoYYgbo9mSFtoMUU6e/C0cMY5gvwipCM90oC3CSUiPYe+fdGM2NlfHrgQkWunKZ9
xI5236CJiqyKMJc5UpJ4a/5PA7ibCRJz73oh/jPOaRr8li4EpKV7ja2xJccSVSty
4hnLt80M+idfkE8mPk4/j4kHf4XCKj/ScGdJzCljQ2zPFgLj0kSEl9nxrYFxAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUWXmbYMfYZxsbDBoIkW7ViaSsEp8wHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzgzMDMxM2EzMTMwMzQzYTM4M2Ez
YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzNzM0MzAzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAEB
BAAIMA0GCSqGSIb3DQEBCwUAA4IBAQAL1w00PZtQO8v5JZqNVEo/sW+vQH6Pvuda
/WL4t9VGPywITatGVPLN/ukVVAq7LBFzDY4+IiHtrMPJR60rkmL5se9hc/2ZU8Kf
lnPuL7rCfYKHLsZTjRA7CNttJ/GrGADftCugtMpnPlV4s3p6y9nFHwpgYPGI28S5
ujSe+oyUcdz1VU8es9aaVgm4bnaUrUm0ZIfn6UQICrkMDtFMe3R2vNUwmUOukziS
pIK7MdikMC58+RUr6hzmHGJsd5o9dy9BOopDMxNU9NcF9gzFj442ci73Tn+Cu9eq
/fy+BBvkcbVTwqBLl8Yc4I/fOtd/rW2A2tF2cYu265pKuHeKIfFF
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:45 2026 by rpki-client