Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/323830313a3161343a3a2f34342d3438203d3e203136373031.roa
File:                     323830313a3161343a3a2f34342d3438203d3e203136373031.roa (raw, json)
Hash identifier:          dHPUnmxMz8UQDr20gQwF255Dy/EMDCghVi+tzRF3UNk=
Subject key identifier:   66:FE:48:36:09:98:FA:5B:03:6B:36:87:FE:72:ED:1D:C5:46:9D:13
Certificate issuer:       /CN=12072E6C1A48AEC19505180D145D1D56D72980F3
Certificate serial:       4710594848BD1A9C975EB5BBC2FA4D7B4C926D24
Authority key identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/323830313a3161343a3a2f34342d3438203d3e203136373031.roa
Signing time:             Wed 25 Mar 2026 16:00:00 +0000
ROA not before:           Wed 25 Mar 2026 15:55:00 +0000
ROA not after:            Wed 24 Mar 2027 16:00:00 +0000
asID:                     16701
IP address blocks:        2801:1a4::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:10:59:48:48:bd:1a:9c:97:5e:b5:bb:c2:fa:4d:7b:4c:92:6d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12072E6C1A48AEC19505180D145D1D56D72980F3
        Validity
            Not Before: Mar 25 15:55:00 2026 GMT
            Not After : Mar 24 16:00:00 2027 GMT
        Subject: CN=66FE48360998FA5B036B3687FE72ED1DC5469D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:b2:19:08:f0:0e:31:94:27:96:33:c4:f1:
                    e2:21:04:f0:13:fb:b0:62:d5:d9:8d:d0:02:a4:a7:
                    d2:d8:59:63:49:19:83:30:0e:67:d6:d0:42:a6:42:
                    66:3d:ba:17:ab:24:b5:30:9c:b0:01:2b:b0:df:5a:
                    20:fa:62:d9:ca:56:0f:3a:9c:17:3b:f9:16:79:47:
                    39:7a:18:dc:ac:99:3b:d1:d8:44:a2:a8:81:e9:d7:
                    9a:c9:ea:4b:01:34:58:fc:41:93:1f:13:a5:5d:f6:
                    f9:a5:a2:8f:62:6b:80:4e:20:72:b7:2c:21:c1:f7:
                    56:d9:5d:8e:4b:5e:4c:58:e3:ba:1d:35:65:35:84:
                    aa:90:dc:5e:01:3c:62:47:03:d4:49:b0:5e:32:2e:
                    21:a1:a5:9d:ca:49:c7:c7:5f:3c:b7:d7:b7:2d:70:
                    40:52:2e:ae:11:18:4f:2a:f5:3a:fb:8a:66:5a:c7:
                    0d:41:6b:17:b2:05:f4:b3:a3:d4:1b:78:70:88:68:
                    34:75:0c:6f:86:aa:04:b4:a5:e7:56:8b:c2:a7:41:
                    cd:9a:34:49:aa:bc:c9:96:7c:3b:bc:01:9c:49:d8:
                    2e:ef:c8:c1:02:19:98:12:05:24:e7:8f:94:7e:21:
                    01:2c:cb:f7:64:94:35:5e:80:40:2c:74:d9:81:65:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:48:36:09:98:FA:5B:03:6B:36:87:FE:72:ED:1D:C5:46:9D:13
            X509v3 Authority Key Identifier:
                keyid:12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/323830313a3161343a3a2f34342d3438203d3e203136373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a4::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:80:bd:6c:9c:14:1f:c0:e5:29:89:04:d8:66:f1:f3:87:88:
         e1:33:09:cd:4d:40:b0:01:d1:75:26:74:8c:e7:13:f9:20:cb:
         a0:3a:83:42:3d:31:5e:0a:5e:c0:46:3b:bc:04:1b:06:ee:cc:
         5f:24:6a:95:64:50:a2:2b:26:d0:01:72:27:40:6f:ec:b6:b5:
         52:ed:b7:31:fe:a8:54:21:38:36:7b:40:e4:88:86:5b:41:d3:
         95:0b:7a:07:24:ac:6b:ce:12:e3:76:0e:47:4a:99:b2:f5:88:
         9e:ab:8b:90:0c:53:04:ce:7f:14:87:a1:8e:e8:fd:98:8f:de:
         40:11:db:a9:0c:66:9b:0c:5b:0d:09:11:cb:77:a1:f1:6f:ee:
         60:d8:da:2a:8a:86:5b:7a:9c:08:84:6c:8d:ea:d2:84:dc:c3:
         a0:f8:a7:9b:b4:b6:5b:7c:5a:d2:38:e2:85:08:94:2d:69:58:
         23:2a:58:d1:36:0d:5d:01:2d:7d:ed:38:e5:18:c3:32:15:d5:
         5b:b4:eb:35:c6:98:2a:85:ad:0a:ee:7f:73:ac:0a:d2:35:43:
         34:0d:6a:a0:70:78:ad:1c:1f:64:6d:c5:88:df:31:58:e1:6d:
         4a:53:e8:d2:9b:be:97:7a:60:59:07:9f:b0:63:8b:1c:16:64:
         6d:19:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:19 2026 by rpki-client