Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          CVHvV0zQdszIsq+sAy9n9bPkAjdiiM2y6gNsHge04cA=
Subject key identifier:   2C:52:45:DA:F8:93:C6:84:94:CE:94:8D:50:7A:BE:3A:1A:24:C0:D0
Certificate issuer:       /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
Certificate serial:       2AEE15F754A4B2F41BAEC00FA239871A57B8A8C6
Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Mon 27 Jul 2026 20:47:19 +0000
ROA not before:           Mon 27 Jul 2026 20:42:19 +0000
ROA not after:            Mon 26 Jul 2027 20:47:19 +0000
asID:                     14080
IP address blocks:        2801:11:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 21:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ee:15:f7:54:a4:b2:f4:1b:ae:c0:0f:a2:39:87:1a:57:b8:a8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
        Validity
            Not Before: Jul 27 20:42:19 2026 GMT
            Not After : Jul 26 20:47:19 2027 GMT
        Subject: CN=2C5245DAF893C68494CE948D507ABE3A1A24C0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:a9:d1:ab:c1:d2:ac:3f:b8:5d:b9:27:dd:
                    9b:de:7f:4d:bb:7c:04:09:19:bf:a8:03:b5:03:be:
                    63:66:b5:4e:d2:93:bb:f3:7a:2c:f6:8b:ee:7f:73:
                    ed:84:8b:16:80:40:00:a5:76:fe:e3:ad:bc:53:4f:
                    03:d6:d8:41:68:89:c1:a7:f0:db:56:c9:45:fe:f7:
                    b0:91:fa:a1:f5:15:9c:fa:3d:28:c1:fa:0d:19:e8:
                    ba:da:ac:b9:25:4b:aa:43:ca:fb:b9:46:00:b1:31:
                    7d:cd:44:9f:61:1c:5c:3e:fa:46:ec:6e:b9:b4:6c:
                    bd:ec:98:d4:61:dd:6a:5e:22:7d:d4:df:53:2a:62:
                    ae:b9:00:f2:ed:ca:03:9b:6d:e8:75:81:91:db:44:
                    f4:b9:b2:8b:ec:a2:3b:75:d8:3e:91:12:5e:9a:6f:
                    59:cf:22:ee:98:dd:cd:27:df:6e:47:bb:c9:d9:ff:
                    f1:79:18:13:ea:69:b8:cf:37:5f:33:c8:a4:b3:85:
                    5f:69:df:3b:52:01:93:ee:45:90:6d:43:82:d4:3d:
                    40:94:41:6f:34:a4:1f:70:1a:78:45:6a:6b:2e:ca:
                    9e:f6:c9:06:5e:17:f0:4e:06:a9:41:c3:17:a6:b1:
                    0b:9f:52:fa:32:06:ac:a0:4f:a4:55:3c:23:61:49:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:52:45:DA:F8:93:C6:84:94:CE:94:8D:50:7A:BE:3A:1A:24:C0:D0
            X509v3 Authority Key Identifier:
                keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:b5:78:e6:b5:db:2e:0c:5d:f6:b4:3f:32:8d:ce:94:8c:
         d1:a4:cf:3f:f3:8e:7b:af:dd:bf:0b:b5:40:4f:1c:75:be:ea:
         f0:48:df:04:f6:7a:6a:e3:ca:5a:7a:91:64:bf:bd:1d:17:57:
         e0:1d:4a:69:12:dd:5d:d3:1d:50:af:2b:fb:54:10:a3:f9:bd:
         ec:bd:b6:85:dc:fb:87:e9:88:20:29:e5:d6:df:a0:48:bb:fb:
         9f:9c:5b:86:50:e6:6e:d4:de:59:a1:07:d0:d0:c1:4c:1c:63:
         6f:63:1d:d8:65:c4:08:7a:b6:2a:53:cd:04:77:aa:7b:af:c5:
         5b:74:4f:e1:d3:31:ca:cb:d1:6e:ed:51:e0:23:fe:3e:fb:38:
         95:ce:9f:b0:19:8b:4d:b5:5e:d0:19:8f:1f:8c:89:06:0f:02:
         ff:73:78:9e:91:75:b1:65:af:03:b5:76:20:0f:0e:85:81:85:
         82:1f:37:e7:3e:93:52:bb:26:27:74:42:17:49:b0:49:d3:20:
         60:13:ce:06:39:4d:b1:09:c6:f5:b9:72:3c:71:c2:3a:c5:0f:
         c8:fd:08:e6:74:8d:b2:77:0f:bf:f4:2f:40:a5:84:5c:3e:d2:
         25:b9:4a:c3:ca:50:4a:04:db:c5:00:1c:0f:4c:d6:86:36:e3:
         12:97:33:10
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUKu4V91SksvQbrsAPojmHGle4qMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2
QjkzRTFFQjAeFw0yNjA3MjcyMDQyMTlaFw0yNzA3MjYyMDQ3MTlaMDMxMTAvBgNV
BAMTKDJDNTI0NURBRjg5M0M2ODQ5NENFOTQ4RDUwN0FCRTNBMUEyNEMwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3anRq8HSrD+4Xbkn3Zvef027
fAQJGb+oA7UDvmNmtU7Sk7vzeiz2i+5/c+2EixaAQACldv7jrbxTTwPW2EFoicGn
8NtWyUX+97CR+qH1FZz6PSjB+g0Z6LrarLklS6pDyvu5RgCxMX3NRJ9hHFw++kbs
brm0bL3smNRh3WpeIn3U31MqYq65APLtygObbeh1gZHbRPS5sovsojt12D6REl6a
b1nPIu6Y3c0n325Hu8nZ//F5GBPqabjPN18zyKSzhV9p3ztSAZPuRZBtQ4LUPUCU
QW80pB9wGnhFamsuyp72yQZeF/BOBqlBwxemsQufUvoyBqygT6RVPCNhSdJRAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQULFJF2viTxoSUzpSNUHq+OhokwNAwHwYDVR0j
BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2
ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF
RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2
Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB
OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wLzMyMzgzMDMxM2EzMTMxM2EzODM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQARiAAwDQYJKoZIhvcNAQELBQADggEBACT3tXjmtdsuDF32tD8yjc6UjNGkzz/z
jnuv3b8LtUBPHHW+6vBI3wT2emrjylp6kWS/vR0XV+AdSmkS3V3THVCvK/tUEKP5
vey9toXc+4fpiCAp5dbfoEi7+5+cW4ZQ5m7U3lmhB9DQwUwcY29jHdhlxAh6tipT
zQR3qnuvxVt0T+HTMcrL0W7tUeAj/j77OJXOn7AZi021XtAZjx+MiQYPAv9zeJ6R
dbFlrwO1diAPDoWBhYIfN+c+k1K7Jid0QhdJsEnTIGATzgY5TbEJxvW5cjxxwjrF
D8j9COZ0jbJ3D7/0L0ClhFw+0iW5SsPKUEoE28UAHA9M1oY24xKXMxA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:03:29 2026 by rpki-client