Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e2033333536.roa
File:                     323830313a31353a623030303a3a2f34382d3438203d3e2033333536.roa (raw, json)
Hash identifier:          O23DXNAmtbY/TQYx/y2n2JcL5H07Pvje2VcWsiKnqAg=
Subject key identifier:   BE:CC:F1:86:B6:51:B5:EA:C9:1A:32:58:69:EC:0A:A2:79:D1:36:9F
Certificate issuer:       /CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
Certificate serial:       4736A924C7ABD2D0B5BD1B1186EE8AA02EDFA6E1
Authority key identifier: 96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e2033333536.roa
Signing time:             Fri 27 Mar 2026 19:36:21 +0000
ROA not before:           Fri 27 Mar 2026 19:31:21 +0000
ROA not after:            Fri 26 Mar 2027 19:36:21 +0000
asID:                     3356
IP address blocks:        2801:15:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 00:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:36:a9:24:c7:ab:d2:d0:b5:bd:1b:11:86:ee:8a:a0:2e:df:a6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
        Validity
            Not Before: Mar 27 19:31:21 2026 GMT
            Not After : Mar 26 19:36:21 2027 GMT
        Subject: CN=BECCF186B651B5EAC91A325869EC0AA279D1369F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:4c:92:fd:86:75:fb:b7:79:f4:28:ba:63:
                    88:07:cb:39:1a:02:36:dc:5d:ee:6d:0a:fd:e3:b3:
                    dc:60:4e:0c:ff:93:66:16:8d:a3:93:19:c2:d1:47:
                    ba:c8:a1:1e:bc:74:d4:35:c0:4f:66:35:09:7d:83:
                    64:cf:76:52:8f:9b:56:08:0f:ac:c7:40:eb:5c:09:
                    d9:d9:bf:98:fd:d8:9e:e1:2d:27:42:fd:65:bc:9c:
                    a4:77:27:1a:ff:b1:78:c7:87:a4:cd:2f:15:b6:a5:
                    b1:04:93:7b:b1:b3:06:82:6f:f7:20:81:11:2e:1d:
                    d6:6c:a4:ed:5f:5e:8d:1c:f0:e3:b0:ac:ea:af:cf:
                    04:1a:ad:dd:3a:8d:93:4e:f8:fd:72:cc:81:44:d7:
                    a4:48:6f:cd:9b:0a:1f:b3:bf:e2:f5:af:14:b6:e8:
                    80:92:c5:92:9c:c4:cb:4e:46:56:75:54:0a:46:e9:
                    30:0a:83:be:a9:33:2f:77:aa:ef:81:aa:3c:05:e5:
                    e4:2f:62:81:be:99:28:2f:77:fa:24:4f:38:f3:6c:
                    03:9d:15:22:8a:e2:0b:87:7c:5d:fa:3a:0f:b1:8c:
                    6f:94:2a:b5:e9:86:09:38:27:c9:f8:5e:7f:3f:20:
                    6d:ee:ee:57:3f:ac:7b:6f:f7:c0:77:3f:ab:8c:02:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CC:F1:86:B6:51:B5:EA:C9:1A:32:58:69:EC:0A:A2:79:D1:36:9F
            X509v3 Authority Key Identifier:
                keyid:96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:31:87:74:a9:bd:69:73:b9:2f:ec:33:2d:c0:b3:32:31:05:
         a9:b8:47:d1:03:cb:ae:9a:a3:99:2d:66:97:bb:ed:aa:07:6f:
         c4:56:50:45:c5:33:1f:79:61:c4:81:8a:29:4b:a6:b9:f2:2a:
         40:f8:f5:d3:d3:04:ef:19:f3:5f:0c:0e:dd:c9:df:9b:f6:fb:
         ba:72:93:29:da:d8:17:07:26:f8:fd:53:b2:2f:f2:21:b6:4a:
         f5:2e:c2:87:78:46:69:3c:27:22:9d:c4:40:88:b9:90:4b:6d:
         ea:b3:7a:54:81:a1:87:0b:4d:c7:c6:30:84:fa:bb:fc:75:ee:
         65:17:0e:0d:90:d3:20:2d:ee:4d:34:d7:74:83:31:00:14:14:
         e6:9a:74:6f:ef:2d:97:38:d5:cc:7b:40:e7:ad:b6:64:6d:0b:
         75:fc:bb:a2:eb:dc:60:78:5f:45:bc:cb:44:cb:72:84:19:9f:
         7f:2f:a7:4e:51:dd:37:d5:9a:f2:db:47:20:ac:d7:50:a4:dd:
         b3:8e:b1:56:4d:b1:21:b3:65:3d:fe:a2:2c:06:c0:ca:0e:72:
         89:e0:12:ee:a9:05:e9:71:4e:78:bb:1f:dc:88:d7:82:a4:6f:
         0c:c5:d8:ba:9d:e0:34:70:3e:87:27:f4:e2:21:b2:52:9b:8e:
         25:80:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:41:37 2026 by rpki-client