Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa
File:                     323830303a3730303a3a2f33322d3438203d3e203532323636.roa (raw, json)
Hash identifier:          kF0AgAtQxqMS1go3t/x8WnVAq7YXD2Eg4QWwLhgXf5Q=
Subject key identifier:   D5:57:FB:41:4F:A6:31:1D:B0:B8:A1:00:7A:67:12:50:20:4C:6F:C3
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       64D6D40FD4A1D16F9A811F4FA6662D6508B3B5EF
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa
Signing time:             Tue 15 Sep 2026 13:30:07 +0000
ROA not before:           Tue 15 Sep 2026 13:25:07 +0000
ROA not after:            Tue 14 Sep 2027 13:30:07 +0000
asID:                     52266
IP address blocks:        2800:700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d6:d4:0f:d4:a1:d1:6f:9a:81:1f:4f:a6:66:2d:65:08:b3:b5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:07 2026 GMT
            Not After : Sep 14 13:30:07 2027 GMT
        Subject: CN=D557FB414FA6311DB0B8A1007A671250204C6FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:a5:aa:78:58:97:91:a7:c1:05:ab:35:42:
                    23:50:c6:c5:71:6f:fb:1b:f0:3f:35:28:a8:a4:e6:
                    85:a8:ed:48:dc:90:f3:ea:f3:76:29:09:45:cf:f3:
                    da:e8:36:c1:2f:5b:c1:13:4d:14:c6:ec:30:c0:ec:
                    78:5b:a7:1e:8b:8a:dc:82:1a:e1:cb:0e:2a:f3:4c:
                    3d:0f:f6:76:e9:27:01:73:25:a2:43:ee:57:9c:25:
                    ec:7e:26:ba:ff:ea:c2:65:c3:58:60:3e:9d:09:0f:
                    e7:cd:64:12:b1:b3:96:4f:68:58:69:a1:b0:d0:1b:
                    50:cf:a8:0f:ec:64:f8:26:4c:00:12:b1:94:15:d4:
                    e7:99:45:bf:cc:9f:c8:d4:9d:96:0a:fc:30:a1:69:
                    6c:94:f8:db:94:9c:b7:80:d6:23:af:08:00:b5:50:
                    c0:b5:af:25:2d:fa:a2:c2:71:0e:c5:bb:a6:27:f3:
                    95:39:d0:54:14:ee:e1:d7:d5:92:43:9c:8e:83:ad:
                    13:5b:78:5c:67:1d:9f:c3:94:95:56:95:b3:52:bf:
                    90:ae:2b:20:07:fe:c1:e0:a9:93:c5:3a:26:20:7a:
                    42:ed:80:4b:17:70:21:52:53:b0:f7:fc:6e:8a:7e:
                    f3:09:e1:a3:a0:4b:59:1d:07:2c:ec:de:42:08:6a:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:57:FB:41:4F:A6:31:1D:B0:B8:A1:00:7A:67:12:50:20:4C:6F:C3
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:1f:c9:e8:66:bb:3e:66:16:b7:01:0f:59:1c:ec:07:55:2f:
         ac:e1:55:15:7b:a0:86:20:5d:1f:d0:45:cf:57:d8:97:32:1f:
         93:9e:79:d2:69:eb:ac:8f:9c:57:44:14:9a:a1:57:ba:b2:38:
         c1:fd:c3:1c:92:5a:a3:79:e1:86:b6:dd:95:ca:ef:7c:c7:e5:
         b6:b4:48:eb:4c:2a:5b:01:53:19:eb:45:b6:a9:b6:4b:01:28:
         f0:89:0b:64:a5:bd:34:3c:20:92:ca:66:f2:21:23:70:b8:00:
         e5:da:f1:2e:b8:36:e1:26:75:16:ee:7c:78:6c:6a:95:a0:4a:
         9f:a8:8e:3b:ec:48:97:5f:7e:94:d3:03:86:2a:c5:2e:d0:0c:
         12:0b:c5:a7:7e:d0:45:2a:2c:a5:7e:b3:ad:4d:d9:4c:4c:39:
         1a:ce:78:d5:b0:e8:80:2d:f3:4e:57:e6:cb:82:3e:61:d5:74:
         4c:7c:60:cd:21:a2:e5:44:65:46:9e:45:f5:95:97:34:c3:b9:
         84:9d:fc:7e:c2:56:3f:cc:87:45:20:47:ca:c2:9c:39:67:c2:
         23:cc:39:d9:00:79:4d:e4:47:ea:8f:7a:2d:11:d3:ac:ee:ee:
         9e:9c:f9:2d:c4:d6:d3:5d:cf:d6:62:77:c6:3a:fb:d8:e2:1d:
         3d:82:f2:8a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZNbUD9Sh0W+agR9PpmYtZQizte8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDdaFw0yNzA5MTQxMzMwMDdaMDMxMTAvBgNV
BAMTKEQ1NTdGQjQxNEZBNjMxMURCMEI4QTEwMDdBNjcxMjUwMjA0QzZGQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgH6WqeFiXkafBBas1QiNQxsVx
b/sb8D81KKik5oWo7UjckPPq83YpCUXP89roNsEvW8ETTRTG7DDA7Hhbpx6LityC
GuHLDirzTD0P9nbpJwFzJaJD7lecJex+Jrr/6sJlw1hgPp0JD+fNZBKxs5ZPaFhp
obDQG1DPqA/sZPgmTAASsZQV1OeZRb/Mn8jUnZYK/DChaWyU+NuUnLeA1iOvCAC1
UMC1ryUt+qLCcQ7Fu6Yn85U50FQU7uHX1ZJDnI6DrRNbeFxnHZ/DlJVWlbNSv5Cu
KyAH/sHgqZPFOiYgekLtgEsXcCFSU7D3/G6KfvMJ4aOgS1kdByzs3kIIakJJAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU1Vf7QU+mMR2wuKEAemcSUCBMb8MwHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzgzMDMwM2EzNzMwMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzNTMyMzIzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAHADANBgkq
hkiG9w0BAQsFAAOCAQEAZB/J6Ga7PmYWtwEPWRzsB1UvrOFVFXughiBdH9BFz1fY
lzIfk5550mnrrI+cV0QUmqFXurI4wf3DHJJao3nhhrbdlcrvfMfltrRI60wqWwFT
GetFtqm2SwEo8IkLZKW9NDwgkspm8iEjcLgA5drxLrg24SZ1Fu58eGxqlaBKn6iO
O+xIl19+lNMDhirFLtAMEgvFp37QRSospX6zrU3ZTEw5Gs541bDogC3zTlfmy4I+
YdV0THxgzSGi5URlRp5F9ZWXNMO5hJ38fsJWP8yHRSBHysKcOWfCI8w52QB5TeRH
6o96LRHTrO7unpz5LcTW013P1mJ3xjr72OIdPYLyig==
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:19 2026 by rpki-client