Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a323132333a3a2f34382d3438203d3e20323634383336.roa
File:                     323830303a3261303a323132333a3a2f34382d3438203d3e20323634383336.roa (raw, json)
Hash identifier:          o7ANQLJCdRUYnhubmU2nbmI0WeE945Jk5Gt0jjdVqvE=
Subject key identifier:   8E:0B:D5:73:C2:1A:90:F7:E1:C6:A3:D3:0F:1B:6B:05:5C:8D:A2:E7
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       2DE042E3930B84B8DBADBB79C4CE9E3F34AF45D5
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a323132333a3a2f34382d3438203d3e20323634383336.roa
Signing time:             Wed 13 May 2026 16:42:20 +0000
ROA not before:           Wed 13 May 2026 16:37:20 +0000
ROA not after:            Wed 12 May 2027 16:42:20 +0000
asID:                     264836
IP address blocks:        2800:2a0:2123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 05:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e0:42:e3:93:0b:84:b8:db:ad:bb:79:c4:ce:9e:3f:34:af:45:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: May 13 16:37:20 2026 GMT
            Not After : May 12 16:42:20 2027 GMT
        Subject: CN=8E0BD573C21A90F7E1C6A3D30F1B6B055C8DA2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:4e:ef:02:ed:70:49:db:b4:3f:ee:38:b0:
                    9f:94:c6:d9:0d:7d:6f:81:28:39:b4:5f:9f:a6:14:
                    48:e8:ef:76:d3:d8:c0:d0:95:83:00:88:93:87:8f:
                    00:92:92:a6:45:d2:a3:9b:eb:7f:29:e5:7d:1c:8a:
                    ad:e6:82:0d:3f:3e:db:17:8f:80:78:bc:f5:15:cb:
                    d5:53:2f:c9:c7:2c:4a:35:a9:1f:84:9a:2d:90:70:
                    8c:84:41:5a:e8:b1:0e:72:4a:b0:6d:ba:74:68:c5:
                    66:22:e3:3b:14:25:8d:d9:91:1a:00:2e:25:6a:e1:
                    23:a3:18:3a:bd:ea:30:8f:f7:db:25:c6:b9:4f:b7:
                    86:ca:9e:fc:d7:88:96:79:8d:c4:25:9c:57:c4:1f:
                    e8:01:03:9f:ac:e9:be:be:de:98:6b:89:62:6a:2c:
                    2c:17:13:c8:d9:62:d6:60:34:b7:ae:01:29:8a:23:
                    a0:32:68:ca:1c:3c:21:94:ee:99:37:2b:f9:9c:e2:
                    08:cf:08:d8:29:50:99:cb:4b:45:25:19:a7:7d:e8:
                    bd:bc:61:1d:85:a6:19:29:b3:b4:f1:48:87:f0:df:
                    b1:cd:7d:d0:97:b5:b3:cd:5b:1e:96:31:d4:6c:52:
                    98:d6:e0:52:39:28:d0:11:9b:5e:3e:f8:63:7b:fb:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0B:D5:73:C2:1A:90:F7:E1:C6:A3:D3:0F:1B:6B:05:5C:8D:A2:E7
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a323132333a3a2f34382d3438203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2a0:2123::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:27:fd:69:c4:a1:7d:d7:1b:78:02:5d:f4:6c:00:f1:43:
         90:50:44:6b:ae:9b:4e:07:08:2c:63:22:99:55:1f:e0:07:4a:
         04:44:87:94:e6:27:af:a8:d5:0a:c0:37:66:3d:2d:11:e3:cb:
         de:f1:e6:5b:07:56:53:68:f8:72:f5:92:22:c7:23:71:7f:22:
         fa:88:c6:21:a8:86:7c:0f:66:4f:07:d5:31:ea:22:8a:33:78:
         6d:09:fa:a1:db:8c:96:4f:73:10:8b:a6:0c:c6:1f:21:d5:bd:
         ea:55:18:12:86:9d:a3:88:e4:fd:3a:f8:c1:c7:fd:1f:d6:44:
         bc:ee:7d:2d:b2:8b:a1:f3:ba:cc:33:27:b3:e3:21:a3:4c:1b:
         b9:cd:c9:52:28:df:5a:ab:a4:a3:d3:37:33:f0:05:b9:e8:d8:
         13:0c:60:54:58:94:f2:5f:99:ab:51:b8:17:94:da:13:73:a9:
         30:43:39:9b:fd:06:2c:f5:f4:44:21:22:0f:59:64:01:04:0d:
         b0:d9:38:b8:51:a5:b0:90:be:a3:e7:b2:78:d2:08:0b:a0:7b:
         39:0e:8e:cf:f1:52:7a:05:9f:0e:73:7e:b3:37:b3:e0:5a:80:
         06:3f:18:ec:98:c5:2a:a2:44:05:27:b5:73:a5:74:73:46:24:
         2e:8c:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 23:53:03 2026 by rpki-client