Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          gz3VhzIvC82iYBQV1F6eDcNQfitfGGCbLdTbS1aXElQ=
Subject key identifier:   81:3A:5A:50:5E:CE:8A:97:40:00:5F:FF:BA:7F:09:E0:C8:26:A3:E6
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       5E0D1517082E31590149065B90A1F4705F67BA55
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa
Signing time:             Fri 03 Apr 2026 15:37:23 +0000
ROA not before:           Fri 03 Apr 2026 15:32:23 +0000
ROA not after:            Fri 02 Apr 2027 15:37:23 +0000
asID:                     3573
IP address blocks:        2801:1f0:406b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:15:17:08:2e:31:59:01:49:06:5b:90:a1:f4:70:5f:67:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Apr  3 15:32:23 2026 GMT
            Not After : Apr  2 15:37:23 2027 GMT
        Subject: CN=813A5A505ECE8A9740005FFFBA7F09E0C826A3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:9b:09:c0:81:93:be:06:6f:88:e6:65:fc:
                    ab:ac:50:d0:a0:cc:02:b9:13:4a:46:b4:b6:d8:fa:
                    13:61:e6:6c:75:fa:0a:fd:42:3b:e6:38:be:46:d4:
                    6b:06:03:af:83:96:bd:d4:ba:d7:af:b4:e7:88:1e:
                    ef:a3:9c:5d:e8:d3:10:52:80:77:81:92:98:02:85:
                    9d:31:92:7b:cc:38:c1:3e:6a:7a:40:a4:13:59:28:
                    ee:55:b9:ba:fb:fa:6a:a5:75:82:64:44:48:1d:02:
                    37:e5:7e:15:73:d5:7d:77:a7:f3:d9:81:f1:7e:c7:
                    93:7e:2d:11:ac:dd:54:b8:4e:d7:50:da:a8:c5:69:
                    b8:3f:a5:10:7f:f1:a5:39:19:16:5a:92:47:46:fd:
                    7a:21:5d:6d:2a:c8:de:ac:55:b8:d4:24:2d:58:05:
                    06:b8:8f:34:0a:d6:bd:ef:f7:39:59:cd:29:bd:eb:
                    dc:76:3d:c3:7a:34:a5:62:09:56:f1:57:11:4c:17:
                    ed:6d:ce:a2:d2:ba:3f:3a:97:a5:53:d7:ab:42:1c:
                    79:86:bf:d7:f2:64:b4:ee:b7:41:9f:be:00:34:e3:
                    3b:56:2b:54:3c:6d:03:d9:c0:a0:01:26:2f:c7:8f:
                    3a:d5:a5:75:17:2b:92:95:e9:cc:ca:87:ca:a7:d3:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:5A:50:5E:CE:8A:97:40:00:5F:FF:BA:7F:09:E0:C8:26:A3:E6
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:42:44:14:72:c8:00:f4:4d:56:71:d1:92:eb:94:5d:21:
         fe:e0:bb:78:3d:84:0f:fe:99:45:a9:1c:e6:14:a8:5c:fa:51:
         23:3e:59:a5:b7:4e:f9:69:08:39:e8:e9:7f:91:72:3e:67:f5:
         f6:7f:fd:d0:06:84:b0:b8:e6:7a:71:22:ec:2f:90:26:04:60:
         1d:5b:5c:77:69:1e:1a:c3:be:6e:53:50:35:88:ef:e9:ca:e9:
         cd:44:b9:1a:18:40:7f:ae:ee:8d:58:1b:56:30:87:c4:c9:86:
         9b:18:61:6b:fa:6d:b7:df:96:bc:a9:4a:b9:5a:71:36:78:71:
         46:d1:e9:6f:ba:1d:e1:7c:03:9e:b1:e4:91:70:10:5f:ac:2e:
         3a:e8:f2:70:47:42:3b:2e:c5:67:a0:4f:45:ee:df:16:03:c2:
         72:15:4b:0e:d4:0a:8b:d3:e5:1c:c6:14:ae:6b:eb:50:c2:35:
         69:26:75:9e:61:82:6e:68:c3:bb:1c:e4:f1:e3:08:c0:7e:81:
         30:42:ea:90:0f:49:e4:00:d0:29:7b:43:0d:93:36:d4:26:b9:
         39:e9:d5:b1:4c:75:dd:ff:6b:3c:bc:ed:c5:f2:a6:32:01:ed:
         1b:95:22:f5:41:69:d4:49:45:5a:42:b9:13:ee:bd:bd:e5:31:
         ae:aa:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:58:08 2026 by rpki-client