Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa
File:                     323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa (raw, json)
Hash identifier:          UyQyb1cWYg1vIrZxIo+/C9fZgnecM0oBWyGkt+kWX6A=
Subject key identifier:   52:C7:B3:90:0F:A9:86:A0:94:29:FA:74:2B:2C:BA:19:74:57:D1:C3
Certificate issuer:       /CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
Certificate serial:       63CE60EC553DF8D1F6263E7A8D36784B9DFA4A69
Authority key identifier: 70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa
Signing time:             Tue 16 Jun 2026 00:47:58 +0000
ROA not before:           Tue 16 Jun 2026 00:42:58 +0000
ROA not after:            Tue 15 Jun 2027 00:47:58 +0000
asID:                     64146
IP address blocks:        2801:155:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ce:60:ec:55:3d:f8:d1:f6:26:3e:7a:8d:36:78:4b:9d:fa:4a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
        Validity
            Not Before: Jun 16 00:42:58 2026 GMT
            Not After : Jun 15 00:47:58 2027 GMT
        Subject: CN=52C7B3900FA986A09429FA742B2CBA197457D1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:aa:d1:99:26:a8:be:fe:7d:15:91:b5:d6:
                    4d:e8:b0:03:7c:3a:8b:1c:d9:2e:9e:6b:5e:49:65:
                    7b:14:f6:0e:7d:73:d8:65:b1:44:3b:a7:a2:83:1f:
                    be:3f:ca:ec:7c:27:76:6a:c3:35:7f:c9:57:af:b9:
                    93:aa:0f:aa:0a:60:12:4d:7c:0d:c0:be:fd:af:e3:
                    d7:b3:92:13:0e:29:b3:ec:15:36:56:c0:51:24:eb:
                    e2:4a:ab:d4:96:8a:ab:f2:c8:fe:d9:c3:1d:d1:d6:
                    ae:da:c5:78:58:9e:20:8d:1d:a9:af:02:f4:d3:33:
                    e3:ea:db:b0:bf:4a:a0:cf:ba:7a:81:04:f4:ee:64:
                    a9:97:ab:20:59:7a:9e:5f:b2:6f:e8:c2:82:32:6e:
                    f4:fc:90:0a:d4:bf:88:9b:d8:f1:57:e7:e6:8f:96:
                    d6:b0:c0:a5:bf:7e:74:48:8f:4d:7e:11:35:1d:b8:
                    0f:f1:e6:2d:69:8c:34:7f:23:b7:34:46:bd:54:63:
                    b3:c8:f9:91:a0:b7:c9:89:32:54:a8:cf:71:81:3b:
                    21:74:4a:f7:37:80:a5:25:58:8b:e2:59:14:66:7a:
                    11:13:e1:9b:a6:90:65:51:6c:d1:0e:bb:1a:3a:d6:
                    a6:39:79:7f:9c:79:ce:ba:98:e6:8a:3b:08:de:09:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C7:B3:90:0F:A9:86:A0:94:29:FA:74:2B:2C:BA:19:74:57:D1:C3
            X509v3 Authority Key Identifier:
                keyid:70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a38303a3a2f34342d3438203d3e203634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:155:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:78:f4:ac:6e:ba:a4:98:5c:8e:be:b8:3b:ac:1c:b6:09:6c:
         6a:c7:6b:b0:c7:da:38:52:4a:87:61:78:49:e4:d4:cc:14:ac:
         65:f5:8d:96:26:da:44:be:44:fc:84:70:89:94:46:47:d9:a4:
         f5:67:33:30:f9:52:af:46:db:da:5f:7f:d6:26:1b:da:9f:e0:
         15:a7:c5:8b:16:13:22:f7:96:00:95:d5:26:08:b1:aa:6e:56:
         9c:e5:37:c5:58:5e:4a:2c:29:ba:c7:df:1b:b6:d6:4b:3d:81:
         50:01:65:70:7a:f7:66:dc:4f:38:2f:25:95:b2:62:84:f9:2d:
         2e:ff:a0:6b:26:d0:26:da:98:96:58:a5:4c:f0:27:e3:ad:f6:
         09:51:34:64:79:4a:ca:d4:97:43:ee:9e:53:4b:8f:69:05:2e:
         63:39:c4:d7:01:45:b3:65:75:46:8b:67:4f:b6:36:bf:8d:c1:
         dd:2d:ee:53:a8:b9:62:8b:2a:0d:30:b6:80:5d:90:8a:04:be:
         e9:db:87:40:a5:af:85:d0:f1:3b:47:ad:4a:3d:38:62:f7:b5:
         bc:29:12:99:02:18:98:0c:52:dc:e0:7f:ff:0e:16:56:d4:f8:
         f2:0d:12:f5:d6:66:05:d7:3a:bc:94:16:67:b7:18:e1:c9:63:
         99:e4:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:15 2026 by rpki-client