Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/323830313a3164643a353a3a2f34382d3438203d3e203634313436.roa
File:                     323830313a3164643a353a3a2f34382d3438203d3e203634313436.roa (raw, json)
Hash identifier:          nxbG0YXNOWUYT3wS+Iq95wD6APF09AE/ZnJ4eDe9NRM=
Subject key identifier:   EC:0C:9C:B9:46:80:3B:29:02:74:6A:26:8F:47:38:31:73:68:D1:81
Certificate issuer:       /CN=1595F73DFB87BA563655DE9D91711998FE094901
Certificate serial:       391298ECF47C06D94B9579E721A7532A145C5B31
Authority key identifier: 15:95:F7:3D:FB:87:BA:56:36:55:DE:9D:91:71:19:98:FE:09:49:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1595F73DFB87BA563655DE9D91711998FE094901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/323830313a3164643a353a3a2f34382d3438203d3e203634313436.roa
Signing time:             Thu 13 Aug 2026 14:50:00 +0000
ROA not before:           Thu 13 Aug 2026 14:45:00 +0000
ROA not after:            Thu 12 Aug 2027 14:50:00 +0000
asID:                     64146
IP address blocks:        2801:1dd:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1595F73DFB87BA563655DE9D91711998FE094901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Sep 2026 18:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:12:98:ec:f4:7c:06:d9:4b:95:79:e7:21:a7:53:2a:14:5c:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1595F73DFB87BA563655DE9D91711998FE094901
        Validity
            Not Before: Aug 13 14:45:00 2026 GMT
            Not After : Aug 12 14:50:00 2027 GMT
        Subject: CN=EC0C9CB946803B2902746A268F4738317368D181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:d4:6f:9e:9a:d5:f4:c8:48:d5:39:bb:8e:
                    98:74:2d:47:36:9f:f8:65:57:fc:fc:cd:b3:74:2a:
                    79:f7:df:1f:f6:67:e2:41:c8:da:4a:c3:5e:f6:e8:
                    c7:63:82:7f:7a:52:5e:fe:38:3c:83:e4:45:c3:45:
                    57:44:05:24:42:e3:8d:24:90:20:cc:62:8c:c9:fb:
                    b8:9a:58:0b:8f:d1:71:c7:b6:d7:4d:d8:c1:5a:ee:
                    73:93:74:8d:b5:79:bb:64:23:fa:78:31:c4:34:6d:
                    de:81:1e:47:bf:1f:2f:42:ab:e0:fd:18:a7:3e:c7:
                    1b:59:e9:b1:b4:1d:75:d4:c3:12:fb:29:d8:68:e6:
                    60:c7:0b:8b:7c:1f:8a:c9:bd:9f:20:5d:96:8b:6e:
                    0e:d5:86:2b:41:ea:c0:bc:c3:6e:55:f5:84:b8:ad:
                    9d:ea:b9:43:b5:35:ac:3b:81:7e:a3:f5:c2:bf:88:
                    a4:d0:f3:08:8c:27:40:1d:1f:83:5a:5c:86:3b:47:
                    61:2b:a7:5d:14:1f:fb:83:99:61:6e:2e:4c:13:92:
                    00:2c:7f:5e:8c:fb:6b:30:02:04:62:f8:4f:92:b5:
                    3b:81:75:db:5b:02:87:aa:70:6f:e9:7f:08:10:68:
                    59:b6:2a:a3:23:33:49:fa:aa:fd:76:31:92:1e:d8:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:9C:B9:46:80:3B:29:02:74:6A:26:8F:47:38:31:73:68:D1:81
            X509v3 Authority Key Identifier:
                keyid:15:95:F7:3D:FB:87:BA:56:36:55:DE:9D:91:71:19:98:FE:09:49:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1595F73DFB87BA563655DE9D91711998FE094901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/323830313a3164643a353a3a2f34382d3438203d3e203634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1dd:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:22:a2:b4:4f:3d:6c:9d:8e:5c:3a:bf:ec:c7:f9:3a:a0:
         52:55:26:c0:42:4b:5e:54:81:4d:4d:d0:f4:46:2b:aa:ff:a7:
         cc:59:42:db:4a:3b:78:2e:e6:ab:8f:48:09:62:a8:8f:3a:82:
         70:0b:29:ec:5b:9b:0c:28:54:3f:23:94:4a:fb:19:3c:4e:96:
         6e:69:c1:c4:fb:d0:0c:1e:35:63:fc:da:48:cf:94:d8:6e:33:
         68:cc:b7:b3:04:d1:c1:73:8b:c9:37:0f:e9:4a:a0:e5:9d:92:
         ed:f5:63:eb:06:30:01:2a:0e:af:96:32:4b:f7:13:9a:97:5e:
         0f:f4:56:87:20:34:27:41:28:ad:42:62:3d:28:02:45:65:bc:
         de:87:31:16:dc:32:cf:2e:18:e0:b1:5c:db:a8:05:96:1c:86:
         ae:6e:18:de:06:a3:5d:17:e5:fe:22:78:2f:8d:cd:a7:89:e9:
         d7:25:70:79:14:d7:ec:59:32:c2:01:f7:70:ae:d4:61:e8:54:
         eb:ee:cf:e2:aa:ee:f2:fe:10:37:92:4a:c7:08:b6:93:b7:f3:
         04:7a:10:0d:de:0c:76:1d:51:29:89:24:b9:ca:bf:8f:97:08:
         0a:3b:52:f3:58:34:25:75:5c:f1:46:52:49:b5:87:8d:74:b6:
         f6:98:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:23:06 2026 by rpki-client