Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3a2f33322d3438203d3e203237383832.roa
File:                     323830303a3332303a3a2f33322d3438203d3e203237383832.roa (raw, json)
Hash identifier:          hMPFPTTBDwFHKIWfOISwK4mT19NIASdsS/2kBKUh89Y=
Subject key identifier:   04:1A:C4:2B:2F:F9:48:F1:25:F6:33:55:74:3B:77:55:79:2C:D4:62
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       34C54903832759108C66F2264780DA91D6FE5353
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3a2f33322d3438203d3e203237383832.roa
Signing time:             Wed 20 May 2026 04:43:17 +0000
ROA not before:           Wed 20 May 2026 04:38:17 +0000
ROA not after:            Wed 19 May 2027 04:43:17 +0000
asID:                     27882
IP address blocks:        2800:320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c5:49:03:83:27:59:10:8c:66:f2:26:47:80:da:91:d6:fe:53:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: May 20 04:38:17 2026 GMT
            Not After : May 19 04:43:17 2027 GMT
        Subject: CN=041AC42B2FF948F125F63355743B7755792CD462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:59:14:14:e6:f8:a7:a8:44:72:a5:ce:af:
                    0c:dd:04:9a:86:c3:60:f5:08:87:7c:3c:1f:45:5e:
                    2c:73:5d:3f:ec:0e:d6:3b:f0:0a:04:4d:a2:43:7b:
                    7d:51:46:00:e4:5f:35:27:09:9b:02:ba:23:21:41:
                    aa:44:f4:5a:94:65:5d:3e:e3:85:fc:6d:54:bf:a9:
                    db:56:0f:09:7b:24:84:84:61:4f:07:13:a9:b6:44:
                    64:5f:f6:02:50:12:f2:c4:6a:29:71:5f:43:a7:2d:
                    03:06:ac:19:41:2f:46:6a:e3:64:bf:28:75:eb:52:
                    be:47:8a:f4:6e:86:d8:bf:b2:a4:0b:3d:3a:21:be:
                    b1:f6:c0:df:32:7e:94:b5:71:14:e7:a2:eb:f1:2a:
                    08:46:ef:85:d2:24:86:7d:b1:19:59:08:12:65:c2:
                    50:d2:ed:bf:b5:65:41:d0:cd:50:9d:5b:c8:a2:88:
                    53:3c:05:c5:63:eb:49:01:53:76:e8:39:b1:06:a3:
                    f6:91:dc:58:67:f3:31:28:19:5d:f0:51:6b:99:42:
                    09:76:0a:57:a0:43:0b:aa:2a:c8:44:fa:f5:3a:c8:
                    4d:76:b2:73:e6:79:ba:d6:27:44:b1:86:9a:4d:3a:
                    66:ca:da:78:10:60:8f:fa:b1:11:89:6f:cf:e6:ea:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:C4:2B:2F:F9:48:F1:25:F6:33:55:74:3B:77:55:79:2C:D4:62
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3a2f33322d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:9f:95:75:84:07:82:b0:bb:e7:ce:c7:01:31:ac:c7:b2:
         37:53:ae:49:8c:17:64:ec:db:29:a3:23:18:a8:3f:8c:58:5c:
         4c:e2:38:78:d8:98:d1:02:55:a6:c6:b4:82:68:e9:20:0a:07:
         2a:3a:29:0a:78:65:14:c4:48:c6:c3:04:20:5d:50:5a:d3:a3:
         e2:4d:65:b4:3b:3c:c7:db:ac:d9:ad:2d:78:eb:51:09:1c:7a:
         44:71:66:49:86:3e:96:38:85:a1:13:71:1e:d8:ff:18:a4:c8:
         fa:64:e4:f6:b4:77:fe:1f:42:0e:59:d1:d6:14:40:27:b7:4c:
         ab:eb:6d:61:07:09:b1:88:94:27:77:47:bb:9d:06:d7:46:47:
         d7:e5:bf:f5:d2:e1:da:ee:6b:08:79:d9:e3:05:f2:74:a0:9e:
         f1:19:67:c9:43:d3:40:f1:22:a7:c2:87:6d:f0:3f:aa:86:98:
         bf:9d:a1:0c:6e:f5:96:48:1f:dc:ee:9e:18:ad:29:83:05:7b:
         63:97:bc:42:30:93:2f:39:49:bc:15:8b:97:69:48:33:a8:8b:
         d8:95:72:50:a8:fe:70:8a:8c:83:4f:af:69:0e:d9:f6:ea:25:
         2d:52:05:62:29:c8:69:11:3c:b4:21:e9:98:c0:47:f7:67:f2:
         22:d6:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:29 2026 by rpki-client