Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa
File:                     323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          KFpmZLhD057ikXv3s09oLFMDav7U93apx7ZjxfXsk08=
Subject key identifier:   5E:C0:C8:52:66:C6:5C:D9:A0:B1:15:59:C8:AB:F6:06:11:53:20:D1
Certificate issuer:       /CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Certificate serial:       31E1605F3FF7843B291A4DF6E3E0B2729D7A4CC4
Authority key identifier: BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa
Signing time:             Mon 23 Mar 2026 20:35:44 +0000
ROA not before:           Mon 23 Mar 2026 20:30:44 +0000
ROA not after:            Mon 22 Mar 2027 20:35:44 +0000
asID:                     262186
IP address blocks:        2801:159:2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 14:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:60:5f:3f:f7:84:3b:29:1a:4d:f6:e3:e0:b2:72:9d:7a:4c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
        Validity
            Not Before: Mar 23 20:30:44 2026 GMT
            Not After : Mar 22 20:35:44 2027 GMT
        Subject: CN=5EC0C85266C65CD9A0B11559C8ABF606115320D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:07:59:b5:77:dd:3f:5e:cb:e0:2a:5a:11:
                    61:2a:a6:4e:f0:a2:09:57:8c:37:60:d7:0e:ca:90:
                    92:20:53:17:bd:66:51:38:9c:be:26:a3:5c:1c:91:
                    b0:e0:2c:ba:ba:8d:a9:ce:32:96:d0:08:2b:59:8a:
                    42:da:54:77:a3:90:f9:9d:eb:e7:a7:62:21:4a:b0:
                    28:fb:a1:60:39:e6:c4:f2:5b:2a:aa:1c:d7:a0:13:
                    7b:ee:09:50:da:9b:d4:4a:64:fb:6a:95:ea:d5:11:
                    d5:ca:59:1b:b6:17:70:f6:df:e5:e9:42:57:ba:57:
                    2e:f3:62:50:6f:3c:a5:17:68:6f:a4:ba:fd:75:33:
                    46:c8:e2:eb:d0:17:d5:ab:9e:1b:33:d9:ca:0d:68:
                    24:93:31:9e:76:66:68:57:63:32:14:1e:1e:79:37:
                    24:e7:39:ee:7f:72:6a:2c:35:b7:99:5f:67:d7:d2:
                    b3:14:76:c6:aa:72:6a:22:ba:b4:6a:b7:1a:19:97:
                    8d:9c:2a:83:a6:01:2e:44:68:18:81:b3:73:c9:1c:
                    fa:27:43:6e:c3:bd:c5:6a:61:04:7d:90:82:c9:0c:
                    4d:63:9a:29:ea:2f:40:f8:03:46:a4:b2:7d:46:75:
                    24:c3:d1:f6:66:9b:83:fc:25:2b:6b:0a:4b:48:82:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C0:C8:52:66:C6:5C:D9:A0:B1:15:59:C8:AB:F6:06:11:53:20:D1
            X509v3 Authority Key Identifier:
                keyid:BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a323a3a2f34372d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:fa:ee:63:a3:29:9b:7b:d7:f8:11:75:ed:b7:62:2d:19:
         ea:21:0e:f4:b2:9c:de:ff:19:13:31:5a:16:7a:f2:1b:95:05:
         f9:e3:7d:5e:c8:85:fb:eb:d5:28:3b:1a:0a:77:79:67:57:50:
         90:84:e8:48:28:54:ff:f5:30:80:74:7e:79:11:70:7c:49:31:
         a9:67:a3:d1:a2:ed:b9:7b:f8:47:2c:2c:4e:77:ca:7f:5a:08:
         0a:8d:59:86:fa:8f:a8:56:90:47:98:25:0b:74:35:d1:8b:68:
         b3:7b:31:64:6a:5c:27:62:06:38:d1:86:80:1a:74:4d:f6:21:
         73:09:3b:fc:a3:86:47:27:97:1c:a0:80:ef:5d:9d:88:42:75:
         78:04:d4:49:76:0d:97:fe:ed:04:23:51:b8:eb:de:65:d5:8f:
         39:41:0c:8b:a8:53:4c:e3:2e:1f:c3:ab:04:3f:13:d5:72:ca:
         db:f0:ba:75:1a:f1:08:ff:c9:a4:f4:df:1a:f2:82:ea:4f:b5:
         3f:40:8e:30:3b:a7:d2:6e:ac:a2:ef:24:bc:a2:8a:37:d3:07:
         54:4b:d8:2e:0a:ee:f4:95:82:20:bb:9b:bd:c6:41:1b:cc:3b:
         d1:97:88:05:13:23:f7:e7:45:45:78:1c:31:48:bc:ae:ca:b7:
         64:10:69:81
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUMeFgXz/3hDspGk324+Cycp16TMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYyRTUyREEyQTM2NUQ1QzMwNjJFNUYyOTY1OUQ0QzFB
MzcxRkYzMzAeFw0yNjAzMjMyMDMwNDRaFw0yNzAzMjIyMDM1NDRaMDMxMTAvBgNV
BAMTKDVFQzBDODUyNjZDNjVDRDlBMEIxMTU1OUM4QUJGNjA2MTE1MzIwRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFAdZtXfdP17L4CpaEWEqpk7w
oglXjDdg1w7KkJIgUxe9ZlE4nL4mo1wckbDgLLq6janOMpbQCCtZikLaVHejkPmd
6+enYiFKsCj7oWA55sTyWyqqHNegE3vuCVDam9RKZPtqlerVEdXKWRu2F3D23+Xp
Qle6Vy7zYlBvPKUXaG+kuv11M0bI4uvQF9Wrnhsz2coNaCSTMZ52ZmhXYzIUHh55
NyTnOe5/cmosNbeZX2fX0rMUdsaqcmoiurRqtxoZl42cKoOmAS5EaBiBs3PJHPon
Q27DvcVqYQR9kILJDE1jminqL0D4A0aksn1GdSTD0fZmm4P8JStrCktIgryHAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUXsDIUmbGXNmgsRVZyKv2BhFTINEwHwYDVR0j
BBgwFoAUvy5S2io2XVwwYuXyllnUwaNx/zMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QURFRTA4Mjk2Nzg5RkRENzAyQjlCMTMzMEMxOUE3QjYy
OUUwQzkzRkNDRkZEMjc5MUI5NzAzRjE3REU3NUIyLzAvQkYyRTUyREEyQTM2NUQ1
QzMwNjJFNUYyOTY1OUQ0QzFBMzcxRkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjJFNTJEQTJBMzY1RDVDMzA2
MkU1RjI5NjU5RDRDMUEzNzFGRjMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFERUUwODI5Njc4OUZERDcwMkI5QjEzMzBDMTlBN0I2MjlFMEM5M0ZD
Q0ZGRDI3OTFCOTcwM0YxN0RFNzVCMi8wLzMyMzgzMDMxM2EzMTM1MzkzYTMyM2Ez
YTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzNjMyMzEzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAEB
WQACMA0GCSqGSIb3DQEBCwUAA4IBAQBeSfruY6Mpm3vX+BF17bdiLRnqIQ70spze
/xkTMVoWevIblQX5431eyIX769UoOxoKd3lnV1CQhOhIKFT/9TCAdH55EXB8STGp
Z6PRou25e/hHLCxOd8p/WggKjVmG+o+oVpBHmCULdDXRi2izezFkalwnYgY40YaA
GnRN9iFzCTv8o4ZHJ5ccoIDvXZ2IQnV4BNRJdg2X/u0EI1G4695l1Y85QQyLqFNM
4y4fw6sEPxPVcsrb8Lp1GvEI/8mk9N8a8oLqT7U/QI4wO6fSbqyi7yS8ooo30wdU
S9guCu70lYIgu5u9xkEbzDvRl4gFEyP350VFeBwxSLyuyrdkEGmB
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:25:45 2026 by rpki-client