Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a61363a3a2f34372d3437203d3e203237383238.roa
File:                     323830313a3130343a61363a3a2f34372d3437203d3e203237383238.roa (raw, json)
Hash identifier:          lLlUvi2mtYmG+exCOvrosE3oGoDVP4yH5QMiEeTMIww=
Subject key identifier:   50:AA:1B:8E:41:3C:09:85:87:6C:8F:BD:09:05:94:01:19:33:AC:BA
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       67D363A01B9B7317D08773A944B9EE09942F6689
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a61363a3a2f34372d3437203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 20:55:00 +0000
ROA not before:           Fri 27 Mar 2026 20:50:00 +0000
ROA not after:            Fri 26 Mar 2027 20:55:00 +0000
asID:                     27828
IP address blocks:        2801:104:a6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d3:63:a0:1b:9b:73:17:d0:87:73:a9:44:b9:ee:09:94:2f:66:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 20:50:00 2026 GMT
            Not After : Mar 26 20:55:00 2027 GMT
        Subject: CN=50AA1B8E413C0985876C8FBD090594011933ACBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:1f:57:9c:4b:87:80:05:ea:a8:ff:a1:78:
                    f4:f8:c8:23:aa:0f:f3:77:0c:c7:84:9c:7c:13:93:
                    f7:07:44:17:3a:22:d1:fd:ed:bf:bf:c1:d9:50:df:
                    c5:15:d5:77:ba:f6:36:4e:d5:c5:95:5c:f1:e6:ea:
                    47:e8:9c:28:d7:7c:f8:50:b5:ae:45:44:22:92:2f:
                    e6:62:e3:f4:4c:1e:4f:73:b0:69:34:36:9a:c5:5a:
                    15:27:89:bf:30:be:9b:4c:33:ba:d5:7c:6f:81:56:
                    bb:15:d1:00:11:44:71:0a:55:a7:bf:5b:6e:87:54:
                    6a:c9:cc:4a:81:57:77:6a:2f:1a:a4:e2:d2:60:8e:
                    a7:5e:ac:e5:df:23:a5:67:1f:55:c2:fe:ca:ba:22:
                    be:9c:a8:77:58:da:3d:a4:2a:3e:dd:30:35:aa:ad:
                    ba:e4:70:fc:66:98:ff:95:ff:d5:cc:35:83:79:0d:
                    d1:6b:4e:82:b4:5f:91:e5:11:a4:cb:09:2a:26:f7:
                    bb:47:15:20:94:bf:76:bf:53:27:b2:5b:b3:2a:0b:
                    dd:33:c3:2e:2b:ed:88:41:ef:c5:98:b7:66:5b:af:
                    de:77:53:b5:cd:ae:66:15:cc:6f:43:d4:f2:f8:5e:
                    f2:a7:ba:33:c8:7d:49:60:ca:dc:4e:f6:92:71:d0:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:1B:8E:41:3C:09:85:87:6C:8F:BD:09:05:94:01:19:33:AC:BA
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a61363a3a2f34372d3437203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:a6::/47

    Signature Algorithm: sha256WithRSAEncryption
         87:45:49:97:8d:2d:3c:46:5f:ea:23:86:b5:05:03:2c:85:18:
         57:e8:24:58:e6:e8:06:cc:97:15:50:76:38:a3:e4:53:7b:63:
         de:03:8e:50:15:5f:d3:02:01:55:25:39:1f:dd:29:15:e6:c9:
         52:97:b6:a2:5c:a2:34:17:f6:0c:5d:ae:15:fe:e2:1a:1f:66:
         8b:54:a0:6d:3c:42:dc:bd:62:43:98:ee:c3:61:91:90:5d:01:
         98:3e:a0:37:35:b3:e4:a7:6d:3b:20:aa:e0:12:19:91:e5:2e:
         7f:00:c1:00:0d:d6:56:ca:d6:17:1e:f0:e3:16:61:ca:80:b4:
         6a:51:4d:69:93:2c:99:f7:62:9e:bc:7d:4a:a5:cb:f2:c6:0c:
         d1:25:da:34:2f:7f:a7:89:32:95:cc:6c:9f:95:ee:14:ba:c4:
         26:96:86:3a:a1:88:f8:c4:22:9e:28:ff:62:ff:d7:8c:b6:65:
         b8:2e:6d:0f:d7:dc:f8:9d:ba:5c:f0:9b:ec:30:86:6a:c7:a6:
         bd:08:98:bf:93:32:71:86:cc:0c:b1:5b:58:49:a5:37:2f:03:
         96:84:f4:a1:21:61:9e:f3:2d:2a:28:c5:fb:e8:d0:50:f6:40:
         bb:6f:c5:c8:30:c1:0e:7c:d8:a1:84:c5:8b:23:f6:23:5d:bb:
         55:d1:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:16 2026 by rpki-client