Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031323132.roa
File:                     323830303a3730303a3a2f33322d3634203d3e2031323132.roa (raw, json)
Hash identifier:          9rmQ3kk6WtUo5adNyIRt7Xx/J/A7oo8dEN5mBoYmrdI=
Subject key identifier:   63:44:69:9A:9D:2F:47:79:F3:5B:D4:B2:58:ED:44:08:E5:53:7D:C3
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       78F331F972D35B3027CCF69B4E22D5A3F4A7C579
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031323132.roa
Signing time:             Tue 15 Sep 2026 13:30:21 +0000
ROA not before:           Tue 15 Sep 2026 13:25:21 +0000
ROA not after:            Tue 14 Sep 2027 13:30:21 +0000
asID:                     1212
IP address blocks:        2800:700::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:31:f9:72:d3:5b:30:27:cc:f6:9b:4e:22:d5:a3:f4:a7:c5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:21 2026 GMT
            Not After : Sep 14 13:30:21 2027 GMT
        Subject: CN=6344699A9D2F4779F35BD4B258ED4408E5537DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:24:2d:a0:16:54:77:79:49:36:c9:f1:b9:
                    71:cc:6e:ed:bd:00:cd:cd:3b:cf:da:56:4d:a7:22:
                    dc:11:bf:f5:60:73:05:d3:dc:8f:a2:5b:bc:de:5b:
                    f9:9d:b2:d2:63:de:6d:5a:d6:5f:a0:2e:46:e0:e8:
                    4e:6b:47:1d:c7:86:ef:2d:f4:16:d7:1e:04:c0:33:
                    74:ed:87:91:da:5c:dc:35:2c:f2:14:a6:eb:c0:28:
                    c9:be:3f:f4:27:84:2e:13:49:d6:e6:59:1d:7b:53:
                    4a:96:c5:ae:5b:34:6a:d3:a4:2d:9b:68:d6:eb:0e:
                    aa:52:e1:6b:d6:ef:d8:ef:83:65:5e:7a:b8:81:15:
                    e0:27:f2:78:47:23:3e:e5:b8:8b:c4:10:04:0e:b7:
                    98:2f:48:0a:f4:8b:f3:cb:81:a0:a2:b2:06:b9:b1:
                    5b:01:5a:45:90:16:1c:98:2f:50:05:6b:7c:1e:c0:
                    ac:91:4d:94:c4:f9:94:a2:f9:81:bb:74:01:da:75:
                    2d:b3:7d:f4:c1:74:27:57:54:29:ea:44:ec:ad:5f:
                    5f:96:2a:0b:b5:33:48:06:31:25:0e:61:41:f2:eb:
                    cc:15:3f:79:be:04:4d:63:dd:b0:66:28:86:07:16:
                    bc:cd:4b:db:59:fa:f3:d9:cd:75:cf:9d:d9:de:29:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:69:9A:9D:2F:47:79:F3:5B:D4:B2:58:ED:44:08:E5:53:7D:C3
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:db:ea:16:74:23:22:45:93:8f:6a:9a:50:03:d7:74:a1:f2:
         2a:95:c4:db:c4:d1:f9:27:2a:f7:94:05:0f:65:4a:13:2a:0d:
         1e:f1:08:a0:d0:32:69:6b:ea:fc:11:f6:cd:6a:d3:9c:f7:5b:
         dd:ad:62:fe:98:fa:7b:4d:1a:89:c9:6a:c2:fa:d7:bf:9e:3f:
         34:7a:80:de:47:c8:ff:41:72:ed:74:e3:d0:f9:fd:af:e4:f2:
         bf:9b:82:a5:3d:48:35:5c:9a:6a:cf:13:fd:6e:25:c3:58:41:
         e4:5e:64:d8:11:84:7a:f2:36:22:a9:db:3b:d7:5c:45:c0:f9:
         86:e4:e7:6d:98:0f:15:2d:41:f2:09:e7:7f:86:49:f2:ed:98:
         77:6b:77:9d:8a:5b:e9:b3:1f:87:0d:0e:27:bc:aa:27:1a:10:
         b3:be:45:5b:af:e5:eb:4c:c2:d4:d2:6d:6c:da:6b:2f:eb:60:
         d2:4b:1b:4d:43:27:8f:d9:e1:50:cf:3f:75:78:2e:d5:b7:2d:
         b4:dc:e8:9d:85:a1:e6:7a:c4:51:f4:64:0e:15:79:56:09:31:
         ad:c8:af:21:d4:08:11:71:95:dc:e4:be:cb:22:67:53:6f:b7:
         d1:76:08:a1:c6:20:a0:f8:e7:3d:99:f9:09:2e:47:f1:c3:8e:
         d9:fb:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:21 2026 by rpki-client