Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f36342d3634203d3e203532343632.roa
File:                     323030313a313363373a363030343a3a2f36342d3634203d3e203532343632.roa (raw, json)
Hash identifier:          GWJt0W1dcOS9ds0w3pyN4mIcLMvPt2QyZGrAZ2l2z/w=
Subject key identifier:   65:22:69:77:A8:F6:A6:F2:7B:0C:15:01:1F:5B:BE:34:62:BA:93:14
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       63B9779F4B838164CB727EBB216C0EC4E659BE8B
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f36342d3634203d3e203532343632.roa
Signing time:             Tue 14 Jul 2026 15:10:00 +0000
ROA not before:           Tue 14 Jul 2026 15:05:00 +0000
ROA not after:            Tue 13 Jul 2027 15:10:00 +0000
asID:                     52462
IP address blocks:        2001:13c7:6004::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Jul 2026 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b9:77:9f:4b:83:81:64:cb:72:7e:bb:21:6c:0e:c4:e6:59:be:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Jul 14 15:05:00 2026 GMT
            Not After : Jul 13 15:10:00 2027 GMT
        Subject: CN=65226977A8F6A6F27B0C15011F5BBE3462BA9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:b9:91:30:23:e4:c3:7b:09:19:29:fa:35:
                    8d:54:bd:26:b8:3c:d3:d4:2b:f2:5d:89:56:05:d4:
                    44:3b:81:3a:46:23:96:1c:07:bf:80:d9:2a:71:28:
                    94:4d:ab:47:b0:b9:e6:d6:f3:23:94:2c:f9:57:ee:
                    a6:f9:6f:80:34:f5:e8:cd:1c:ff:31:68:9d:56:a0:
                    73:c9:42:72:06:96:a3:f3:12:a9:32:9b:cc:f7:02:
                    a2:a8:b6:05:22:c4:11:a7:bd:12:f6:96:77:88:5b:
                    5b:2c:51:cd:08:c6:31:ba:d1:bc:67:b2:93:28:9b:
                    c6:d4:7b:3d:e0:dd:37:fa:0e:f9:bf:24:17:5c:6d:
                    40:f6:8b:2d:43:2f:85:2c:32:71:a8:a3:df:f4:2a:
                    22:bc:0c:ca:77:b6:2e:8d:d4:29:40:e4:75:11:0d:
                    71:3c:31:f2:d8:df:5f:53:50:fa:4f:0b:1c:ad:07:
                    93:6a:b2:a6:04:8d:bb:e7:cd:32:bc:44:db:14:b9:
                    97:1a:e2:61:a3:e4:19:55:fc:8d:2e:dd:34:1c:e6:
                    31:ac:d6:02:07:cf:03:ff:68:e7:c4:7e:f4:a5:dc:
                    d1:35:55:b1:b6:32:d2:99:75:f5:a9:2f:9d:66:ab:
                    e6:00:db:df:71:27:ba:6c:b1:ec:9b:5b:c0:90:d2:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:69:77:A8:F6:A6:F2:7B:0C:15:01:1F:5B:BE:34:62:BA:93:14
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/323030313a313363373a363030343a3a2f36342d3634203d3e203532343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6004::/64

    Signature Algorithm: sha256WithRSAEncryption
         3c:ed:c9:03:95:f4:e1:48:8e:65:91:88:07:05:45:41:e8:5e:
         9c:7b:85:bb:b7:22:cf:44:21:8d:61:54:f7:01:22:3d:f1:bd:
         b5:98:97:b5:5b:db:71:a1:59:cf:d3:26:c0:3c:db:72:12:80:
         60:67:79:6a:a4:49:bd:aa:d5:a7:d1:db:4d:47:30:7f:f6:43:
         26:7c:73:f3:80:24:ca:1a:14:90:05:0e:bd:41:68:fe:e8:0e:
         28:f8:a6:53:42:23:49:77:2f:9e:7d:76:44:dd:5d:f6:67:cd:
         5c:38:4f:7e:03:89:d8:a8:c1:ed:3a:5f:51:6f:d6:7e:6f:08:
         bd:39:b5:02:a5:a9:23:49:db:2d:7c:99:06:df:b5:ee:6f:de:
         f2:c4:34:99:88:70:10:f5:d2:f4:1a:c6:e6:b6:51:c7:ca:08:
         e5:c7:7a:3a:46:41:6d:d0:e2:1f:ab:3b:9b:08:9c:91:96:0d:
         f5:e1:d1:8f:90:ab:83:83:96:79:dc:0c:0e:b2:99:e9:a9:8a:
         74:99:05:17:6b:9a:ff:91:69:8e:62:72:d8:22:66:5d:41:8d:
         b2:1d:ab:23:3a:af:94:5d:52:9a:ed:c4:41:0e:d7:c6:d6:77:
         d7:0d:05:e6:98:1c:42:8e:10:43:55:4d:e0:b2:fb:08:de:47:
         ac:78:62:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 15 07:26:53 2026 by rpki-client