Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/323030313a313237323a3a2f33322d3438203d3e20323734343232.roa
File:                     323030313a313237323a3a2f33322d3438203d3e20323734343232.roa (raw, json)
Hash identifier:          NepBMHtzOFE8KizSPZnFn7hDA5FiXvkjaLD7p+voEpc=
Subject key identifier:   3E:F3:C7:B2:B0:87:23:10:57:32:F6:9A:4F:5E:A2:15:D4:23:36:E8
Certificate issuer:       /CN=C5D7026E874D177C427C77F8F8DC63B896F33387
Certificate serial:       352D93887341BF728B45E77D802DA14DF8214BE6
Authority key identifier: C5:D7:02:6E:87:4D:17:7C:42:7C:77:F8:F8:DC:63:B8:96:F3:33:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5D7026E874D177C427C77F8F8DC63B896F33387.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/323030313a313237323a3a2f33322d3438203d3e20323734343232.roa
Signing time:             Tue 04 Aug 2026 00:30:00 +0000
ROA not before:           Tue 04 Aug 2026 00:25:00 +0000
ROA not after:            Tue 03 Aug 2027 00:30:00 +0000
asID:                     274422
IP address blocks:        2001:1272::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/C5D7026E874D177C427C77F8F8DC63B896F33387.crl
                          rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/C5D7026E874D177C427C77F8F8DC63B896F33387.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5D7026E874D177C427C77F8F8DC63B896F33387.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2d:93:88:73:41:bf:72:8b:45:e7:7d:80:2d:a1:4d:f8:21:4b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5D7026E874D177C427C77F8F8DC63B896F33387
        Validity
            Not Before: Aug  4 00:25:00 2026 GMT
            Not After : Aug  3 00:30:00 2027 GMT
        Subject: CN=3EF3C7B2B08723105732F69A4F5EA215D42336E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:c0:c2:6b:15:e6:f8:7b:26:82:44:69:cd:
                    01:55:54:62:fc:36:ff:f4:e1:86:f7:c5:b3:b0:3d:
                    0d:dd:17:84:d4:cb:56:ef:1d:82:56:04:99:42:48:
                    7d:a1:78:98:57:79:b5:4e:f4:3b:3a:33:23:1e:b9:
                    40:9a:2b:eb:eb:fa:fc:be:1c:05:0e:56:a5:15:1f:
                    72:5d:73:d1:7d:2d:41:9f:aa:83:2d:ad:97:9b:99:
                    1d:c3:b6:53:d5:54:fc:6a:64:5e:6d:2e:0c:b2:b7:
                    6c:37:f2:33:72:2d:f9:ec:b1:e8:d3:b2:db:fc:ab:
                    64:12:c3:43:e8:79:a5:e6:1b:40:fa:cd:16:5f:b2:
                    9e:c6:f5:a7:3b:7c:e7:1c:2c:e8:a7:e1:ae:d5:fc:
                    32:db:35:2a:b5:4f:76:3a:cc:6f:69:98:13:b7:98:
                    80:e3:56:f1:58:7f:8a:ad:a3:f6:ce:92:af:85:b3:
                    fa:c5:2b:71:b2:ca:a4:ec:5a:81:ee:17:43:bd:26:
                    c0:6d:1b:30:ae:1a:5c:36:14:a4:64:a6:17:87:9d:
                    ea:2d:49:3b:d2:12:e3:86:d5:3b:ad:c9:83:4d:d7:
                    4e:10:ce:dc:5c:76:e0:c1:aa:2b:7b:d4:41:4f:5f:
                    b3:00:46:78:1c:9c:a1:5a:5c:45:8f:84:5c:ef:eb:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:C7:B2:B0:87:23:10:57:32:F6:9A:4F:5E:A2:15:D4:23:36:E8
            X509v3 Authority Key Identifier:
                keyid:C5:D7:02:6E:87:4D:17:7C:42:7C:77:F8:F8:DC:63:B8:96:F3:33:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/C5D7026E874D177C427C77F8F8DC63B896F33387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5D7026E874D177C427C77F8F8DC63B896F33387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/323030313a313237323a3a2f33322d3438203d3e20323734343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1272::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:7b:41:0a:ab:54:21:b3:0b:50:6e:e0:76:9f:16:f6:c6:44:
         8a:ad:44:bf:96:08:6b:ba:1a:cf:22:76:ad:36:72:e0:56:7a:
         0b:cb:87:a5:1c:c7:6e:f6:05:f1:cc:7c:0e:2f:28:98:9a:41:
         b6:40:5f:54:65:d5:5a:96:55:11:44:0c:3c:83:84:31:e5:aa:
         58:17:c2:40:7a:cd:08:db:67:90:48:af:f2:d3:ce:80:da:44:
         95:f8:a4:fc:a8:49:be:d9:cd:e0:34:0b:54:c2:a5:33:8b:70:
         38:ed:44:20:74:fb:86:f2:2a:11:e5:0d:cb:e9:e9:cc:c6:0e:
         e5:34:4e:1a:5a:d3:dc:67:05:cd:3f:66:ba:a0:a3:cc:e9:11:
         17:f7:a7:a5:9c:63:ed:05:f6:29:19:dd:c2:b5:d7:a0:b2:1c:
         78:2b:29:e2:31:41:a6:e1:0a:94:9d:bb:a0:74:ab:cb:86:7a:
         c1:c6:a8:f7:ee:e9:09:d6:dc:7f:48:04:e2:96:b1:bc:9a:4a:
         5e:bd:4c:24:6a:f0:c9:6c:a6:10:b1:5a:10:cc:f7:3e:19:38:
         60:32:2c:d0:ea:7b:25:b7:f7:a6:2a:1f:2d:f3:93:3d:54:25:
         af:05:e2:2d:7b:4d:1a:14:78:51:3f:03:7b:c6:4c:0f:b6:80:
         12:69:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:07:25 2026 by rpki-client