Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/323830313a31303a353830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31303a353830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          XQx0Nd2kIFhZ8vipQUSUT3WABi6DfZOY8ftlNC36kK4=
Subject key identifier:   12:65:E6:7C:7D:7A:E2:17:0A:88:11:23:05:DD:C6:F6:AA:51:26:95
Certificate issuer:       /CN=9FB011501E0E167D04273DED442BE972FA3836F0
Certificate serial:       598A82417889B6174475704E495DB92A8C7B4971
Authority key identifier: 9F:B0:11:50:1E:0E:16:7D:04:27:3D:ED:44:2B:E9:72:FA:38:36:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/323830313a31303a353830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 21 Apr 2026 22:10:00 +0000
ROA not before:           Tue 21 Apr 2026 22:05:00 +0000
ROA not after:            Tue 20 Apr 2027 22:10:00 +0000
asID:                     27951
IP address blocks:        2801:10:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 May 2026 11:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8a:82:41:78:89:b6:17:44:75:70:4e:49:5d:b9:2a:8c:7b:49:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB011501E0E167D04273DED442BE972FA3836F0
        Validity
            Not Before: Apr 21 22:05:00 2026 GMT
            Not After : Apr 20 22:10:00 2027 GMT
        Subject: CN=1265E67C7D7AE2170A88112305DDC6F6AA512695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:17:7c:9a:08:ea:81:1f:c8:d2:68:b9:3f:
                    e9:1a:fc:f7:50:b8:2d:06:09:87:c7:59:fa:db:dd:
                    a9:f0:64:66:75:72:2e:f8:56:fd:5c:a6:a7:78:cb:
                    f3:8f:31:7d:e0:9e:c6:c1:7b:5e:9a:c1:d2:a9:78:
                    eb:da:0d:ec:47:21:0c:e5:b6:fd:d6:7a:e1:44:58:
                    2d:47:8a:98:02:b3:31:df:80:63:3c:42:7c:77:cd:
                    04:c3:78:31:28:c6:06:01:c0:ae:22:4a:6f:53:86:
                    f8:52:74:06:ef:90:cc:3b:f1:25:0f:a4:94:59:00:
                    e3:e7:90:1d:5a:24:11:14:1b:59:1b:51:64:ed:68:
                    dc:5f:3d:fd:5f:e7:5a:d8:51:4f:20:ce:7c:bb:45:
                    ab:e7:78:d1:16:9f:cd:c2:ba:76:86:6b:8a:14:14:
                    8f:be:e1:ae:12:5e:5a:7b:22:45:18:fb:2c:c7:49:
                    d0:b2:77:03:51:81:ed:10:f7:10:26:8c:90:83:7e:
                    67:93:10:d3:68:ab:fb:68:ad:5e:d1:74:38:f3:85:
                    e8:fe:66:08:43:15:2f:33:c3:bd:32:c9:5f:5b:d6:
                    c4:df:b1:1b:a1:c2:1d:8a:ed:32:e2:ff:dc:e6:23:
                    28:20:09:0f:e6:76:c0:5f:fb:ae:f6:5f:67:74:dc:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:65:E6:7C:7D:7A:E2:17:0A:88:11:23:05:DD:C6:F6:AA:51:26:95
            X509v3 Authority Key Identifier:
                keyid:9F:B0:11:50:1E:0E:16:7D:04:27:3D:ED:44:2B:E9:72:FA:38:36:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/9FB011501E0E167D04273DED442BE972FA3836F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FB011501E0E167D04273DED442BE972FA3836F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9428123CF6F4352637920B5D217138756DDA3B55722889C3EC7E54014B3F28FE/0/323830313a31303a353830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:74:13:79:45:8f:ef:74:49:a5:a9:71:a2:0a:36:02:bf:
         e5:95:cd:8c:07:11:20:34:6d:fe:0f:26:86:32:5b:8d:6c:88:
         f8:7e:86:f6:25:76:70:24:d2:3d:25:21:2c:5a:29:38:a9:ba:
         a0:56:c0:86:74:5c:30:77:99:7c:00:10:c2:cb:75:2c:f9:bc:
         4f:27:39:44:85:e0:04:0c:f2:fa:d1:9d:ee:31:77:15:b5:22:
         2b:c3:1d:63:e3:7e:81:c8:3d:c1:26:c0:98:e6:92:07:c2:42:
         e3:d5:55:2b:d9:4d:dd:0d:d2:be:67:ad:2b:bf:18:44:a8:14:
         5a:69:88:6f:ff:e6:cb:a8:7c:c8:c3:6c:e5:09:32:52:0c:42:
         63:ba:39:18:4f:68:67:e8:5b:d9:ce:43:18:02:98:b1:95:54:
         5e:81:f8:32:76:f5:b6:fb:d4:44:0c:5a:12:e6:95:18:07:6a:
         20:0a:fd:f1:91:85:a1:fc:31:bf:22:45:06:bb:a4:0b:a4:19:
         49:69:b5:1a:bc:6a:27:8d:40:e1:4e:73:92:13:89:5f:31:65:
         9f:1c:0c:4a:7f:25:d3:51:0a:18:19:2a:cd:04:86:6d:8e:9c:
         17:30:0f:40:fd:15:22:88:e6:d4:14:0a:58:15:33:c0:bd:f9:
         c5:74:81:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:41:06 2026 by rpki-client