Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/03EF52CED2AEFB9AAE2D828C1AA16BB6CC99846CF88A345F83C425862296AF76/0/323830313a3165643a3a2f34342d3434203d3e20323732303739.roa
File:                     323830313a3165643a3a2f34342d3434203d3e20323732303739.roa (raw, json)
Hash identifier:          ts5TP72wDnx+k/VlwfpRpRjTd7agb/aDxb6fawWiaNc=
Subject key identifier:   EE:E4:24:AB:0B:48:2D:A8:FC:64:DE:2B:9D:2E:88:74:B0:42:0A:C7
Certificate issuer:       /CN=56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7
Certificate serial:       621A596EAC202F881D82EB42E97AEFFE6F7B64C9
Authority key identifier: 56:10:6D:2C:D3:FD:B1:26:0F:87:23:7B:A0:BD:8F:2F:11:EC:CA:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03EF52CED2AEFB9AAE2D828C1AA16BB6CC99846CF88A345F83C425862296AF76/0/323830313a3165643a3a2f34342d3434203d3e20323732303739.roa
Signing time:             Tue 29 Sep 2026 22:37:21 +0000
ROA not before:           Tue 29 Sep 2026 22:32:21 +0000
ROA not after:            Tue 28 Sep 2027 22:37:21 +0000
asID:                     272079
IP address blocks:        2801:1ed::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03EF52CED2AEFB9AAE2D828C1AA16BB6CC99846CF88A345F83C425862296AF76/0/56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03EF52CED2AEFB9AAE2D828C1AA16BB6CC99846CF88A345F83C425862296AF76/0/56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1a:59:6e:ac:20:2f:88:1d:82:eb:42:e9:7a:ef:fe:6f:7b:64:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7
        Validity
            Not Before: Sep 29 22:32:21 2026 GMT
            Not After : Sep 28 22:37:21 2027 GMT
        Subject: CN=EEE424AB0B482DA8FC64DE2B9D2E8874B0420AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:ec:ab:03:e5:66:7f:2f:c4:bb:10:f9:9d:
                    05:99:e7:61:4c:68:5e:9a:3b:d0:db:1f:27:59:06:
                    0e:f2:32:aa:6e:15:fe:cf:9a:3c:04:bf:11:8a:66:
                    fc:bd:c2:13:7b:8e:4c:62:b1:95:39:b2:27:b0:74:
                    47:fd:a1:16:47:c0:d0:83:98:9d:8a:4f:ab:8f:47:
                    95:91:14:5c:39:35:1e:f9:2d:4e:27:ce:42:b9:e4:
                    a0:fe:b4:c6:53:15:2c:90:dd:ed:f1:9e:e4:5b:4f:
                    78:74:6d:d6:65:ab:78:d8:59:6b:6e:3c:e8:e0:d5:
                    19:2b:a0:be:bc:f3:fa:a4:b7:64:d5:84:aa:64:f7:
                    27:99:ad:21:2b:58:4a:ec:67:09:63:58:ea:a6:fd:
                    71:72:24:d5:f1:c1:11:6f:55:bf:cb:26:55:0f:80:
                    83:0f:ec:73:15:dd:f7:be:95:3b:3f:57:21:77:1b:
                    5b:03:48:8d:3c:3e:92:c3:fd:15:fd:00:2b:32:73:
                    ad:42:50:b6:08:f7:14:76:37:e7:50:c2:0e:83:ed:
                    5e:4b:58:a9:4c:6c:65:ae:2b:09:2b:c2:cd:4a:89:
                    37:c6:5b:96:9d:73:13:01:f1:de:5f:cf:c5:7f:79:
                    fa:be:3c:9c:d4:3b:1c:91:ec:73:f3:fa:32:4c:8c:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:24:AB:0B:48:2D:A8:FC:64:DE:2B:9D:2E:88:74:B0:42:0A:C7
            X509v3 Authority Key Identifier:
                keyid:56:10:6D:2C:D3:FD:B1:26:0F:87:23:7B:A0:BD:8F:2F:11:EC:CA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03EF52CED2AEFB9AAE2D828C1AA16BB6CC99846CF88A345F83C425862296AF76/0/56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56106D2CD3FDB1260F87237BA0BD8F2F11ECCAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03EF52CED2AEFB9AAE2D828C1AA16BB6CC99846CF88A345F83C425862296AF76/0/323830313a3165643a3a2f34342d3434203d3e20323732303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ed::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:63:89:d2:5b:d2:c8:14:07:26:61:26:e5:c5:a0:4f:ce:ab:
         02:48:14:e4:25:71:a6:84:02:12:2a:c0:da:85:08:c5:d3:a2:
         3c:a8:30:3b:a7:c6:ed:9a:a2:07:67:53:f8:02:2f:70:21:30:
         52:9d:0b:5e:5e:85:5e:31:45:ab:17:9d:81:9c:7a:15:2c:bb:
         73:3b:6c:fc:21:77:ef:12:3d:30:8d:0e:37:2f:59:d1:b5:c8:
         53:a8:d8:89:ed:f6:52:f4:4f:6f:6e:7b:cf:9b:b6:d0:1b:82:
         69:65:43:3b:d8:82:21:f9:d1:b7:b4:3e:e7:76:1c:81:23:e4:
         aa:50:b7:f5:cc:f9:6e:ab:dc:e4:5d:d6:6c:70:b0:dd:8f:cf:
         4a:8f:c6:89:b5:a6:6f:31:8f:e9:0e:9b:da:d2:ad:81:23:c3:
         56:95:1c:49:6d:7d:ad:2a:cd:18:28:c7:52:31:27:a7:2c:79:
         ab:e8:f7:33:7f:95:54:70:12:14:29:8b:2a:d5:d2:43:af:b0:
         ac:0e:99:d7:a2:90:54:14:28:3b:71:1b:a3:af:b5:41:df:43:
         39:64:12:76:f2:8f:b0:fd:f4:db:58:7f:dd:05:4d:f6:07:b8:
         35:3a:7a:e9:7e:d2:cc:4c:23:c8:ac:72:b8:99:ae:04:65:e2:
         54:c6:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:11:48 2026 by rpki-client