Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030313a32323a3a2f36342d3634203d3e2033333536.roa
File:                     323030313a313362303a383030313a32323a3a2f36342d3634203d3e2033333536.roa (raw, json)
Hash identifier:          85pk2r8xY13lFtNAbOR5UHYBWE4o3qFkiANiZQh4Z/k=
Subject key identifier:   54:0D:A7:9E:F0:40:E1:57:A8:2F:2C:2C:FA:F5:FF:6B:38:47:17:D4
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1618439B3DD3D7E8D5C085A0768E71A60A697849
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030313a32323a3a2f36342d3634203d3e2033333536.roa
Signing time:             Wed 25 Mar 2026 16:40:00 +0000
ROA not before:           Wed 25 Mar 2026 16:35:00 +0000
ROA not after:            Wed 24 Mar 2027 16:40:00 +0000
asID:                     3356
IP address blocks:        2001:13b0:8001:22::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:18:43:9b:3d:d3:d7:e8:d5:c0:85:a0:76:8e:71:a6:0a:69:78:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar 25 16:35:00 2026 GMT
            Not After : Mar 24 16:40:00 2027 GMT
        Subject: CN=540DA79EF040E157A82F2C2CFAF5FF6B384717D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:2d:db:d1:c2:de:66:25:17:cd:a0:6c:08:
                    d5:84:a6:ca:53:72:4f:aa:98:eb:b8:87:a7:46:7f:
                    00:68:59:49:92:a8:5f:48:29:89:9d:d5:d6:d5:fd:
                    fb:fe:01:37:cd:87:4e:4a:a3:d2:65:b9:c5:84:df:
                    57:d5:e2:9d:07:95:60:64:5b:26:0e:db:b5:94:c7:
                    9e:09:69:d2:32:37:d8:e4:4b:f4:ef:f5:a1:e6:46:
                    5a:a4:1e:92:dc:bb:76:01:bc:27:35:32:0f:35:81:
                    f3:19:2f:32:0e:d7:7f:59:16:42:34:ec:89:d2:53:
                    62:8e:95:40:27:70:de:71:70:bb:a7:3c:25:29:c7:
                    fb:1d:f4:93:65:64:af:5e:e2:13:64:06:f8:76:84:
                    85:cf:8f:5d:32:52:eb:94:ea:84:fa:f6:6f:cb:33:
                    c4:3e:34:42:da:5a:11:f3:27:37:50:ff:ad:4c:4e:
                    6c:96:db:c3:dd:f9:ff:18:e4:03:57:67:05:ae:43:
                    93:2e:e6:d4:df:d5:1e:43:90:70:a3:8e:c8:e1:8f:
                    45:f1:45:67:f9:f7:9c:a1:60:69:10:d3:ec:47:ce:
                    64:c9:da:b9:d4:d3:35:fc:92:57:4f:bc:b7:38:15:
                    fe:dc:d8:ef:a9:80:77:18:a8:d1:1f:2c:8f:96:41:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0D:A7:9E:F0:40:E1:57:A8:2F:2C:2C:FA:F5:FF:6B:38:47:17:D4
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a383030313a32323a3a2f36342d3634203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:8001:22::/64

    Signature Algorithm: sha256WithRSAEncryption
         6a:48:dc:e5:7c:0a:72:40:5e:90:d5:c4:89:05:3c:a8:01:32:
         cb:ab:ce:7b:b7:d3:72:df:26:f6:7b:78:0f:1a:5c:0e:83:c6:
         df:29:de:d6:1f:6e:f5:e5:2f:06:70:85:1c:5f:1d:72:5f:01:
         ed:54:a3:ab:63:b6:01:60:ee:62:de:68:c9:d2:a8:69:38:1c:
         23:45:ca:f8:8b:da:33:ef:b6:97:99:3f:f7:1f:a0:4b:6a:4a:
         82:8f:83:77:bb:ab:de:c9:8e:1e:7c:21:f2:eb:1e:ab:07:7a:
         64:22:99:2a:ca:ea:63:1b:91:5d:b8:24:a6:d0:7f:f3:38:b4:
         c3:df:b4:dc:dc:16:aa:fb:a1:85:6e:1a:99:d7:c6:97:3f:8d:
         46:f5:f9:f6:e0:0f:61:8f:5e:1b:88:84:b2:89:05:d4:8e:22:
         9d:d0:a7:08:77:7c:dd:e5:32:38:5f:16:1e:ec:c4:ce:09:5c:
         f3:a2:ac:5a:85:59:79:d2:89:24:9d:8b:d3:e5:f8:72:f2:26:
         1b:1e:a9:70:8d:72:a5:bf:8e:cd:90:90:57:09:76:9a:1a:2c:
         98:40:aa:13:27:5f:9b:58:a1:cb:7c:ac:b3:b2:7a:dd:e0:27:
         ad:95:e6:83:cd:44:33:0b:3d:05:92:e3:24:a3:d6:07:b8:01:
         42:ef:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:31 2026 by rpki-client