Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa
File:                     323830363a3330303a3a2f33322d3438203d3e203238333837.roa (raw, json)
Hash identifier:          jbN9LjZbmioPJe67TkUKXt6DO3oaSmL9L+7fVLYNLWE=
Subject key identifier:   5F:72:E6:57:35:4E:DB:99:31:41:FB:37:8B:10:0A:2E:DE:7A:4C:F5
Certificate issuer:       /CN=F120FD76709C67C88845B1BB9132720E6262A870
Certificate serial:       7281EF2E04DFDBA0E2B0DE754AB3220A4359EC4B
Authority key identifier: F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa
Signing time:             Mon 09 Mar 2026 15:33:19 +0000
ROA not before:           Mon 09 Mar 2026 15:28:19 +0000
ROA not after:            Mon 08 Mar 2027 15:33:19 +0000
asID:                     28387
IP address blocks:        2806:300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:ef:2e:04:df:db:a0:e2:b0:de:75:4a:b3:22:0a:43:59:ec:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F120FD76709C67C88845B1BB9132720E6262A870
        Validity
            Not Before: Mar  9 15:28:19 2026 GMT
            Not After : Mar  8 15:33:19 2027 GMT
        Subject: CN=5F72E657354EDB993141FB378B100A2EDE7A4CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:69:cc:f4:d3:67:8f:aa:b8:72:75:2b:14:
                    c8:e3:86:f4:c6:9a:20:97:a6:c1:36:07:0f:33:6f:
                    a0:14:03:b5:74:8d:e1:fb:ca:fc:bc:25:28:65:c3:
                    67:c5:b8:ef:1c:8e:0a:f4:e4:d5:6a:8e:ce:75:46:
                    48:01:1a:c5:a2:51:a0:6a:f4:74:f1:b7:c0:3b:f0:
                    64:1d:bd:a0:38:69:55:19:88:5c:be:24:a5:16:b6:
                    c7:54:4f:ad:b6:e2:02:d8:34:2c:bb:5d:f2:50:a3:
                    8f:e3:c1:ea:c6:50:96:91:07:52:d1:60:68:11:7c:
                    70:22:a8:c0:d2:56:fe:4b:8c:9f:bd:e4:15:42:34:
                    bd:a8:ec:29:e6:8a:2c:37:0c:7f:b0:d8:d3:4a:36:
                    e6:5f:ff:b4:82:e6:4a:d0:5e:d5:43:e5:b1:cc:86:
                    d2:9f:35:83:4f:dc:d1:e1:d8:47:8d:61:4b:ea:89:
                    29:43:0c:2c:20:c9:82:64:a0:d1:da:6e:1b:bf:13:
                    1d:a9:55:34:7c:b4:8b:a7:f2:25:3a:2a:ec:e1:41:
                    56:09:32:03:18:e2:1f:6c:33:2f:a3:12:a9:cd:b3:
                    19:17:c7:13:48:7a:fe:cb:ec:2d:77:28:c0:2d:13:
                    53:ce:08:fb:38:88:4b:93:f8:4f:a6:c5:68:82:5b:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:E6:57:35:4E:DB:99:31:41:FB:37:8B:10:0A:2E:DE:7A:4C:F5
            X509v3 Authority Key Identifier:
                keyid:F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:90:43:5c:99:0b:3e:ac:1d:ed:de:4b:2a:a3:2e:2c:3a:3f:
         3c:44:d6:ac:ad:a7:d2:7d:b4:82:e6:b6:3a:05:7f:03:84:36:
         76:03:f4:b3:66:11:65:ab:19:db:5f:85:9c:17:8e:99:2d:e2:
         c1:81:08:21:f2:f1:b5:15:94:06:9e:8a:26:bd:65:18:5b:c0:
         50:dd:c1:18:47:06:ed:bc:65:19:ef:c7:db:91:d2:b9:58:7a:
         ee:28:9c:af:ac:bd:97:33:ac:60:3f:ad:46:d2:53:aa:85:16:
         b9:5f:d2:f4:52:5c:e1:1f:32:d0:a7:dd:ed:70:c6:8b:7a:81:
         a5:b3:8e:c7:73:14:7e:a6:df:ee:6a:be:14:d6:37:fc:e8:c5:
         ee:ef:61:55:3a:db:f6:d0:3a:7d:7f:85:e1:44:85:86:1d:68:
         d6:b9:d2:54:4b:c4:f3:6a:88:f3:db:06:41:30:71:0f:f4:f6:
         09:cb:12:7e:21:f2:8b:b9:66:40:34:30:23:b7:bb:2c:01:61:
         49:1d:ec:34:dd:0c:d2:1d:d6:82:bc:d6:d8:0e:c1:cf:db:14:
         55:48:e1:fc:7b:f4:78:e6:e5:95:60:c9:28:d3:39:4c:80:6e:
         9b:4d:fd:76:0f:66:dc:c5:cc:28:94:4d:63:22:6c:3b:1c:df:
         3e:ba:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:11:43 2026 by rpki-client