Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031313131.roa
File:                     323830303a3730303a3a2f33322d3634203d3e2031313131.roa (raw, json)
Hash identifier:          aCQLWTpnFisgDyRwFxNGyEjGS0qbDMkhdiwzbbGzEUM=
Subject key identifier:   DC:3F:E8:BE:39:15:CE:7F:0A:3E:89:65:48:07:82:70:31:6C:62:5E
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       35BB93AB670E3803213FEE4011F974C70622A378
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031313131.roa
Signing time:             Tue 15 Sep 2026 13:30:06 +0000
ROA not before:           Tue 15 Sep 2026 13:25:06 +0000
ROA not after:            Tue 14 Sep 2027 13:30:06 +0000
asID:                     1111
IP address blocks:        2800:700::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bb:93:ab:67:0e:38:03:21:3f:ee:40:11:f9:74:c7:06:22:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:06 2026 GMT
            Not After : Sep 14 13:30:06 2027 GMT
        Subject: CN=DC3FE8BE3915CE7F0A3E896548078270316C625E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:cd:6c:cc:5f:d3:d9:d4:99:5d:a8:de:b1:
                    24:9f:64:da:37:13:43:67:0b:ed:c7:f3:54:52:8e:
                    58:5a:2a:34:af:98:4a:bb:79:5b:5a:b1:07:e9:99:
                    72:8c:9c:7f:e2:b1:19:c3:8f:b2:75:26:88:46:46:
                    f1:7c:f9:ad:dc:8d:b9:fd:91:4f:d1:d7:e5:8d:33:
                    4f:a8:7e:6d:69:44:44:fc:54:7f:bc:9e:a1:3b:28:
                    b7:74:9c:dd:45:7a:5a:20:b5:51:07:7c:8d:94:b6:
                    bc:de:0a:5a:71:f5:26:10:4d:c9:d1:d7:59:84:5b:
                    a3:0f:c4:3c:5c:c7:21:76:43:07:76:68:59:09:3a:
                    d9:f6:29:5a:2e:94:8a:a1:9e:fb:52:33:5b:72:08:
                    51:85:1c:49:48:ee:46:32:14:87:6e:f6:e1:5e:9c:
                    54:1b:3b:1e:e0:20:f4:e1:1c:1e:32:d2:ca:52:3e:
                    88:f6:cb:b5:7f:3c:92:14:dc:e9:af:cb:56:4d:42:
                    97:74:4e:14:39:dd:22:a2:bc:01:ea:b0:f2:5c:23:
                    93:5e:cb:7d:de:28:94:5b:24:e5:15:0b:b8:bd:ed:
                    0c:73:e0:54:b2:ba:15:d7:bc:a6:15:fd:09:43:b9:
                    da:64:bb:84:ab:ce:a2:f8:6a:38:2b:67:4a:59:1c:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:E8:BE:39:15:CE:7F:0A:3E:89:65:48:07:82:70:31:6C:62:5E
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:60:93:37:42:de:fd:f3:b6:4a:13:4c:28:42:60:0e:fb:
         02:77:6a:d2:20:15:33:72:26:01:39:26:08:79:1e:16:16:e1:
         05:01:d6:87:9e:63:5e:86:b6:9f:30:7c:34:5f:5c:ee:97:42:
         62:c6:32:1e:b4:5f:f9:f1:e5:62:f9:05:c8:20:76:05:1b:da:
         73:db:04:29:92:2a:a0:4a:3b:39:a9:e6:04:71:29:52:40:80:
         1c:eb:8d:e0:2e:2f:75:e0:cb:66:5e:2a:f5:5b:35:d1:dd:40:
         3d:84:b6:79:97:1f:31:4c:9e:fd:8c:d4:fa:b6:5a:98:f3:24:
         7a:42:5a:43:21:00:2e:09:a8:77:86:c9:c5:bf:98:7f:f7:ab:
         71:22:07:e5:07:07:ec:a5:2a:9a:ea:cb:55:2d:dd:b4:1f:6a:
         2f:61:28:c7:e3:ea:7d:6e:7a:e2:47:1f:0c:c1:10:8c:05:cb:
         fa:23:73:a3:08:b2:66:bb:0d:23:2c:eb:b1:6d:1d:e8:e3:fb:
         17:d6:a1:6d:51:22:dc:99:d2:fe:4c:c2:b1:1d:57:86:10:85:
         6d:7d:28:7d:73:f9:10:c0:3f:5a:1d:cd:91:fc:ac:39:e5:2d:
         03:1c:8e:1e:e0:6b:ce:4e:9f:3d:3a:be:b7:67:0e:8d:a5:e6:
         25:21:eb:36
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUNbuTq2cOOAMhP+5AEfl0xwYio3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDZaFw0yNzA5MTQxMzMwMDZaMDMxMTAvBgNV
BAMTKERDM0ZFOEJFMzkxNUNFN0YwQTNFODk2NTQ4MDc4MjcwMzE2QzYyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFM1szF/T2dSZXajesSSfZNo3
E0NnC+3H81RSjlhaKjSvmEq7eVtasQfpmXKMnH/isRnDj7J1JohGRvF8+a3cjbn9
kU/R1+WNM0+ofm1pRET8VH+8nqE7KLd0nN1FelogtVEHfI2UtrzeClpx9SYQTcnR
11mEW6MPxDxcxyF2Qwd2aFkJOtn2KVoulIqhnvtSM1tyCFGFHElI7kYyFIdu9uFe
nFQbOx7gIPThHB4y0spSPoj2y7V/PJIU3Omvy1ZNQpd0ThQ53SKivAHqsPJcI5Ne
y33eKJRbJOUVC7i97Qxz4FSyuhXXvKYV/QlDudpku4SrzqL4ajgrZ0pZHLV1AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU3D/ovjkVzn8KPollSAeCcDFsYl4wHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzgzMDMwM2EzNzMwMzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMTMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgABwAwDQYJKoZI
hvcNAQELBQADggEBAF9NYJM3Qt7987ZKE0woQmAO+wJ3atIgFTNyJgE5Jgh5HhYW
4QUB1oeeY16Gtp8wfDRfXO6XQmLGMh60X/nx5WL5BcggdgUb2nPbBCmSKqBKOzmp
5gRxKVJAgBzrjeAuL3Xgy2ZeKvVbNdHdQD2EtnmXHzFMnv2M1Pq2WpjzJHpCWkMh
AC4JqHeGycW/mH/3q3EiB+UHB+ylKprqy1Ut3bQfai9hKMfj6n1ueuJHHwzBEIwF
y/ojc6MIsma7DSMs67FtHejj+xfWoW1RItyZ0v5MwrEdV4YQhW19KH1z+RDAP1od
zZH8rDnlLQMcjh7ga85Onz06vrdnDo2l5iUh6zY=
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:15 2026 by rpki-client