Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/323830303a3432303a3a2f33302d3438203d3e2035363339.roa
File:                     323830303a3432303a3a2f33302d3438203d3e2035363339.roa (raw, json)
Hash identifier:          ibxPkPdVXr7X/v3AygEsuoO6jwCMJ2IsgDp27Gkv0KE=
Subject key identifier:   8B:8F:B1:69:E8:E1:3C:8E:0B:44:34:A6:B6:29:A7:F7:FD:93:F6:4E
Certificate issuer:       /CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
Certificate serial:       258224A71F3E4CB6959911F9C74BEE36AE585171
Authority key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/323830303a3432303a3a2f33302d3438203d3e2035363339.roa
Signing time:             Fri 10 Jul 2026 02:30:03 +0000
ROA not before:           Fri 10 Jul 2026 02:25:03 +0000
ROA not after:            Fri 09 Jul 2027 02:30:03 +0000
asID:                     5639
IP address blocks:        2800:420::/30 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:82:24:a7:1f:3e:4c:b6:95:99:11:f9:c7:4b:ee:36:ae:58:51:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37
        Validity
            Not Before: Jul 10 02:25:03 2026 GMT
            Not After : Jul  9 02:30:03 2027 GMT
        Subject: CN=8B8FB169E8E13C8E0B4434A6B629A7F7FD93F64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:f2:26:f8:91:33:84:f6:3a:8c:24:9b:b3:
                    99:b5:14:b1:6f:97:27:38:ed:d5:22:ee:23:f8:26:
                    f4:4c:54:66:13:d8:f5:dd:1c:d9:17:6b:a2:eb:21:
                    36:b6:f2:49:c5:b2:f6:b0:2a:eb:16:eb:8f:2c:34:
                    2a:e4:58:83:56:0e:0e:b2:d8:99:b7:4c:3d:3f:a7:
                    8b:2b:b2:b7:fe:a4:38:dd:14:03:e1:76:3b:a2:ee:
                    1f:84:a4:c3:04:f4:7c:4b:64:46:b8:9f:57:cc:c3:
                    b1:ea:a4:33:b8:f6:a5:02:f4:34:09:61:a5:0f:be:
                    1b:bd:d8:57:27:a9:1f:d2:e0:69:30:ab:94:7a:6d:
                    83:4c:ea:bb:3e:ea:46:d6:9c:72:62:45:d3:3c:df:
                    41:84:ef:d0:65:c3:94:d5:1a:1a:b4:b8:c3:47:7a:
                    5b:ec:13:58:88:45:32:4f:0b:10:29:99:14:4d:8e:
                    85:59:ba:78:a8:c1:0d:01:28:76:d1:3a:80:a8:ec:
                    7f:19:cc:5f:53:fa:23:94:81:95:a2:70:ab:40:14:
                    7d:af:b0:da:0b:b8:7a:86:83:7f:60:39:85:12:f2:
                    2d:06:ae:fe:f1:f7:e0:3b:53:3a:fb:cb:76:02:3f:
                    85:07:36:be:5b:27:ca:a4:12:be:48:53:8b:7b:a8:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:B1:69:E8:E1:3C:8E:0B:44:34:A6:B6:29:A7:F7:FD:93:F6:4E
            X509v3 Authority Key Identifier:
                keyid:9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/323830303a3432303a3a2f33302d3438203d3e2035363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:420::/30

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:7f:c4:d0:3c:b1:99:e0:30:d5:8e:11:e9:35:ea:2d:41:
         22:53:ad:7f:b3:40:e2:52:bc:28:89:10:dd:28:41:fd:32:f9:
         7d:8d:6d:98:76:c6:c9:a8:9d:a4:51:8d:d5:8f:5e:08:d7:64:
         4d:55:ad:b6:e3:3a:84:7d:e6:7f:6f:53:54:19:73:7d:17:29:
         57:fb:da:84:11:c9:97:68:e1:14:e9:6a:94:c7:e2:3e:9e:bf:
         36:ce:89:44:6d:4f:a9:98:c5:06:61:11:f0:0e:6b:98:77:21:
         78:6a:24:55:45:50:55:16:63:00:2b:aa:99:a5:da:cc:6c:d7:
         16:5d:75:2a:9b:5a:7c:e0:81:f6:56:c0:69:63:a4:8c:50:1f:
         e7:4f:98:fd:39:70:71:9a:77:02:a6:b7:b9:24:b9:ca:0d:8a:
         b0:ca:ac:8f:ea:a3:04:39:f1:5f:a4:8d:33:39:2f:16:89:ae:
         b9:e5:e0:5f:40:c4:b6:46:e6:a9:be:bb:66:ff:fc:ae:a7:02:
         4f:c9:79:ef:83:17:86:0a:4d:47:f9:44:df:67:b2:e2:61:bd:
         64:68:ee:13:77:bc:4c:1b:0f:4f:73:a3:87:4f:17:72:30:98:
         17:cf:37:42:e4:08:fd:4f:58:52:3b:f7:d0:a4:6f:fd:8d:6d:
         76:d4:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:39 2026 by rpki-client