Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e203136383134.roa
File:                     323830313a31353a623030303a3a2f34382d3438203d3e203136383134.roa (raw, json)
Hash identifier:          yPdi0QEP3+yg27Eoe2qHRA+8JcHiQomiRFkxUPd2j0Q=
Subject key identifier:   0B:53:CC:C4:DC:70:23:56:FB:6F:0D:B4:7B:27:5B:67:22:CD:93:0A
Certificate issuer:       /CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
Certificate serial:       5C60B88CC030A31FA6719218C83959DB31146329
Authority key identifier: 96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e203136383134.roa
Signing time:             Fri 27 Mar 2026 19:36:22 +0000
ROA not before:           Fri 27 Mar 2026 19:31:22 +0000
ROA not after:            Fri 26 Mar 2027 19:36:22 +0000
asID:                     16814
IP address blocks:        2801:15:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 00:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:60:b8:8c:c0:30:a3:1f:a6:71:92:18:c8:39:59:db:31:14:63:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
        Validity
            Not Before: Mar 27 19:31:22 2026 GMT
            Not After : Mar 26 19:36:22 2027 GMT
        Subject: CN=0B53CCC4DC702356FB6F0DB47B275B6722CD930A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:d3:be:aa:e2:f4:fd:90:c5:16:06:7c:c9:
                    96:5b:31:d3:56:89:f4:50:31:71:9c:1b:6c:0c:2b:
                    2a:39:48:a8:46:50:42:55:90:73:64:76:28:90:51:
                    c8:eb:f1:5e:dc:6d:8c:ad:1c:4a:e2:4a:ed:08:8f:
                    9b:58:05:22:e9:e6:4c:96:14:e2:65:c2:b4:ae:67:
                    45:0d:ff:47:41:1b:d6:ea:93:98:e1:91:10:c3:61:
                    8d:f7:b2:bd:31:ae:32:6f:07:5e:31:ad:52:cc:92:
                    2b:8b:ee:f0:ed:be:87:63:6c:ef:50:e4:41:c0:96:
                    95:88:8b:0f:93:21:a5:09:b3:bd:45:9b:79:88:f7:
                    33:04:0f:60:52:24:ee:0d:b0:8c:e8:cf:01:d2:b3:
                    e9:be:35:b1:71:35:d6:12:1f:f0:5a:75:8d:9a:12:
                    39:3f:d2:aa:66:d2:24:e3:26:f0:35:94:f0:8b:a1:
                    79:a0:d8:f7:01:1e:e6:9c:c7:88:8f:45:c0:e2:87:
                    bf:16:68:8e:6e:1c:df:3b:5e:55:c0:e1:ba:26:ad:
                    f2:87:db:94:b8:31:3a:9f:ac:0d:9f:b9:5e:68:6b:
                    8c:81:6c:ea:d0:5e:ca:07:c3:6d:8e:08:da:ad:3c:
                    29:76:68:d7:df:9b:93:64:f1:99:94:2a:90:ac:ea:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:CC:C4:DC:70:23:56:FB:6F:0D:B4:7B:27:5B:67:22:CD:93:0A
            X509v3 Authority Key Identifier:
                keyid:96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:06:e7:72:b7:bd:89:e4:4b:0b:2a:e5:a0:1e:03:33:e8:
         6e:1d:9a:ed:28:cf:5b:f1:bf:96:bf:3c:a9:06:14:2d:f5:bc:
         94:3f:58:b1:61:8a:d0:01:8e:ee:0a:67:ab:ac:9c:23:bc:25:
         62:55:57:2c:f1:af:8f:33:05:51:3b:f8:74:86:06:ca:80:7f:
         40:76:93:b6:e3:f6:21:80:d7:32:ac:66:a2:c9:c9:3f:04:29:
         e9:05:4a:28:60:14:9a:3a:35:cd:6e:5f:ac:a5:02:b7:c9:73:
         c2:33:38:53:21:9d:d5:d4:e1:93:be:c3:e5:19:5f:cb:70:b2:
         e4:74:0a:ac:d8:66:a7:86:69:63:be:66:cd:9e:5f:30:ca:37:
         4b:8d:3c:4f:bb:0b:97:c2:b7:0e:f0:0c:80:71:9c:d3:c7:dc:
         01:65:cb:0f:5e:bf:21:ca:6e:58:fa:0e:cd:8e:e6:e5:89:15:
         49:12:f5:fe:cb:13:48:ae:fb:9d:47:63:1e:ec:64:85:9c:7e:
         db:60:fb:7a:84:de:98:f2:a9:9e:ed:fd:68:10:bc:e7:05:08:
         01:98:61:4b:03:b8:ae:ef:ec:a6:c8:bd:42:b2:2e:7a:4f:be:
         70:da:8e:19:55:11:2c:58:a4:cf:a3:3e:6f:36:0f:1a:fc:0a:
         ef:05:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:33:17 2026 by rpki-client