Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64653a3a2f34372d3437203d3e203237383238.roa
File:                     323830313a3130343a64653a3a2f34372d3437203d3e203237383238.roa (raw, json)
Hash identifier:          Bu6Fa6mkcSHARaLqup5GtNApQQR4fjMAiRPrRZVpuXg=
Subject key identifier:   D8:22:4E:F2:0E:7B:10:18:86:34:F4:8F:ED:81:3F:13:52:00:65:95
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       21CA6858DD97D524F68DD48FCF5A0ED1174BAE0F
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64653a3a2f34372d3437203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 20:50:01 +0000
ROA not before:           Fri 27 Mar 2026 20:45:01 +0000
ROA not after:            Fri 26 Mar 2027 20:50:01 +0000
asID:                     27828
IP address blocks:        2801:104:de::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ca:68:58:dd:97:d5:24:f6:8d:d4:8f:cf:5a:0e:d1:17:4b:ae:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 20:45:01 2026 GMT
            Not After : Mar 26 20:50:01 2027 GMT
        Subject: CN=D8224EF20E7B10188634F48FED813F1352006595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:6f:06:45:b6:50:d0:49:38:23:5a:4e:20:
                    73:4e:76:2f:2b:51:51:cd:50:59:52:66:68:fb:a9:
                    68:0c:a6:a3:77:46:0e:4a:d2:fe:25:42:d6:ff:e8:
                    03:f7:34:5c:30:da:a3:97:3f:ad:86:ba:a0:5c:88:
                    56:e1:dc:d3:b5:21:49:01:98:b0:0d:d5:71:19:a4:
                    89:16:36:e4:bd:88:d3:86:1c:54:c8:a5:c2:cb:55:
                    30:00:2d:a9:73:62:ee:85:fc:d7:c3:a9:c0:1d:0c:
                    47:b7:e0:38:5b:63:04:71:58:30:b3:28:40:c5:35:
                    56:10:a9:85:5c:72:76:73:5e:6a:c4:4d:b2:b5:9a:
                    9e:89:ed:e1:6a:12:47:7b:80:79:b9:24:43:ce:c0:
                    6a:d6:a8:cd:db:b3:4e:a0:7a:2e:ff:04:0c:ac:0e:
                    34:93:32:7a:a5:68:1f:a4:01:3d:01:03:68:a0:70:
                    eb:7e:90:f8:9b:a3:4c:bb:18:6b:d0:1f:ab:29:10:
                    1b:5f:13:40:95:e5:46:b6:1f:06:26:2b:78:85:91:
                    2e:2a:fb:11:b9:a2:c2:39:c2:76:43:a9:3e:3e:88:
                    64:5c:33:7b:05:7a:5a:4f:7e:12:72:8d:13:9c:aa:
                    d8:17:73:97:ec:9e:3b:d9:a0:e4:88:d3:18:67:df:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:4E:F2:0E:7B:10:18:86:34:F4:8F:ED:81:3F:13:52:00:65:95
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a64653a3a2f34372d3437203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104:de::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:30:41:b9:c6:9e:21:40:69:77:83:29:7e:4d:aa:40:2c:
         7e:bb:8b:63:50:50:f0:5d:27:7f:49:0e:f6:22:13:22:a0:c3:
         59:9f:4c:b4:7e:bc:d9:2a:7a:b7:73:8b:fa:7a:b8:aa:3d:4b:
         40:e2:ca:66:6f:b9:76:fa:36:ef:87:83:68:a9:eb:35:37:89:
         15:87:1a:8a:0c:19:8a:8b:f4:0e:78:29:a8:5d:0e:02:7a:f9:
         cd:76:81:2e:c9:d0:3b:5d:99:4e:c2:6b:ef:55:b3:80:b6:3c:
         a4:c4:e9:11:40:e9:48:6c:cd:69:c0:8e:0a:4d:97:94:78:d3:
         e0:2d:ac:b4:6f:3c:53:5f:ad:db:6d:bc:f8:04:0b:dd:52:15:
         45:1c:a0:6a:d7:95:c8:1c:e8:ac:20:53:30:77:e5:90:9c:65:
         06:94:f1:87:67:b4:3d:93:45:7d:63:7f:1a:2e:5f:32:84:f1:
         36:fd:43:ec:5d:fe:c0:ed:35:9f:7d:fd:6f:10:1d:58:d2:79:
         bb:2b:8d:ae:ef:c7:d1:03:3a:f1:b7:ad:cf:de:b2:9a:f0:34:
         97:60:3e:d9:7c:3c:1d:f9:1d:69:28:d2:84:d5:20:3a:b4:2b:
         29:a1:50:c7:49:d7:44:54:a9:d4:de:5d:dd:5f:f8:6c:3b:4b:
         aa:38:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:39 2026 by rpki-client