Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e203532343638.roa
File:                     323830303a3637303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          /cS4GdFa7l21MHBMCVN7mkvcUACBBayRDoJYdmNuiCU=
Subject key identifier:   AA:6B:35:EB:0E:BB:8C:AE:75:66:08:6C:32:ED:90:B5:77:3F:DD:B4
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       4999BAE5DED9B90D3E51976D343616F5FEEAC4A1
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Wed 13 May 2026 18:20:00 +0000
ROA not before:           Wed 13 May 2026 18:15:00 +0000
ROA not after:            Wed 12 May 2027 18:20:00 +0000
asID:                     52468
IP address blocks:        2800:670::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 19 May 2026 20:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:99:ba:e5:de:d9:b9:0d:3e:51:97:6d:34:36:16:f5:fe:ea:c4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: May 13 18:15:00 2026 GMT
            Not After : May 12 18:20:00 2027 GMT
        Subject: CN=AA6B35EB0EBB8CAE7566086C32ED90B5773FDDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:b0:cb:5f:d1:73:fd:f9:79:55:f8:20:4f:
                    35:35:5a:52:59:5c:ca:69:51:80:29:18:48:bf:57:
                    1f:44:71:61:1c:69:e9:cf:0a:91:59:9a:de:6b:c6:
                    cc:fc:97:8c:7a:08:53:e0:d5:bd:b6:66:e4:8d:d4:
                    07:68:13:92:3a:d1:99:de:6d:a7:ee:b9:7b:af:6f:
                    20:3d:c5:3f:8b:dd:04:3e:c3:a0:0e:10:2f:78:48:
                    bf:3a:ce:6a:9a:72:f2:fc:a0:83:ee:ad:f0:be:b2:
                    67:c4:59:bd:88:4c:69:90:68:63:0e:9a:d3:35:2f:
                    0b:43:42:ca:f4:d3:97:d9:54:4d:15:cd:f4:08:c4:
                    a7:cc:c4:6f:ee:15:da:63:1b:51:1f:ab:9d:84:e4:
                    a4:77:39:da:7e:7f:b4:52:09:ec:6e:95:c3:07:b0:
                    22:05:c5:43:e8:d5:06:af:e6:e4:f1:8d:a9:6b:1f:
                    b4:2c:13:8f:26:de:ce:0a:4b:bd:78:72:69:c5:78:
                    2a:5a:ea:f3:c6:0c:83:ed:18:08:78:1c:a0:2d:b6:
                    b7:0d:62:47:3d:b9:e7:ac:70:fd:0e:c2:8f:56:c4:
                    be:b4:bf:b0:43:9e:2e:5c:5a:1d:11:ce:d5:39:b0:
                    83:74:a9:50:0d:b2:d1:65:03:63:04:63:6c:df:88:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:35:EB:0E:BB:8C:AE:75:66:08:6C:32:ED:90:B5:77:3F:DD:B4
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:670::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:9f:e1:6d:e1:af:56:b4:ed:09:52:f2:d9:40:2f:8f:33:16:
         72:62:21:06:10:99:83:71:20:67:37:f1:c2:3c:c6:9b:23:bb:
         c1:cf:89:2e:04:60:38:25:58:f7:be:4d:10:4e:eb:39:69:ad:
         b7:ce:37:d1:75:31:90:cf:bf:1a:25:3c:b3:32:c5:35:2f:d8:
         95:bc:30:16:b6:5f:54:77:5c:70:73:95:f4:b0:c1:96:02:6a:
         83:fa:91:c1:d4:49:d0:ce:94:8a:d5:61:d4:59:6f:ca:85:e8:
         fe:41:e8:ac:ac:5d:c2:8c:cc:cc:d1:92:2e:66:12:27:3f:60:
         b0:4b:f4:79:10:97:56:6d:57:3f:3b:23:54:be:85:b2:9a:6b:
         d5:0d:a2:ed:47:21:dc:50:9c:2a:51:d3:e3:e9:60:36:57:3d:
         e5:dd:95:08:18:57:fd:24:6c:a6:41:c6:f6:30:6e:1e:47:71:
         63:d9:cd:25:be:a1:5d:a6:ce:ae:27:1f:28:2f:4e:95:89:ee:
         1d:23:4b:a2:4d:04:13:12:c8:8c:b8:f5:b2:1d:c3:cc:cf:cf:
         9d:99:12:67:01:ee:13:93:26:b5:a1:f5:75:a6:75:af:ed:c9:
         09:a3:c9:e6:6a:0f:13:8f:62:c5:12:f3:4b:e0:ff:d6:17:2c:
         94:28:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 03:21:52 2026 by rpki-client