Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f35352d3537203d3e203238303032.roa
File:                     323830313a3136353a3a2f35352d3537203d3e203238303032.roa (raw, json)
Hash identifier:          wh8dqeudDZnB6VtZOtr8Hw5T0BWfkMd+wGGVEkQkDN0=
Subject key identifier:   E0:3C:09:0C:A1:1B:0E:69:3A:8D:29:57:B0:DC:B1:62:A7:4D:7A:72
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       0AB574566B4098273FDEF11D30EDD3EC50A38088
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f35352d3537203d3e203238303032.roa
Signing time:             Wed 29 Jul 2026 21:50:00 +0000
ROA not before:           Wed 29 Jul 2026 21:45:00 +0000
ROA not after:            Wed 28 Jul 2027 21:50:00 +0000
asID:                     28002
IP address blocks:        2801:165::/55 maxlen: 57
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Aug 2026 09:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b5:74:56:6b:40:98:27:3f:de:f1:1d:30:ed:d3:ec:50:a3:80:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Jul 29 21:45:00 2026 GMT
            Not After : Jul 28 21:50:00 2027 GMT
        Subject: CN=E03C090CA11B0E693A8D2957B0DCB162A74D7A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:f6:af:d7:8b:e1:82:bf:aa:f9:ff:67:06:
                    ed:04:2b:e6:f3:6d:5f:e2:88:b1:97:fc:53:f6:38:
                    93:e9:18:ff:91:ae:0f:9a:f2:f7:fc:59:0f:11:15:
                    cf:7e:38:ca:b7:ad:34:91:e3:a3:f2:d1:56:a2:11:
                    a3:b9:bb:41:b1:9b:6f:d6:4e:8b:d1:d4:34:eb:f8:
                    1b:d2:2f:a3:2b:e9:18:dc:f7:89:0c:0a:b4:fd:58:
                    66:73:31:23:8d:e5:fc:b7:60:a7:4e:cf:04:96:88:
                    6c:cb:d5:bf:04:08:ec:68:4d:3a:32:f0:ac:21:83:
                    58:cc:40:d0:16:b6:d1:bf:10:01:28:32:2f:aa:89:
                    1e:f5:ce:59:5c:29:f1:a8:ef:0d:c0:87:53:a9:45:
                    78:26:2b:13:f1:e4:6a:41:11:85:24:3a:18:4e:5f:
                    43:bb:a0:0d:fe:4c:16:e6:c8:c2:79:99:1b:65:c4:
                    bd:5d:d2:63:be:07:99:a0:f3:58:f5:ec:42:7f:f1:
                    2b:77:81:49:71:c7:b7:58:e6:7b:e0:03:af:d5:bf:
                    f3:b9:13:84:a1:04:b0:d7:80:62:d7:f5:75:cf:26:
                    ea:1b:b7:e5:b6:16:cd:07:65:9a:bb:3d:ae:58:b1:
                    16:91:eb:da:17:df:56:7f:8f:3d:b0:16:bb:87:ac:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3C:09:0C:A1:1B:0E:69:3A:8D:29:57:B0:DC:B1:62:A7:4D:7A:72
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f35352d3537203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/55

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:25:ee:6f:85:93:5c:f2:f2:32:58:d1:7d:a2:dc:e2:3d:
         47:53:49:de:4d:17:2a:d7:f3:21:e4:6f:41:59:2e:5e:92:60:
         69:9f:46:1f:5d:aa:d8:12:fd:07:fc:b7:d5:f6:b2:3e:b9:e3:
         5b:a4:ae:1d:94:45:1e:cb:5b:d9:76:eb:5b:36:36:47:aa:8c:
         4b:77:61:f5:b1:e4:cd:49:b2:54:a8:50:77:4e:d3:aa:f1:74:
         26:db:8c:d6:60:d7:27:c7:07:7a:16:cd:e7:34:c7:c2:cd:0e:
         17:ff:4c:ed:9a:76:87:09:4c:dc:74:83:d3:4b:96:c6:22:33:
         f6:f0:be:ff:4b:6a:5d:41:a8:31:84:db:fb:26:bf:db:e1:bf:
         11:30:25:32:d0:16:b0:b8:01:17:dd:22:ff:86:23:0c:da:b5:
         61:ad:06:f9:08:41:7a:bc:c8:3a:e5:50:b2:c4:38:30:36:2b:
         48:e2:c1:b3:6b:4c:70:06:7c:8c:ea:aa:17:e1:17:03:2b:da:
         ae:ae:3b:dc:39:8b:8a:44:00:77:09:61:c0:80:ed:49:41:8b:
         b0:b5:6b:14:e9:54:38:39:b6:b6:5f:e4:9e:8a:e7:6e:46:83:
         1f:a6:49:88:f6:70:ec:3f:ea:01:00:06:c3:4f:7a:ce:bc:fc:
         4c:be:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 15:15:05 2026 by rpki-client