Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64653a3a2f34372d3437203d3e20323734303236.roa
File:                     323830313a3130343a64653a3a2f34372d3437203d3e20323734303236.roa (raw, json)
Hash identifier:          r+w5ZTO20q7jo+gwuJZ++8n4xrBOGWX5g/mnC9Sgig8=
Subject key identifier:   C2:B5:5B:9E:FE:7B:BA:90:31:3A:F3:89:14:D7:9D:A7:AD:65:10:EE
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       21E4088BF31AF1C27D2511A8D5A47EDFFBE435D5
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64653a3a2f34372d3437203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:40:02 +0000
ROA not before:           Fri 27 Mar 2026 19:35:02 +0000
ROA not after:            Fri 26 Mar 2027 19:40:02 +0000
asID:                     274026
IP address blocks:        2801:104:de::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e4:08:8b:f3:1a:f1:c2:7d:25:11:a8:d5:a4:7e:df:fb:e4:35:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:35:02 2026 GMT
            Not After : Mar 26 19:40:02 2027 GMT
        Subject: CN=C2B55B9EFE7BBA90313AF38914D79DA7AD6510EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:f3:55:ba:1a:c9:fc:f8:d5:70:7a:fe:8a:
                    73:80:bf:30:a3:91:fc:00:4e:6c:85:98:50:8a:16:
                    cc:97:0b:84:e4:f4:11:a2:c1:e2:32:96:ec:67:11:
                    60:d5:45:76:4c:7a:58:c8:a6:dc:9e:c3:f5:d2:37:
                    b7:d8:0c:51:f8:dd:59:cb:2e:b8:6d:54:d7:10:48:
                    5f:2a:4e:5a:2d:25:f1:8a:38:65:6f:2f:2d:60:fe:
                    a7:13:56:f9:15:87:98:83:f4:be:20:90:07:e9:5b:
                    56:40:3c:30:89:7b:b9:cd:dc:ab:0b:c4:d9:89:7e:
                    2f:d7:9f:0c:5b:aa:fe:a6:99:45:f1:48:7a:44:72:
                    19:10:2e:36:da:af:30:15:0d:73:bb:aa:45:c6:39:
                    76:06:06:13:b1:44:91:81:21:78:e1:06:ac:68:4c:
                    f5:dc:b8:bc:15:f5:5d:80:0a:e4:b2:18:3d:66:dd:
                    eb:ee:c4:bc:92:64:a7:30:39:5c:b2:eb:00:6c:33:
                    64:2b:a7:16:4f:5b:6c:67:f2:02:c9:1a:96:81:51:
                    36:4b:ab:96:fd:21:ea:db:6b:39:52:33:23:ae:7a:
                    5b:01:5a:9e:86:9f:ad:d0:4e:b6:26:b7:a2:a2:ca:
                    36:6b:a6:33:9d:44:e1:2d:bc:7d:50:97:87:bd:2c:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:5B:9E:FE:7B:BA:90:31:3A:F3:89:14:D7:9D:A7:AD:65:10:EE
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64653a3a2f34372d3437203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:de::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:32:5c:ad:11:7f:ba:72:1f:85:1c:47:c1:58:db:e0:79:
         17:c7:48:0f:88:6e:e7:25:5a:59:b7:89:3f:bb:80:9c:48:f2:
         76:d6:12:0d:e5:01:60:35:cf:83:b8:3d:50:33:c2:a2:fb:f2:
         fc:60:c4:12:e8:69:06:39:cb:0e:59:70:0e:9a:11:70:7a:b8:
         70:d8:3e:55:0a:55:82:a7:25:af:80:1a:4a:39:86:b8:f9:1c:
         05:5e:a0:96:87:c8:40:2b:29:00:08:92:e0:79:d7:3d:81:02:
         bd:d2:8f:2a:89:0d:34:3a:0f:de:b9:13:89:dc:c5:d2:3b:f8:
         a0:d9:a8:26:8f:6b:90:d3:6d:34:20:6e:22:9d:60:50:95:a7:
         d7:b8:df:05:69:c1:58:ad:ad:89:81:6b:6f:e4:03:7b:e6:53:
         b3:bf:13:c9:03:49:f8:75:38:c8:7d:0e:23:a4:33:54:d3:05:
         3a:c9:f2:fd:17:c6:4f:d4:6e:75:a1:f9:ca:be:bb:a2:fc:d4:
         fa:90:3f:52:91:69:c3:b0:fc:e3:45:9f:65:e9:a4:59:49:7b:
         4f:56:3d:f4:ea:05:7d:4b:71:bb:be:34:86:af:21:97:1c:b6:
         a5:b7:78:f4:02:ef:4f:ac:4f:58:81:eb:e7:9c:dd:94:d9:3e:
         1c:62:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:45 2026 by rpki-client