Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/323830313a31393a313830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31393a313830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          +3LFBkldcZFSzCyJ9qgrLXIam/zMcbQQ+a9DKtTvgRk=
Subject key identifier:   22:62:EF:D5:09:F8:06:60:24:0B:87:44:53:0C:48:A3:A6:7C:46:DF
Certificate issuer:       /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
Certificate serial:       65F8641DEE272CAA4C94318A7ACD5538E0DCCF26
Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/323830313a31393a313830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 23 Jun 2026 20:10:00 +0000
ROA not before:           Tue 23 Jun 2026 20:05:00 +0000
ROA not after:            Tue 22 Jun 2027 20:10:00 +0000
asID:                     27951
IP address blocks:        2801:19:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f8:64:1d:ee:27:2c:aa:4c:94:31:8a:7a:cd:55:38:e0:dc:cf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1
        Validity
            Not Before: Jun 23 20:05:00 2026 GMT
            Not After : Jun 22 20:10:00 2027 GMT
        Subject: CN=2262EFD509F80660240B8744530C48A3A67C46DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:20:52:04:92:85:52:91:dc:fa:4b:14:64:
                    6a:df:d6:84:c2:03:44:e6:f3:59:f0:27:65:f4:24:
                    5b:87:d9:7f:fc:6f:81:d2:0d:0c:f2:a4:7a:dd:4e:
                    79:54:64:70:89:44:62:b8:fc:6a:3d:95:80:ef:96:
                    ae:d3:9d:a3:ff:69:06:b7:68:f2:5c:ce:ac:f5:05:
                    81:2a:e9:b1:c2:b0:e8:4f:02:b2:36:da:0f:0b:a2:
                    52:db:7b:2a:7c:90:72:f5:0d:1c:1a:2d:62:17:fe:
                    6d:3c:93:14:fe:6c:f4:79:52:ff:d0:e2:cf:fd:be:
                    6a:a8:1a:a2:66:61:29:99:c3:e6:2a:95:bd:7e:a4:
                    b6:80:27:ac:09:5d:4c:19:d5:d7:3d:6c:f8:95:c9:
                    98:26:7e:4f:60:d3:75:52:60:18:6f:5e:6c:a6:32:
                    9d:e1:20:47:55:e7:72:ff:e8:95:54:f0:12:4c:c7:
                    1e:98:b8:51:f6:ec:71:56:f7:a5:70:c4:21:c7:de:
                    c6:50:16:91:c2:3e:5d:60:b0:53:c3:04:4c:34:79:
                    6d:35:90:75:fe:37:87:a8:a8:c2:5a:fd:96:6d:6b:
                    0b:0d:f7:df:7d:13:94:43:d2:75:54:ce:85:18:fd:
                    7e:db:e9:43:d3:45:49:17:2b:53:90:8a:ee:08:ab:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:62:EF:D5:09:F8:06:60:24:0B:87:44:53:0C:48:A3:A6:7C:46:DF
            X509v3 Authority Key Identifier:
                keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/323830313a31393a313830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:bb:09:21:1e:60:9c:b2:1a:ad:31:44:e3:f4:b9:d4:f1:
         b6:96:81:f8:44:05:11:de:8f:bf:e4:f7:e2:af:47:4d:85:fa:
         f0:50:28:df:60:45:96:1c:b6:48:12:46:19:14:12:8f:0b:23:
         80:be:d5:56:71:17:a2:9f:8f:81:4f:42:23:30:63:56:dd:ce:
         cd:4f:35:65:90:b7:25:be:41:5d:1c:32:1e:03:6a:2f:85:ac:
         e0:81:81:55:d8:9d:38:ed:3d:e9:50:08:e5:4b:6d:42:52:7c:
         ad:a6:97:72:ea:83:c4:7c:bb:a4:55:68:44:e5:3c:31:16:a4:
         8d:5e:ba:3e:be:59:95:a5:3d:93:83:03:51:32:0f:73:46:5e:
         b3:9f:5b:ee:27:13:b0:ed:9c:38:29:1f:3f:e7:0c:59:32:b2:
         17:f9:3d:f3:86:1c:03:05:4b:96:db:fd:03:be:a7:b7:f2:2e:
         08:de:22:76:04:6a:aa:5e:ab:5b:52:00:ed:e2:42:94:f7:0a:
         44:a3:a9:98:cf:2e:56:00:51:78:4a:1b:38:df:26:b0:94:79:
         c3:33:85:58:c3:d9:f5:0e:ed:08:b8:11:45:4f:56:17:00:a5:
         79:ac:26:ba:80:67:ea:01:ee:9c:5c:83:44:44:ad:46:57:42:
         84:fe:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:44:48 2026 by rpki-client