Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3430203d3e203237383238.roa
File:                     323830313a3130343a3a2f34302d3430203d3e203237383238.roa (raw, json)
Hash identifier:          BcQwn12d2i+q0pCSPRSDdAVv/9HeYRtQQ7WGAXEO3NM=
Subject key identifier:   9D:E2:7D:94:74:32:76:F1:BB:BE:4B:E5:06:DA:1A:03:20:FC:81:B5
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       094E262C9E10B675F23AD6F75F5A5654E281D5C6
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3430203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 20:50:01 +0000
ROA not before:           Fri 27 Mar 2026 20:45:01 +0000
ROA not after:            Fri 26 Mar 2027 20:50:01 +0000
asID:                     27828
IP address blocks:        2801:104::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4e:26:2c:9e:10:b6:75:f2:3a:d6:f7:5f:5a:56:54:e2:81:d5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 20:45:01 2026 GMT
            Not After : Mar 26 20:50:01 2027 GMT
        Subject: CN=9DE27D94743276F1BBBE4BE506DA1A0320FC81B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:37:26:5b:22:5b:f0:ad:d1:3d:d1:73:23:
                    b5:91:4b:29:d7:35:67:57:d1:2f:f4:82:0f:84:49:
                    6b:aa:aa:06:a1:58:5d:10:26:5d:5e:28:15:99:74:
                    f9:e2:70:2b:18:b8:6e:61:22:8c:d0:9f:06:03:9a:
                    3e:9a:b7:05:53:74:1d:a4:30:65:92:a4:5a:fd:b6:
                    c0:10:e5:4c:c5:ba:f9:31:3c:93:54:44:d6:dc:18:
                    eb:3d:0a:d0:fb:2a:6e:25:6b:bd:f4:76:1a:91:d7:
                    b8:51:bc:77:ad:a0:df:af:0a:6a:35:58:9b:7b:1d:
                    74:5b:4c:ea:b1:3f:cd:9c:aa:93:b4:16:ff:ad:73:
                    a7:e2:bc:a4:8f:e5:6a:b4:55:ec:dc:d2:69:47:db:
                    ac:5d:49:34:28:3e:a0:6f:33:18:e7:b2:62:e9:b9:
                    34:a0:3c:ea:f1:09:8c:a3:d6:c5:47:fd:7f:86:b1:
                    58:d0:c0:cb:bd:30:0d:c0:d9:64:08:78:88:c6:13:
                    b1:0f:bc:82:50:aa:a1:3c:6c:d5:a9:f4:02:58:5e:
                    03:01:f9:1e:2c:9d:ca:27:3c:58:f8:26:2b:99:37:
                    e8:ab:fc:89:e1:09:45:33:84:43:50:a5:68:dd:78:
                    fb:83:25:33:5f:20:f6:b3:5f:e6:c1:12:29:fa:b1:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E2:7D:94:74:32:76:F1:BB:BE:4B:E5:06:DA:1A:03:20:FC:81:B5
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3430203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:3a:5d:45:10:b7:a3:4b:3f:15:b6:9f:cc:b0:4d:08:c8:
         59:95:15:6b:7f:dc:51:d0:b8:b5:1b:04:30:59:ab:55:b1:6c:
         f0:25:06:16:53:31:27:c7:4e:b7:2f:44:05:c8:6c:51:9f:51:
         c2:f5:5c:ca:6e:35:24:9e:3f:0e:af:20:0b:4e:bf:e1:a9:e6:
         0a:a1:2b:f0:a7:a0:c0:9b:56:f0:8d:6c:2a:ce:21:ce:71:3b:
         f3:d5:09:78:58:26:17:20:bd:6b:43:80:e5:c5:b7:a4:1a:5b:
         b3:6b:4a:38:2b:fd:98:26:83:ff:da:52:ac:b3:27:85:68:bb:
         49:53:01:b5:ae:d8:ac:2e:43:95:56:3c:74:8b:65:5f:37:77:
         00:0c:79:9a:44:18:b5:b3:27:b8:9b:8a:13:28:4b:e1:86:b9:
         29:c3:45:64:53:e2:0a:8b:d4:d4:20:75:74:f4:ec:2a:8a:d5:
         41:ca:bc:b9:ad:4a:5d:ff:c5:d8:fb:e8:6f:35:48:30:59:ad:
         c0:ec:fd:4a:9d:d1:f7:fd:53:0f:e9:65:76:fe:9c:55:b8:31:
         fb:84:d1:1e:5f:01:8d:41:2d:77:05:aa:30:9d:05:ae:ac:5a:
         8d:f6:f3:c1:42:9b:e3:6f:32:c9:fd:e8:34:a9:e1:c1:bb:65:
         d1:71:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:29:40 2026 by rpki-client