Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a38353a3a37303a303a302f39362d3936203d3e203137313437.roa
File:                     323830313a323a38353a3a37303a303a302f39362d3936203d3e203137313437.roa (raw, json)
Hash identifier:          vVtZjCaHV6GN6Ib1rHaj5nGkT1UAYmIaFiXfHksWNBA=
Subject key identifier:   01:25:0A:9C:77:A3:B0:D5:75:BC:5A:40:0E:15:A8:22:92:6A:A7:D1
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       4BEAA49B5A4683419F66E84889625E6BCCB5AF51
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a38353a3a37303a303a302f39362d3936203d3e203137313437.roa
Signing time:             Wed 17 Jun 2026 17:30:00 +0000
ROA not before:           Wed 17 Jun 2026 17:25:00 +0000
ROA not after:            Wed 16 Jun 2027 17:30:00 +0000
asID:                     17147
IP address blocks:        2801:2:85::70:0:0/96 maxlen: 96
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ea:a4:9b:5a:46:83:41:9f:66:e8:48:89:62:5e:6b:cc:b5:af:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jun 17 17:25:00 2026 GMT
            Not After : Jun 16 17:30:00 2027 GMT
        Subject: CN=01250A9C77A3B0D575BC5A400E15A822926AA7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:d3:b0:11:bf:60:2e:e2:2c:46:51:39:f7:
                    aa:39:d7:1c:1e:76:a8:b2:ab:97:96:da:d0:e6:44:
                    56:af:e9:7e:e4:5a:4f:c0:c4:52:96:e7:a1:99:21:
                    e8:6d:b2:b6:ca:c7:7b:81:87:60:e9:2c:4c:95:ae:
                    29:cf:b7:ff:38:7c:39:19:5f:d2:45:e9:47:af:43:
                    fa:8b:43:84:9c:42:ea:1d:c6:a2:ff:9d:df:14:7c:
                    4c:ad:5a:61:50:9d:8a:54:30:ca:83:bb:dc:32:1c:
                    1e:0a:d2:ab:5f:05:97:0c:ab:14:4c:03:8d:93:4d:
                    c9:70:21:60:13:46:55:08:93:43:c3:36:d1:3f:a1:
                    ee:42:2f:c1:a7:0e:18:b8:77:b1:19:1c:2b:44:db:
                    00:61:cf:73:62:d2:67:cd:f2:3f:19:6b:ed:81:fb:
                    f1:a8:55:ef:6a:8a:a8:d5:e4:b6:ae:f8:57:0a:8c:
                    ae:dc:52:6b:5b:4a:7d:94:40:de:4a:cd:43:2e:9e:
                    b1:d1:b5:8f:53:20:33:4a:20:03:da:c3:ce:f2:66:
                    04:d1:5d:5a:22:48:a6:9c:cf:99:c7:36:e3:22:9a:
                    ca:f5:b2:e2:4b:84:fc:55:86:ab:da:fe:ce:d7:f9:
                    59:86:4b:75:8f:3b:8e:f6:e3:bd:cb:e3:07:fa:fb:
                    46:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:0A:9C:77:A3:B0:D5:75:BC:5A:40:0E:15:A8:22:92:6A:A7:D1
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a38353a3a37303a303a302f39362d3936203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:2:85:0:0:70::/96

    Signature Algorithm: sha256WithRSAEncryption
         c9:4d:39:b2:cd:73:04:fd:d4:68:2c:05:a0:8b:3b:5e:66:8a:
         4e:cf:2d:ec:12:ff:45:a7:41:b3:d2:a8:c8:b9:f3:65:79:1f:
         f6:fe:c6:49:af:64:ff:be:53:41:7d:07:90:b3:13:5b:fe:97:
         5c:4c:0c:2b:f3:cd:3c:0b:66:9c:6b:e2:b9:f4:b0:f1:dc:11:
         de:11:d5:db:60:2e:b1:ac:c4:cb:3c:34:4f:59:5d:71:48:22:
         5d:25:dd:e1:a2:a2:20:d2:ea:22:5e:37:b7:26:b8:d8:46:25:
         f3:c1:06:ce:2a:26:8f:03:70:76:0a:9e:70:32:f9:38:a7:50:
         c4:35:8f:52:4f:36:1a:26:46:b0:46:81:db:8f:98:c1:ab:84:
         70:fa:e4:07:13:8f:e5:de:4e:53:1f:99:f3:02:ef:91:ac:e3:
         37:01:e3:35:db:8d:06:57:cf:a8:37:c1:cb:7b:99:02:c5:e7:
         12:42:22:d7:97:7d:41:a9:be:91:9d:c7:c9:f9:69:21:9f:da:
         14:12:0e:a6:f9:81:18:d6:96:cb:4d:8e:98:d9:ae:04:84:d9:
         b6:d0:f5:b9:9a:8b:81:21:66:ce:12:d4:f6:61:1e:90:ac:28:
         fc:3f:59:03:88:35:23:e7:d2:79:fd:da:61:c3:53:dd:01:7f:
         31:ab:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:10 2026 by rpki-client