Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a35373a3a2f34382d3634203d3e2031323132.roa
File:                     323830303a3730303a35373a3a2f34382d3634203d3e2031323132.roa (raw, json)
Hash identifier:          crpVCFKR4L3xv4jUR5W7YV6MvQHdpG5MtKe4VOhgF6k=
Subject key identifier:   2B:92:DC:92:F8:70:89:2C:4F:45:47:0E:4B:99:DE:60:92:F4:0B:F0
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       6912B6B4E23336EE8E9E5E1BE421C884FCB8F296
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a35373a3a2f34382d3634203d3e2031323132.roa
Signing time:             Tue 15 Sep 2026 13:30:09 +0000
ROA not before:           Tue 15 Sep 2026 13:25:09 +0000
ROA not after:            Tue 14 Sep 2027 13:30:09 +0000
asID:                     1212
IP address blocks:        2800:700:57::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:12:b6:b4:e2:33:36:ee:8e:9e:5e:1b:e4:21:c8:84:fc:b8:f2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:09 2026 GMT
            Not After : Sep 14 13:30:09 2027 GMT
        Subject: CN=2B92DC92F870892C4F45470E4B99DE6092F40BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:53:13:89:65:8a:9c:43:b6:56:5f:ad:1a:
                    a5:29:db:d5:04:8b:fb:6b:1d:30:d6:33:77:f5:5a:
                    cc:a1:81:d0:c4:2a:4e:48:29:7d:a7:86:a1:75:44:
                    09:b0:88:55:20:95:5a:b5:96:6e:42:b6:7b:ce:4c:
                    e1:8f:f2:20:9e:6c:bd:1e:f1:c9:54:84:e4:d9:1f:
                    a6:78:24:87:dc:21:33:a3:4b:ab:4d:9c:cb:34:b1:
                    70:75:97:0e:11:dc:12:e4:94:de:09:66:53:68:13:
                    71:62:08:a5:10:37:c4:cc:41:a2:33:c1:65:5c:1a:
                    ed:4a:a6:56:1a:ac:31:e9:a3:ed:df:97:1f:8b:ea:
                    a6:fb:7d:19:f6:ec:ac:bf:bb:ed:43:14:f6:43:de:
                    44:af:9e:91:e1:b9:b9:97:df:b0:21:74:e6:ff:32:
                    1b:91:ab:50:5c:6f:b8:e7:26:e3:cc:35:f2:6d:13:
                    68:aa:0b:1e:a9:70:e6:56:42:18:23:43:be:24:59:
                    bd:bb:e1:7e:48:c8:e0:0a:7d:32:b2:8a:66:f3:ee:
                    d9:75:a7:47:ec:87:0f:af:88:33:6a:cf:94:36:b1:
                    7c:53:74:48:0a:93:a8:b0:f5:75:fb:6d:31:e2:2e:
                    ae:a8:d0:80:e1:5c:c4:8a:c3:d7:43:0c:cf:35:a3:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:92:DC:92:F8:70:89:2C:4F:45:47:0E:4B:99:DE:60:92:F4:0B:F0
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a35373a3a2f34382d3634203d3e2031323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:db:36:b4:24:95:ec:ce:46:0a:6c:02:d4:6f:22:ec:03:6b:
         ae:50:31:f9:6d:ae:66:d6:cc:6a:05:e6:e3:5b:76:5b:24:be:
         aa:c3:f2:41:1e:f7:bd:5a:cb:f7:79:6f:a5:01:6b:b0:8c:fa:
         c0:22:ab:db:ee:89:0b:9d:89:7f:a2:ab:53:c4:ce:e8:37:87:
         96:0d:5d:3b:57:88:c1:2f:31:29:7b:3b:17:04:6e:44:4b:a3:
         e9:e6:53:f2:62:c2:22:2f:ea:48:fc:02:ac:1b:11:42:68:ad:
         ec:7b:89:ee:e7:66:e6:c2:5a:38:28:23:46:5f:24:29:10:3d:
         8e:c9:9a:1e:07:e3:a9:18:4d:91:9a:29:7b:bf:28:1a:be:0e:
         4b:2f:bb:42:30:a4:e3:04:98:b1:94:a0:fe:d6:f4:64:39:1b:
         cb:0a:b5:01:0e:38:83:2c:29:16:5e:f0:8b:db:68:1f:86:c9:
         f1:2b:2a:71:14:39:d4:19:eb:63:b5:f3:b6:9d:5e:9c:9e:fc:
         6f:19:d5:79:8e:ff:75:7e:ee:27:5a:c8:28:19:f1:a7:c5:91:
         ac:62:c7:61:9d:2d:0b:1b:97:5f:cc:70:67:1c:7a:d1:0f:f7:
         b0:15:37:49:80:c0:98:1c:ff:35:19:6a:4a:ea:f1:95:b5:dc:
         36:ac:fa:ba
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUaRK2tOIzNu6Onl4b5CHIhPy48pYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDlaFw0yNzA5MTQxMzMwMDlaMDMxMTAvBgNV
BAMTKDJCOTJEQzkyRjg3MDg5MkM0RjQ1NDcwRTRCOTlERTYwOTJGNDBCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRMVMTiWWKnEO2Vl+tGqUp29UE
i/trHTDWM3f1WsyhgdDEKk5IKX2nhqF1RAmwiFUglVq1lm5CtnvOTOGP8iCebL0e
8clUhOTZH6Z4JIfcITOjS6tNnMs0sXB1lw4R3BLklN4JZlNoE3FiCKUQN8TMQaIz
wWVcGu1KplYarDHpo+3flx+L6qb7fRn27Ky/u+1DFPZD3kSvnpHhubmX37AhdOb/
MhuRq1Bcb7jnJuPMNfJtE2iqCx6pcOZWQhgjQ74kWb274X5IyOAKfTKyimbz7tl1
p0fshw+viDNqz5Q2sXxTdEgKk6iw9XX7bTHiLq6o0IDhXMSKw9dDDM81o51bAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUK5LckvhwiSxPRUcOS5neYJL0C/AwHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzgzMDMwM2EzNzMwMzAzYTM1Mzcz
YTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMTMyMzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgABwAA
VzANBgkqhkiG9w0BAQsFAAOCAQEA1ts2tCSV7M5GCmwC1G8i7ANrrlAx+W2uZtbM
agXm41t2WyS+qsPyQR73vVrL93lvpQFrsIz6wCKr2+6JC52Jf6KrU8TO6DeHlg1d
O1eIwS8xKXs7FwRuREuj6eZT8mLCIi/qSPwCrBsRQmit7HuJ7udm5sJaOCgjRl8k
KRA9jsmaHgfjqRhNkZope78oGr4OSy+7QjCk4wSYsZSg/tb0ZDkbywq1AQ44gywp
Fl7wi9toH4bJ8SsqcRQ51BnrY7Xztp1enJ78bxnVeY7/dX7uJ1rIKBnxp8WRrGLH
YZ0tCxuXX8xwZxx60Q/3sBU3SYDAmBz/NRlqSurxlbXcNqz6ug==
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:08 2026 by rpki-client