Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203237363935.roa
File:                     323830303a3538303a3a2f33322d3438203d3e203237363935.roa (raw, json)
Hash identifier:          U+SvCh9WOdZWuSHrHuRbkl2I9BTpJjQToyw5Fg6LnHo=
Subject key identifier:   F2:A3:0F:90:A2:B8:81:41:C3:67:9D:72:8A:6B:A7:01:1E:5A:FE:62
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       72D5B8C35CBE93BD80BEED4753151FD3EEDE38A6
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203237363935.roa
Signing time:             Mon 19 Oct 2026 20:42:01 +0000
ROA not before:           Mon 19 Oct 2026 20:37:01 +0000
ROA not after:            Mon 18 Oct 2027 20:42:01 +0000
asID:                     27695
IP address blocks:        2800:580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d5:b8:c3:5c:be:93:bd:80:be:ed:47:53:15:1f:d3:ee:de:38:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Oct 19 20:37:01 2026 GMT
            Not After : Oct 18 20:42:01 2027 GMT
        Subject: CN=F2A30F90A2B88141C3679D728A6BA7011E5AFE62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:93:0b:67:a2:1d:da:e9:ba:f9:2a:2f:eb:
                    50:b5:dd:76:3b:2a:dd:d4:c3:a6:66:24:32:91:29:
                    d5:a6:46:40:1d:01:f0:31:2a:65:ae:ff:62:9f:cd:
                    4a:86:04:93:ca:0a:12:73:11:36:e7:5a:07:31:50:
                    64:f2:e2:76:6a:bf:75:9a:67:46:f4:f5:1d:a2:25:
                    1a:51:c8:58:e2:08:8e:dc:00:bd:5d:f6:ae:a5:05:
                    09:8d:0a:07:4a:60:b6:d5:43:ae:7c:12:e7:ac:98:
                    59:c5:60:56:b2:a1:92:3a:6f:91:be:f2:6d:e8:e4:
                    45:a2:c4:8b:f1:03:03:68:83:31:79:c2:39:50:4a:
                    1d:8a:f4:6a:79:a7:7b:50:70:71:f3:be:81:9b:e7:
                    d4:4c:d8:4a:17:bf:e5:ce:e8:65:d8:83:9a:e3:2d:
                    69:61:ee:2f:48:c4:07:11:73:7f:ef:d6:6f:15:c9:
                    35:76:ab:89:19:42:f0:34:3c:17:33:b2:37:30:cb:
                    a6:07:43:25:fb:65:f4:a8:e4:a1:5d:e8:70:80:93:
                    72:4c:df:18:c1:df:bb:cf:14:8d:18:8b:45:66:5b:
                    7e:a9:bd:f5:d6:53:d4:ac:79:17:b7:73:60:50:ad:
                    53:60:a5:99:51:37:23:a2:c7:07:07:84:23:6d:95:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A3:0F:90:A2:B8:81:41:C3:67:9D:72:8A:6B:A7:01:1E:5A:FE:62
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a3538303a3a2f33322d3438203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:65:2d:b4:33:bf:62:b2:c3:36:59:e7:91:cd:0d:93:50:
         77:a8:7f:1d:a2:6b:85:61:41:cf:68:79:02:16:65:7c:58:93:
         22:6d:0c:be:be:99:83:23:7f:23:40:14:b9:ca:64:6d:3d:5a:
         c0:a2:a0:d3:b8:68:67:59:e3:03:cf:e5:bb:d7:09:9b:00:2e:
         a9:f5:37:9b:65:08:5a:ac:b6:eb:e2:b8:6b:48:8c:45:7e:53:
         bf:04:33:85:58:ca:f0:07:89:02:3e:32:ef:a5:16:fa:04:0d:
         be:ee:d2:e4:3b:94:53:10:a8:b3:8e:74:6f:0f:30:4f:12:01:
         3f:3a:23:0c:46:b6:2a:97:3d:e3:b8:92:47:1e:4b:20:6b:a5:
         a2:16:99:14:24:31:e7:1f:3b:28:f1:b8:26:e0:2e:03:54:2b:
         0a:fc:77:08:72:9a:b9:aa:f4:1f:0e:b5:77:a9:b2:29:11:f6:
         8d:18:e0:ae:3a:04:f8:da:ac:e2:da:b5:c9:04:0d:96:18:02:
         0f:01:81:9e:5e:59:6f:01:bb:d5:88:4f:55:cf:94:e5:d0:3b:
         d5:1e:94:c4:ab:96:62:fb:f6:58:12:bf:3d:9e:8a:80:ce:f0:
         8a:0e:5d:19:b5:5b:8c:bc:1c:3c:f4:ec:b4:e6:10:a3:ce:d4:
         a1:5b:d8:53
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUctW4w1y+k72Avu1HUxUf0+7eOKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNjEwMTkyMDM3MDFaFw0yNzEwMTgyMDQyMDFaMDMxMTAvBgNV
BAMTKEYyQTMwRjkwQTJCODgxNDFDMzY3OUQ3MjhBNkJBNzAxMUU1QUZFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0JMLZ6Id2um6+Sov61C13XY7
Kt3Uw6ZmJDKRKdWmRkAdAfAxKmWu/2KfzUqGBJPKChJzETbnWgcxUGTy4nZqv3Wa
Z0b09R2iJRpRyFjiCI7cAL1d9q6lBQmNCgdKYLbVQ658EuesmFnFYFayoZI6b5G+
8m3o5EWixIvxAwNogzF5wjlQSh2K9Gp5p3tQcHHzvoGb59RM2EoXv+XO6GXYg5rj
LWlh7i9IxAcRc3/v1m8VyTV2q4kZQvA0PBczsjcwy6YHQyX7ZfSo5KFd6HCAk3JM
3xjB37vPFI0Yi0VmW36pvfXWU9SseRe3c2BQrVNgpZlRNyOixwcHhCNtlZmnAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU8qMPkKK4gUHDZ51yimunAR5a/mIwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzgzMDMwM2EzNTM4MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzYzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAFgDANBgkq
hkiG9w0BAQsFAAOCAQEAGfxlLbQzv2KywzZZ55HNDZNQd6h/HaJrhWFBz2h5AhZl
fFiTIm0Mvr6ZgyN/I0AUucpkbT1awKKg07hoZ1njA8/lu9cJmwAuqfU3m2UIWqy2
6+K4a0iMRX5TvwQzhVjK8AeJAj4y76UW+gQNvu7S5DuUUxCos450bw8wTxIBPzoj
DEa2Kpc947iSRx5LIGulohaZFCQx5x87KPG4JuAuA1QrCvx3CHKauar0Hw61d6my
KRH2jRjgrjoE+Nqs4tq1yQQNlhgCDwGBnl5ZbwG71YhPVc+U5dA71R6UxKuWYvv2
WBK/PZ6KgM7wig5dGbVbjLwcPPTstOYQo87UoVvYUw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:32:39 2026 by rpki-client