Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa
File:                     323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa (raw, json)
Hash identifier:          cuWlhWBxeQbnHTHPzq1IrOqCGZxLYD+bGUhJvp7+A74=
Subject key identifier:   A2:92:99:07:B8:78:C3:9D:C1:94:9A:EB:C1:F6:CA:A1:D7:5D:3D:7D
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       116D496710944C811C05A3D32238D961592A0902
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa
Signing time:             Mon 11 May 2026 16:42:03 +0000
ROA not before:           Mon 11 May 2026 16:37:03 +0000
ROA not after:            Mon 10 May 2027 16:42:03 +0000
asID:                     22724
IP address blocks:        2800:68:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6d:49:67:10:94:4c:81:1c:05:a3:d3:22:38:d9:61:59:2a:09:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: May 11 16:37:03 2026 GMT
            Not After : May 10 16:42:03 2027 GMT
        Subject: CN=A2929907B878C39DC1949AEBC1F6CAA1D75D3D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:5e:9c:3c:c1:1d:9d:aa:86:ff:c2:55:ea:
                    3c:ec:a1:0b:71:61:89:36:59:8f:d3:70:ef:bd:7a:
                    85:97:58:1a:a0:d2:20:77:43:b2:6b:25:cb:97:e2:
                    53:31:33:50:60:b9:9c:07:54:d9:f3:26:5c:0a:80:
                    8a:a7:e5:b0:36:bd:b6:6c:90:75:20:6e:29:af:5e:
                    4a:37:3c:d1:a0:83:6b:1f:86:df:54:4f:24:5a:5f:
                    a6:f9:fc:f9:8d:f0:64:4e:0b:03:76:4b:41:a3:f7:
                    e2:77:b1:3e:c0:05:6d:a6:d4:04:69:76:79:30:89:
                    53:3e:34:a3:35:e2:cd:04:07:79:4a:c0:4f:b5:7d:
                    28:f8:0f:aa:04:ab:cb:14:4f:5d:f9:e9:e6:3b:c8:
                    8f:ba:1a:3e:4a:68:2d:a8:2e:10:26:9c:8d:fd:f1:
                    d9:41:ca:61:93:0a:e0:c5:62:f8:99:22:ca:34:05:
                    84:b6:8f:b4:27:2a:02:48:e2:2e:8c:ae:d6:27:32:
                    b6:9f:82:5f:a6:b7:43:ce:e1:92:dd:ec:d4:4f:9d:
                    39:f7:45:5f:7d:cb:b9:4f:b2:62:3c:43:65:fc:f3:
                    b9:ac:9f:56:79:59:ea:de:be:db:c5:24:8b:09:f1:
                    b0:fb:37:6b:18:09:1f:e3:8e:8c:19:8e:4f:e6:ba:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:92:99:07:B8:78:C3:9D:C1:94:9A:EB:C1:F6:CA:A1:D7:5D:3D:7D
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:ae:80:5d:cf:0e:c5:e1:63:b1:1c:b5:92:7b:1d:e7:72:e0:
         40:07:37:f7:d6:e1:3d:ab:e8:a1:da:c9:22:cc:25:9e:52:71:
         03:70:20:bb:09:f7:ec:c2:6c:9e:f1:16:27:a9:63:16:72:b8:
         3d:c3:39:13:3d:6b:20:24:97:c0:b4:44:e6:45:c7:38:12:c2:
         c9:6b:21:96:a2:6f:11:41:71:a9:b2:7a:e9:10:00:30:d2:69:
         63:fe:d0:36:50:ff:66:1c:1c:05:32:0b:49:8e:49:31:38:06:
         95:da:0d:51:84:e6:4e:32:07:66:a3:b7:09:b3:3f:e4:68:75:
         bf:e0:16:77:4d:1f:cc:85:5b:a0:ad:6a:a5:89:fb:1f:73:8a:
         13:77:3a:7e:37:13:ae:e7:99:08:05:fd:4c:16:2f:b2:fc:96:
         e6:16:8b:65:a7:21:41:04:bd:c2:fb:3a:35:2f:4b:5e:8a:21:
         53:d0:1b:92:88:fe:b9:09:19:2a:43:81:b6:6a:d5:5f:af:b0:
         e7:f7:0a:71:be:38:83:ff:09:c1:d1:29:8d:8f:9a:73:6b:81:
         31:86:01:f9:f6:d0:54:9f:47:1f:dd:ae:4b:ce:52:fc:30:ee:
         d3:89:e1:8c:32:eb:09:1c:01:ec:16:d2:13:d1:a6:2c:c9:66:
         72:10:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:20:11 2026 by rpki-client