Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3131393a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          mjuk+ZFJDL0mH4lB8YpCokakkUo+c8/nA9otl9RzWqM=
Subject key identifier:   26:B9:BF:C4:8C:8D:E4:1B:A8:E1:8D:9D:58:1C:4F:18:67:8F:47:3A
Certificate issuer:       /CN=02F630ED71E30A0228F714DB90E8B714460D868C
Certificate serial:       33F63FB3A558E20B821504629B1D21AA41ABA527
Authority key identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 03 Mar 2026 16:32:36 +0000
ROA not before:           Tue 03 Mar 2026 16:27:36 +0000
ROA not after:            Tue 02 Mar 2027 16:32:36 +0000
asID:                     27951
IP address blocks:        2801:119::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Mar 2026 21:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f6:3f:b3:a5:58:e2:0b:82:15:04:62:9b:1d:21:aa:41:ab:a5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F630ED71E30A0228F714DB90E8B714460D868C
        Validity
            Not Before: Mar  3 16:27:36 2026 GMT
            Not After : Mar  2 16:32:36 2027 GMT
        Subject: CN=26B9BFC48C8DE41BA8E18D9D581C4F18678F473A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:d5:da:ee:34:d3:3e:f2:e3:d7:7b:69:8d:
                    fa:f4:d8:32:f4:76:3a:c0:e2:6d:93:74:b8:90:c9:
                    2a:25:03:3d:94:da:47:c9:ec:e1:49:c8:09:fc:34:
                    0d:c6:78:25:bf:23:1e:33:f7:7f:76:59:e5:fe:bc:
                    36:36:71:ca:2d:b7:16:a0:33:cd:10:53:0a:ae:9c:
                    08:9c:2c:26:58:e9:96:5c:1d:7f:d3:0f:6d:eb:16:
                    70:b9:66:08:70:23:38:a4:3b:c4:9f:a0:96:b4:5f:
                    4b:c4:04:b3:eb:bc:32:83:d7:d6:25:c2:c3:dd:aa:
                    fa:80:3b:df:51:0c:19:2e:09:a1:28:02:65:88:85:
                    ba:ae:7a:d9:cf:27:b8:6d:4d:bc:b3:ae:3a:6c:a9:
                    ab:95:24:c0:7c:4a:e2:1b:51:4c:12:c6:b5:d6:de:
                    ea:77:f4:b3:e5:90:5a:4f:b7:17:a9:fa:a3:1b:60:
                    cc:da:46:85:da:3b:f0:de:59:c9:75:57:94:83:64:
                    b7:73:b7:75:80:78:f1:57:12:cc:cd:07:b3:1a:5c:
                    76:95:02:ff:c4:2e:80:b1:3c:d5:a6:f8:a2:fb:13:
                    66:f8:c9:20:0d:02:6a:d4:71:0a:ea:98:49:a1:dc:
                    71:ae:e4:ac:b7:d7:7c:d2:73:00:d0:e5:ec:ea:dc:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:BF:C4:8C:8D:E4:1B:A8:E1:8D:9D:58:1C:4F:18:67:8F:47:3A
            X509v3 Authority Key Identifier:
                keyid:02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:119::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:a1:e8:e6:9e:72:53:56:45:d0:d8:ce:f4:a4:6b:f3:37:da:
         83:a3:02:cb:84:f0:bc:ee:b8:da:f6:a9:04:e5:ce:97:ef:0e:
         46:1d:2a:6e:31:a6:6c:c0:36:24:6b:de:c5:dc:9b:f6:2d:17:
         21:92:2b:85:5e:e0:fa:da:dc:c9:08:76:7a:73:36:bb:3d:7b:
         3d:f3:27:de:31:7f:b0:d7:d2:ce:f7:20:61:fd:7d:51:9d:bd:
         21:ac:72:a2:64:2d:9c:cf:4e:7f:8c:7b:75:fc:07:17:84:d8:
         19:23:68:0d:78:5d:2b:b4:ac:5a:83:db:af:e1:70:8f:20:d5:
         ac:54:90:d3:4c:ee:06:59:e5:8b:3c:1b:f4:f1:4a:65:9c:09:
         dd:d3:99:c2:2a:24:08:73:91:0c:fc:52:4c:30:96:30:c8:86:
         7a:36:2a:70:24:ca:1d:7c:bf:5b:e0:0d:81:d2:db:aa:0f:f3:
         0a:cf:9e:4c:cf:3a:38:ee:ea:17:d4:fb:3c:24:f4:00:15:12:
         14:eb:91:4c:9a:51:4b:87:e5:e1:7e:14:fe:e1:52:84:db:43:
         6c:c8:34:d6:0c:bd:81:58:ff:21:d3:d9:66:3c:05:40:a9:3e:
         2c:c1:49:ea:0b:7a:03:f8:29:42:4e:a2:5f:e8:52:19:9f:4e:
         a4:a7:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:26:47 2026 by rpki-client