Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031333133.roa
File:                     323830303a3730303a3a2f33322d3634203d3e2031333133.roa (raw, json)
Hash identifier:          26tFPV8OnA9xqmXNBoJPV5cPq5dLMz8kD0ZRXdhI/DM=
Subject key identifier:   07:57:80:0D:E7:37:8F:E9:89:FE:2F:C0:6C:CB:7C:6E:10:A7:4A:8F
Certificate issuer:       /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial:       7E7EA1DFDD48BEF29E11EE4C15E9F2BB93C63802
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031333133.roa
Signing time:             Tue 15 Sep 2026 13:30:00 +0000
ROA not before:           Tue 15 Sep 2026 13:25:00 +0000
ROA not after:            Tue 14 Sep 2027 13:30:00 +0000
asID:                     1313
IP address blocks:        2800:700::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7e:a1:df:dd:48:be:f2:9e:11:ee:4c:15:e9:f2:bb:93:c6:38:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
        Validity
            Not Before: Sep 15 13:25:00 2026 GMT
            Not After : Sep 14 13:30:00 2027 GMT
        Subject: CN=0757800DE7378FE989FE2FC06CCB7C6E10A74A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:96:2f:ca:1c:39:d4:9a:bf:ea:38:80:2d:
                    a2:70:74:3a:2f:3b:29:71:94:0b:a9:26:c9:14:74:
                    54:ab:df:16:38:0a:8b:08:eb:bf:87:ee:c2:7e:92:
                    60:3e:c2:7d:3a:6a:da:b1:c1:c9:0e:57:2d:eb:56:
                    9c:f0:b0:e3:7c:a8:c4:0e:f8:3a:4f:53:63:59:85:
                    3b:ee:17:7d:92:9f:e8:e9:15:96:e0:f9:7b:df:13:
                    22:17:f4:e0:9a:dc:1e:d6:28:e8:3a:be:7e:a1:13:
                    4d:52:ae:60:55:1c:a2:b8:98:9f:d5:02:8e:5f:32:
                    67:5f:68:75:2a:ac:3b:09:c4:f8:82:20:4c:7f:ca:
                    a2:06:cf:b8:07:3a:95:3c:00:56:03:c3:82:e2:d7:
                    09:b3:f2:80:e7:4e:5c:6e:9a:de:41:9a:0b:df:09:
                    cd:5b:61:61:f1:c9:e3:be:bf:b8:cc:a9:c5:d1:11:
                    3d:8c:d0:6e:5b:80:cd:90:89:1a:f3:46:4e:f0:ed:
                    8b:17:ae:fc:9a:aa:9a:77:47:c4:dc:f8:06:ae:41:
                    cf:04:7b:9b:30:3b:2e:97:8b:e9:b3:20:f2:45:76:
                    72:05:f6:c2:63:9c:32:f3:6d:da:fd:5b:8e:12:f1:
                    e4:e3:08:44:2c:75:c5:1c:76:2c:84:49:26:30:30:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:80:0D:E7:37:8F:E9:89:FE:2F:C0:6C:CB:7C:6E:10:A7:4A:8F
            X509v3 Authority Key Identifier:
                keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3634203d3e2031333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:51:ad:88:76:1c:87:b5:32:17:c3:a5:09:9d:a3:15:5b:c3:
         45:f7:5f:e3:2a:bf:77:5d:a6:70:75:76:24:03:a6:ce:f6:b0:
         5e:ab:7a:b4:3c:ab:4b:25:de:a4:98:f4:06:a0:fd:e3:50:ff:
         4e:77:78:84:a1:e5:71:14:60:d8:c3:5b:55:c9:58:f1:15:55:
         e6:bb:36:06:1a:bc:24:e4:21:04:b5:5f:59:0a:12:10:38:1f:
         fa:e3:88:79:ec:46:cb:c6:1e:b2:b3:ac:fe:a5:bc:e2:c8:50:
         b7:d0:6b:23:90:fa:6d:a0:a0:2c:1c:e4:02:0c:70:52:c0:68:
         29:a2:22:dc:e4:89:5a:92:ff:78:fc:5f:55:29:67:da:8e:b3:
         42:79:42:61:08:13:40:9a:97:f9:91:38:a9:4b:76:b4:26:78:
         b4:58:f3:30:6b:99:78:af:a8:08:b5:1d:cb:87:ee:aa:0f:b9:
         07:e1:98:79:8f:28:fb:e5:db:ca:23:82:86:4e:b2:3b:64:32:
         d6:7f:d5:93:75:84:45:26:90:38:35:d8:25:3d:db:89:8e:9b:
         88:0d:9d:55:36:1c:70:96:62:f3:99:21:7f:cb:ff:14:b9:bc:
         6f:4b:0c:30:c0:3e:b1:73:05:98:f0:b3:10:78:35:c2:89:36:
         3e:2e:d4:29
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUfn6h391IvvKeEe5MFenyu5PGOAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2
NTY0RENGNjAeFw0yNjA5MTUxMzI1MDBaFw0yNzA5MTQxMzMwMDBaMDMxMTAvBgNV
BAMTKDA3NTc4MDBERTczNzhGRTk4OUZFMkZDMDZDQ0I3QzZFMTBBNzRBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpi5Yvyhw51Jq/6jiALaJwdDov
OylxlAupJskUdFSr3xY4CosI67+H7sJ+kmA+wn06atqxwckOVy3rVpzwsON8qMQO
+DpPU2NZhTvuF32Sn+jpFZbg+XvfEyIX9OCa3B7WKOg6vn6hE01SrmBVHKK4mJ/V
Ao5fMmdfaHUqrDsJxPiCIEx/yqIGz7gHOpU8AFYDw4Li1wmz8oDnTlxumt5Bmgvf
Cc1bYWHxyeO+v7jMqcXRET2M0G5bgM2QiRrzRk7w7YsXrvyaqpp3R8Tc+AauQc8E
e5swOy6Xi+mzIPJFdnIF9sJjnDLzbdr9W44S8eTjCEQsdcUcdiyESSYwMKTlAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUB1eADec3j+mJ/i/AbMt8bhCnSo8wHwYDVR0j
BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0
RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB
NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzgzMDMwM2EzNzMwMzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMTMzMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgABwAwDQYJKoZI
hvcNAQELBQADggEBAMxRrYh2HIe1MhfDpQmdoxVbw0X3X+Mqv3ddpnB1diQDps72
sF6rerQ8q0sl3qSY9Aag/eNQ/053eISh5XEUYNjDW1XJWPEVVea7NgYavCTkIQS1
X1kKEhA4H/rjiHnsRsvGHrKzrP6lvOLIULfQayOQ+m2goCwc5AIMcFLAaCmiItzk
iVqS/3j8X1UpZ9qOs0J5QmEIE0Cal/mROKlLdrQmeLRY8zBrmXivqAi1HcuH7qoP
uQfhmHmPKPvl28ojgoZOsjtkMtZ/1ZN1hEUmkDg12CU924mOm4gNnVU2HHCWYvOZ
IX/L/xS5vG9LDDDAPrFzBZjwsxB4NcKJNj4u1Ck=
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:21 2026 by rpki-client