Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa
File:                     323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa (raw, json)
Hash identifier:          Vm/CR5ERLNzEZSyGtDj8t12l/JRIoUK33L789AH2saA=
Subject key identifier:   9E:19:DD:91:21:D6:4F:79:71:A5:C8:68:43:F8:41:88:36:38:CC:64
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       4F9409D894D495497E48309B95F146419FE69CFC
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa
Signing time:             Tue 17 Mar 2026 13:34:13 +0000
ROA not before:           Tue 17 Mar 2026 13:29:13 +0000
ROA not after:            Tue 16 Mar 2027 13:34:13 +0000
asID:                     52376
IP address blocks:        2001:13c7:600a::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:94:09:d8:94:d4:95:49:7e:48:30:9b:95:f1:46:41:9f:e6:9c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar 17 13:29:13 2026 GMT
            Not After : Mar 16 13:34:13 2027 GMT
        Subject: CN=9E19DD9121D64F7971A5C86843F841883638CC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:d7:c2:c9:ff:c8:16:b5:69:25:02:83:2d:
                    be:9b:da:1f:ec:fc:46:0c:58:61:b1:5c:b9:b4:bf:
                    e2:1d:03:a4:70:02:88:42:14:76:43:4b:62:76:ad:
                    35:81:d5:79:7f:71:86:ec:8c:d8:36:01:87:d9:d1:
                    04:ed:f4:69:25:18:21:79:ca:61:0e:4c:71:f2:75:
                    fe:0b:dc:d7:27:0d:fe:c1:ab:49:93:c2:cf:05:9b:
                    3f:9d:1f:23:69:c8:01:f8:c8:06:d1:09:1c:c6:fc:
                    e3:f7:bb:a6:e4:e4:76:b2:d1:b7:7c:6a:8e:cd:65:
                    c6:c1:f2:54:a0:2a:fe:e7:4c:8b:f1:86:13:8f:89:
                    70:5f:f4:ea:9c:4a:67:fa:68:86:3f:f4:f2:4e:93:
                    6f:59:cc:7f:83:9e:36:e5:bc:c3:f0:3d:28:4a:77:
                    e5:b7:3f:08:84:d7:9b:94:85:f2:03:73:5b:62:30:
                    2f:89:48:c0:08:7d:7d:23:7b:98:5f:7c:b9:79:36:
                    6a:38:f5:62:4c:00:9f:4a:89:70:c2:e6:42:07:ac:
                    d7:2f:5a:5e:34:f6:89:69:df:4e:ca:71:ae:23:a9:
                    40:23:a2:cf:cb:44:61:b9:a7:a4:07:ae:a1:5c:00:
                    fd:2f:e3:d6:bd:b2:8d:c4:6b:e4:79:0d:90:fc:7d:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:19:DD:91:21:D6:4F:79:71:A5:C8:68:43:F8:41:88:36:38:CC:64
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3634203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:10:9c:e2:18:f9:71:9f:4c:3b:96:c8:6b:c1:24:32:ab:
         12:b4:81:d4:31:59:3c:8b:40:b9:3f:0b:f8:b3:35:64:1b:0d:
         ba:14:c4:11:33:45:05:49:2a:0a:86:b4:de:91:88:33:1e:e0:
         8d:dd:29:51:39:b4:2a:ab:c8:05:e3:68:a0:20:75:d8:4f:33:
         3b:a7:3f:a8:fc:a1:77:3c:e6:57:5d:ef:aa:f3:f0:6a:e4:bf:
         f6:ad:40:ac:bf:71:f9:82:ab:f1:d9:5f:bd:cd:c9:c2:76:5d:
         12:e7:0e:c1:ad:25:ba:d7:9c:c3:12:2b:74:40:e1:2d:61:1c:
         ba:0f:f6:60:51:9e:4d:17:e3:20:20:4f:d7:7e:a7:9f:7b:16:
         dd:9c:90:ab:54:37:75:98:98:f7:33:8c:1a:20:35:f8:18:1d:
         ef:d4:e8:76:60:5c:ed:26:d2:6d:64:33:37:f3:68:5b:e4:9d:
         af:5e:91:62:43:15:fa:9a:d3:4a:26:8c:2e:41:66:37:7b:88:
         36:f7:c6:ab:f7:96:3b:90:aa:89:1b:d3:f7:bd:29:cf:9e:20:
         89:dc:5d:db:60:1b:72:61:e5:9d:79:26:a0:95:39:7b:99:25:
         d0:6f:9b:5b:c4:08:34:32:ce:2d:31:72:b9:45:61:ec:6f:c1:
         19:02:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:56:04 2026 by rpki-client