Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e203138373437.roa
File:                     323830313a3135343a3a2f34322d3432203d3e203138373437.roa (raw, json)
Hash identifier:          pn42nG9TodXc8z1wcjv72J66mBk8y28IaMpdzqzM6lk=
Subject key identifier:   78:E3:14:B0:9A:86:68:4F:09:08:EE:45:3A:5F:01:67:21:1C:B9:F4
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       2CDEB4583DD586BB9DD715035B7695593BB53452
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e203138373437.roa
Signing time:             Fri 04 Sep 2026 17:33:55 +0000
ROA not before:           Fri 04 Sep 2026 17:28:55 +0000
ROA not after:            Fri 03 Sep 2027 17:33:55 +0000
asID:                     18747
IP address blocks:        2801:154::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:de:b4:58:3d:d5:86:bb:9d:d7:15:03:5b:76:95:59:3b:b5:34:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Sep  4 17:28:55 2026 GMT
            Not After : Sep  3 17:33:55 2027 GMT
        Subject: CN=78E314B09A86684F0908EE453A5F0167211CB9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:d4:85:55:38:83:26:e3:d2:05:65:ea:70:
                    98:e7:f4:26:48:10:df:42:34:92:5e:61:ca:d1:20:
                    a9:b9:29:b6:89:10:72:31:2b:c0:18:50:30:a1:bf:
                    92:1e:69:6e:65:80:42:fa:40:54:91:94:b6:88:64:
                    64:d7:41:ec:35:54:67:5d:8c:ce:07:88:14:59:ad:
                    67:6e:6c:17:3d:b1:d0:a9:35:f8:3e:e5:c0:5f:69:
                    d4:d3:48:c2:26:79:b6:6d:f9:e8:95:2a:28:24:81:
                    51:c3:98:af:50:0c:5c:c3:07:67:1d:00:5f:dc:fc:
                    d7:e0:73:6c:6b:a1:ec:95:33:ef:a2:9a:a6:a0:12:
                    3e:7b:43:88:19:6e:eb:b6:c5:10:d9:ad:76:4d:fd:
                    4a:fd:fa:62:d4:8b:26:9b:d9:81:66:52:2f:58:50:
                    46:a1:2b:78:24:c8:0f:8c:82:31:04:91:f1:47:8a:
                    6b:ff:30:7f:2a:b4:79:01:a1:dc:e6:5a:aa:bd:fe:
                    c3:23:e9:66:f3:c7:74:60:76:e5:d2:7c:b8:e3:12:
                    b5:e6:55:b3:09:31:28:f1:e0:9a:3a:84:26:4c:2f:
                    56:32:73:9e:4e:75:52:9f:c5:cb:f5:ce:5a:cf:bb:
                    6e:48:bd:2f:be:c4:12:dd:24:7d:e2:e2:7b:72:2e:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E3:14:B0:9A:86:68:4F:09:08:EE:45:3A:5F:01:67:21:1C:B9:F4
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:154::/42

    Signature Algorithm: sha256WithRSAEncryption
         11:16:eb:96:8d:3a:0f:34:af:a9:12:b9:86:2c:63:48:c9:09:
         35:9a:06:7c:45:e7:60:a7:ec:94:4c:cb:79:2d:a2:0d:ec:72:
         d7:dc:53:dc:3d:a4:35:8f:74:18:c7:94:da:54:e3:96:97:78:
         4a:72:dd:99:fa:1a:86:4d:cc:e2:ca:9d:cb:64:66:ff:f2:87:
         ad:e4:e3:85:27:65:45:6b:f7:d4:eb:31:be:75:cb:88:86:a4:
         90:68:c3:e8:a8:f5:b1:cc:f3:41:99:9a:ab:ca:fb:6f:20:ba:
         41:c2:c4:ba:48:c2:db:eb:44:ce:3b:f3:dd:78:be:7e:1e:40:
         d7:5b:3a:f1:88:a1:b8:c7:4e:17:eb:b1:a3:78:5e:a5:a3:8a:
         79:b0:dc:e7:b5:85:5c:0c:50:c5:6f:c6:d4:f3:4e:ac:dd:c5:
         c8:6d:d9:50:20:3c:77:68:f8:1f:ff:1c:45:82:a5:9e:e3:01:
         44:fd:85:ec:b9:12:69:ab:1d:45:50:e5:bd:2c:db:a9:5e:71:
         18:fd:6b:6e:0f:16:eb:83:c6:17:2e:80:63:62:78:04:78:d1:
         db:68:b4:24:b5:63:8b:c9:db:67:d3:20:e0:ac:f9:09:1e:fd:
         fa:d7:3d:d7:31:39:55:18:b7:e9:3b:fd:7a:d0:e3:5f:34:3e:
         28:4a:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:30:33 2026 by rpki-client