Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a63303a3a2f34372d3437203d3e203237383238.roa
File:                     323830313a3130343a63303a3a2f34372d3437203d3e203237383238.roa (raw, json)
Hash identifier:          bg/UZ+JKZIJoBhj6QOwqZcnLt8NEnCr12mZA+mu9GLs=
Subject key identifier:   C5:95:1A:B3:7B:34:D2:00:43:75:A6:65:C5:17:1B:D9:5B:C2:38:2A
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       08DF38F6811505C758D975FA07F4506A6977AE0A
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a63303a3a2f34372d3437203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 20:50:00 +0000
ROA not before:           Fri 27 Mar 2026 20:45:00 +0000
ROA not after:            Fri 26 Mar 2027 20:50:00 +0000
asID:                     27828
IP address blocks:        2801:104:c0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:df:38:f6:81:15:05:c7:58:d9:75:fa:07:f4:50:6a:69:77:ae:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 20:45:00 2026 GMT
            Not After : Mar 26 20:50:00 2027 GMT
        Subject: CN=C5951AB37B34D2004375A665C5171BD95BC2382A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4e:4a:91:54:ba:4d:2a:69:6b:0f:ff:70:de:
                    51:39:92:e2:ce:60:40:61:df:b6:e0:d5:fc:cf:ab:
                    e3:7c:46:b4:39:68:7f:0c:22:4e:69:41:61:f5:54:
                    85:04:40:70:05:4e:8c:fb:e3:a9:4a:19:58:19:fc:
                    4c:5c:22:84:4f:a9:6a:54:42:1a:93:38:ba:fc:20:
                    51:c5:c3:29:8e:c1:24:00:11:e7:99:ee:f0:81:ee:
                    5a:b2:77:c6:4e:b6:6e:7c:4c:2c:47:75:1c:c8:c6:
                    18:6d:c5:1f:02:47:44:76:c0:d3:94:4b:68:39:d9:
                    f7:02:72:1a:00:a1:5e:b9:0f:a4:70:bd:b9:ec:35:
                    bb:22:34:b0:c1:51:fe:d9:33:2c:a4:4e:d8:ef:7c:
                    c0:a3:1d:c3:b9:b8:a6:46:c6:f4:71:ce:67:e5:40:
                    a4:14:6f:b8:fb:ae:b1:b2:3d:96:35:28:c7:ed:21:
                    1f:5d:fd:b5:7e:e6:85:7f:ae:9d:5a:51:83:81:26:
                    63:4c:60:ea:e7:80:48:8e:69:ea:11:40:18:4b:2d:
                    7d:a4:46:fe:7c:eb:b7:b6:3e:06:0c:f5:4a:1c:6a:
                    ce:23:74:5b:b5:36:9f:f7:76:38:14:f1:cc:b4:3b:
                    9b:96:36:e0:3a:ba:0e:f1:da:58:5a:cb:97:1f:82:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:95:1A:B3:7B:34:D2:00:43:75:A6:65:C5:17:1B:D9:5B:C2:38:2A
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a63303a3a2f34372d3437203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:32:52:11:c9:4b:d9:98:d6:d0:20:8f:b8:dc:cb:c8:ab:16:
         5f:ee:7b:e3:b8:af:ec:ef:90:fe:61:de:4a:b8:c2:c5:4b:09:
         f0:05:da:37:86:4c:ca:86:b3:80:e9:af:d5:49:80:fe:0d:7e:
         ea:85:3b:06:43:22:5b:f1:a8:3f:97:9d:be:6a:c7:02:c0:6b:
         eb:d6:f0:42:08:07:68:f5:63:86:79:58:33:d0:73:7b:3c:00:
         b1:56:88:dd:d3:fd:f3:7c:d1:cf:a6:0f:7b:35:4b:bc:05:9c:
         69:e4:9a:0e:f6:66:19:69:34:e7:5e:24:ca:a9:3e:7b:d9:bc:
         eb:ef:d2:7c:33:2c:90:88:11:40:7d:39:38:31:51:d3:ea:ed:
         95:23:a9:4e:11:52:0c:b0:c4:cb:a7:ae:49:72:a8:03:22:38:
         ba:2e:14:99:df:fa:07:05:a4:73:c5:41:24:f1:c3:b9:c3:60:
         12:6f:f8:35:3a:fe:6e:e0:0c:83:bf:49:26:f5:6d:f4:94:a1:
         71:c9:68:dc:15:ae:31:d9:e2:8e:32:7f:d7:33:04:e7:13:e2:
         4b:99:8b:f0:b5:83:e4:11:f6:33:e0:22:ec:4f:48:f9:0c:80:
         a4:74:0f:d8:7f:5f:c9:90:62:4c:68:4c:8e:4b:d9:2b:a6:4e:
         fe:e7:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:21 2026 by rpki-client