Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3438203d3e203237373235.roa
File:                     323030313a313335383a3a2f33322d3438203d3e203237373235.roa (raw, json)
Hash identifier:          UGKGT/kq3jrG5V40ePO7v5HyqpEhIvteIkDVkO8KGrY=
Subject key identifier:   21:7D:BB:D0:14:CC:AA:73:16:1A:65:E0:80:B9:F3:31:13:55:25:2D
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       3E8DEA9EE45707DAC72C9A53863FD753D9119323
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3438203d3e203237373235.roa
Signing time:             Tue 26 May 2026 17:00:00 +0000
ROA not before:           Tue 26 May 2026 16:55:00 +0000
ROA not after:            Tue 25 May 2027 17:00:00 +0000
asID:                     27725
IP address blocks:        2001:1358::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8d:ea:9e:e4:57:07:da:c7:2c:9a:53:86:3f:d7:53:d9:11:93:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: May 26 16:55:00 2026 GMT
            Not After : May 25 17:00:00 2027 GMT
        Subject: CN=217DBBD014CCAA73161A65E080B9F3311355252D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:53:ce:fd:a6:39:70:48:3a:39:84:ab:cd:
                    fb:1a:ab:9d:a2:cf:dc:32:55:62:2c:a1:90:08:7f:
                    23:10:a8:bf:e5:b7:0d:35:4b:84:d8:c6:fd:c9:c5:
                    18:99:c2:12:9b:b4:53:ed:9f:11:1a:66:5c:13:39:
                    4c:24:f0:ae:19:03:87:1d:e2:85:62:3b:d5:35:67:
                    23:94:9c:f9:d2:5c:0f:70:c8:0b:42:f0:31:cf:07:
                    d3:16:9c:d2:94:16:9f:6e:b6:3f:19:11:36:31:b1:
                    5b:bf:a0:07:cc:67:00:30:ea:d1:1b:dc:c4:54:58:
                    7d:e8:e9:0e:4d:35:ce:06:90:2c:aa:85:46:c5:54:
                    7b:ad:f3:14:9d:70:7f:21:be:ae:bf:a4:3f:64:18:
                    3a:2d:90:4f:b1:6b:17:31:1f:b6:70:7b:70:d5:a0:
                    8c:35:a0:b9:cd:bb:ff:cb:a6:51:79:db:b7:e8:6a:
                    5a:fa:17:44:d2:fb:27:1e:42:87:03:ec:ec:87:59:
                    cb:9b:4f:7a:22:23:e2:1d:00:ca:5b:98:9e:d5:10:
                    52:b8:49:ea:47:06:0e:a0:dc:14:ef:a8:7a:46:fa:
                    31:79:85:c0:c7:60:3a:df:e8:d1:78:f8:32:49:69:
                    75:db:8f:a8:32:61:03:51:c7:03:da:f2:e8:2c:0f:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7D:BB:D0:14:CC:AA:73:16:1A:65:E0:80:B9:F3:31:13:55:25:2D
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3438203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1358::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:de:ac:59:f6:2a:42:4a:50:a1:67:2b:74:e3:61:d4:f1:c4:
         b6:fa:09:ce:39:3a:45:f9:7a:00:ad:95:17:b2:09:18:78:cb:
         85:68:1a:21:9f:97:53:63:ee:fe:3f:fc:20:96:87:87:20:a2:
         93:c1:1b:f1:45:16:bf:8f:05:7f:02:9f:ad:0c:eb:81:fb:ce:
         23:43:2f:2c:4e:5c:a3:e6:aa:79:89:c8:a6:19:7f:b0:fa:93:
         8f:07:b1:7d:8b:b1:47:ec:fb:6d:bf:36:76:78:d0:2d:24:ac:
         3b:7f:01:66:d9:ca:f2:d2:12:a4:35:d1:4e:f6:b9:3d:0a:94:
         13:a2:34:5f:16:82:2c:18:3f:81:1e:f4:23:2f:11:9f:40:b7:
         fb:1b:1c:81:1d:64:7e:30:20:43:69:ce:db:ac:f0:78:7a:60:
         cf:c3:8d:7f:a8:a8:3a:0e:3a:a1:50:aa:9a:8f:5f:ed:41:5b:
         46:fd:63:7e:4d:40:32:ca:fb:b5:b2:60:49:16:3d:f7:21:67:
         27:48:fa:4a:4b:84:ff:02:6d:4e:f1:0e:b8:4c:33:4d:cf:09:
         75:3c:47:31:2d:c5:3a:dc:cc:34:da:1e:9a:b6:23:60:b5:78:
         df:de:e6:35:59:1d:c9:83:71:8a:7f:4d:c5:d1:76:2d:59:60:
         c6:36:b4:81
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPo3qnuRXB9rHLJpThj/XU9kRkyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxOTIxODUxRkFGMTc5RUM1QTU3ODRFQ0E5MTcwNERD
RDFCNjZDNzAeFw0yNjA1MjYxNjU1MDBaFw0yNzA1MjUxNzAwMDBaMDMxMTAvBgNV
BAMTKDIxN0RCQkQwMTRDQ0FBNzMxNjFBNjVFMDgwQjlGMzMxMTM1NTI1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzX1PO/aY5cEg6OYSrzfsaq52i
z9wyVWIsoZAIfyMQqL/ltw01S4TYxv3JxRiZwhKbtFPtnxEaZlwTOUwk8K4ZA4cd
4oViO9U1ZyOUnPnSXA9wyAtC8DHPB9MWnNKUFp9utj8ZETYxsVu/oAfMZwAw6tEb
3MRUWH3o6Q5NNc4GkCyqhUbFVHut8xSdcH8hvq6/pD9kGDotkE+xaxcxH7Zwe3DV
oIw1oLnNu//LplF527foalr6F0TS+yceQocD7OyHWcubT3oiI+IdAMpbmJ7VEFK4
SepHBg6g3BTvqHpG+jF5hcDHYDrf6NF4+DJJaXXbj6gyYQNRxwPa8ugsD14xAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUIX270BTMqnMWGmXggLnzMRNVJS0wHwYDVR0j
BBgwFoAU9hkhhR+vF57FpXhOypFwTc0bZscwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERERBNUZGQzdDQzAxRTU2RkJDNUU0NzgxOUIzNUFFREI3
Q0JDMUYzMzMyRTU0NTI4MDNGMUE4N0I1MDE4MTZBLzAvRjYxOTIxODUxRkFGMTc5
RUM1QTU3ODRFQ0E5MTcwNERDRDFCNjZDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNjE5MjE4NTFGQUYxNzlFQzVB
NTc4NEVDQTkxNzA0RENEMUI2NkM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREREQTVGRkM3Q0MwMUU1NkZCQzVFNDc4MTlCMzVBRURCN0NCQzFGMzMz
MkU1NDUyODAzRjFBODdCNTAxODE2QS8wLzMyMzAzMDMxM2EzMTMzMzUzODNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNzMyMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARNYMA0G
CSqGSIb3DQEBCwUAA4IBAQBX3qxZ9ipCSlChZyt042HU8cS2+gnOOTpF+XoArZUX
sgkYeMuFaBohn5dTY+7+P/wgloeHIKKTwRvxRRa/jwV/Ap+tDOuB+84jQy8sTlyj
5qp5icimGX+w+pOPB7F9i7FH7PttvzZ2eNAtJKw7fwFm2cry0hKkNdFO9rk9CpQT
ojRfFoIsGD+BHvQjLxGfQLf7GxyBHWR+MCBDac7brPB4emDPw41/qKg6DjqhUKqa
j1/tQVtG/WN+TUAyyvu1smBJFj33IWcnSPpKS4T/Am1O8Q64TDNNzwl1PEcxLcU6
3Mw02h6atiNgtXjf3uY1WR3Jg3GKf03F0XYtWWDGNrSB
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:59:33 2026 by rpki-client