Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34322d3432203d3e203134303830.roa
File:                     323830313a3161643a3a2f34322d3432203d3e203134303830.roa (raw, json)
Hash identifier:          7Bjsd3a1OWiWNYO15wgxS9YgYS4CSXrWNE5v7KL3g1E=
Subject key identifier:   DA:57:80:FB:FB:D6:82:B3:BA:7F:23:45:62:56:04:D1:B4:CB:33:25
Certificate issuer:       /CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
Certificate serial:       6AB369D65CF6937E8A283AC331107D904343264F
Authority key identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34322d3432203d3e203134303830.roa
Signing time:             Tue 23 Jun 2026 20:49:12 +0000
ROA not before:           Tue 23 Jun 2026 20:44:12 +0000
ROA not after:            Tue 22 Jun 2027 20:49:12 +0000
asID:                     14080
IP address blocks:        2801:1ad::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 15:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b3:69:d6:5c:f6:93:7e:8a:28:3a:c3:31:10:7d:90:43:43:26:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF
        Validity
            Not Before: Jun 23 20:44:12 2026 GMT
            Not After : Jun 22 20:49:12 2027 GMT
        Subject: CN=DA5780FBFBD682B3BA7F2345625604D1B4CB3325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:1e:bd:9f:d0:51:26:2f:62:46:c4:9c:57:
                    18:5d:c4:83:bc:f0:00:db:b6:f3:07:67:20:24:ac:
                    bc:27:28:c3:8c:62:da:f6:56:a2:6d:87:66:8e:9e:
                    14:e7:c5:d1:51:8a:fd:04:67:87:2d:de:a0:b8:16:
                    38:4b:fe:f4:cd:f5:bb:1c:79:b3:6d:db:87:b8:fb:
                    64:ee:66:53:4e:7a:b5:f9:67:b8:b0:74:db:20:08:
                    98:3b:4f:78:ef:5f:6c:53:f2:aa:46:f2:7a:0b:11:
                    80:a3:33:79:34:b4:51:e4:3f:64:f2:61:67:39:8e:
                    47:18:4c:03:0a:e5:3c:6a:4a:02:c1:8c:67:48:97:
                    c6:03:2b:29:48:c7:aa:5b:62:cd:e7:30:ff:61:16:
                    aa:9d:5b:18:52:cc:a3:74:15:79:c9:ce:c7:d7:bc:
                    6e:d8:79:0e:ba:41:6e:71:db:51:d4:89:fa:19:18:
                    71:cc:7a:db:2a:3b:1a:d0:f8:dc:78:eb:88:f1:42:
                    dc:3e:70:2c:c8:5a:eb:cc:b2:41:28:11:b8:b4:f8:
                    30:7b:58:e6:cc:f8:bd:ae:3d:06:5e:3b:73:61:8e:
                    5e:84:f0:97:05:17:e3:50:35:30:9c:19:db:db:5c:
                    da:80:90:9f:3a:99:15:2c:b7:fc:c9:4f:de:34:65:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:80:FB:FB:D6:82:B3:BA:7F:23:45:62:56:04:D1:B4:CB:33:25
            X509v3 Authority Key Identifier:
                keyid:08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34322d3432203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ad::/42

    Signature Algorithm: sha256WithRSAEncryption
         88:14:76:30:73:3f:5f:7c:cd:11:10:6b:bf:08:92:93:88:fb:
         4e:5b:29:ad:62:1a:8a:18:9f:cd:bd:10:f9:96:0e:1b:2c:f5:
         cb:18:1b:19:cc:a1:1f:19:4d:69:de:4e:eb:77:c5:47:d6:a7:
         d5:0a:f0:21:a8:5b:82:f1:61:c5:f1:ba:3f:6d:0e:53:19:60:
         10:8a:f8:80:51:ca:e2:dd:ee:e2:3c:1d:fe:33:1d:c2:ee:b9:
         54:b2:ca:39:38:e5:e3:fe:96:c2:c2:a1:cd:27:90:54:8d:bd:
         58:d6:80:c0:6d:76:30:b9:32:b1:5b:75:2d:71:00:ec:fd:90:
         06:e1:30:cf:e9:d4:ee:df:b2:1f:03:d0:ab:80:c4:2b:16:23:
         72:74:f2:f5:93:e6:57:56:50:e0:9d:e0:2d:94:1d:51:92:11:
         92:71:97:e9:aa:11:c3:c9:22:2f:b4:8f:50:20:db:ae:67:3f:
         53:f9:ae:78:19:a3:f2:9f:3f:15:6c:39:a4:29:8c:2d:cc:95:
         52:f5:3a:30:c3:99:c1:72:49:fa:5d:a0:6f:b4:50:63:e9:e1:
         95:a9:e1:fe:8b:30:04:85:34:fc:f7:6b:22:ef:16:4b:0e:3d:
         c7:9e:eb:aa:a4:9e:cb:45:be:ea:3a:59:26:65:ab:45:9b:a2:
         ef:7f:a0:77
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUarNp1lz2k36KKDrDMRB9kENDJk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhFMUQwMDU4NTlEQkUzQzExNEM3RDUyOUI1MEVDRTZG
NTUxQzBGRjAeFw0yNjA2MjMyMDQ0MTJaFw0yNzA2MjIyMDQ5MTJaMDMxMTAvBgNV
BAMTKERBNTc4MEZCRkJENjgyQjNCQTdGMjM0NTYyNTYwNEQxQjRDQjMzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUB69n9BRJi9iRsScVxhdxIO8
8ADbtvMHZyAkrLwnKMOMYtr2VqJth2aOnhTnxdFRiv0EZ4ct3qC4FjhL/vTN9bsc
ebNt24e4+2TuZlNOerX5Z7iwdNsgCJg7T3jvX2xT8qpG8noLEYCjM3k0tFHkP2Ty
YWc5jkcYTAMK5TxqSgLBjGdIl8YDKylIx6pbYs3nMP9hFqqdWxhSzKN0FXnJzsfX
vG7YeQ66QW5x21HUifoZGHHMetsqOxrQ+Nx464jxQtw+cCzIWuvMskEoEbi0+DB7
WObM+L2uPQZeO3Nhjl6E8JcFF+NQNTCcGdvbXNqAkJ86mRUst/zJT940ZWWpAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU2leA+/vWgrO6fyNFYlYE0bTLMyUwHwYDVR0j
BBgwFoAUCOHQBYWdvjwRTH1Sm1Ds5vVRwP8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzExOTlCMEQ0NkZBRDlCMjM3NkQ3RUY5RTg0RjFBRDZC
OTcxMjlDNUY0MDZDRTRENjExMzFENjU2NDVFNUU4LzAvMDhFMUQwMDU4NTlEQkUz
QzExNEM3RDUyOUI1MEVDRTZGNTUxQzBGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEUxRDAwNTg1OURCRTNDMTE0
QzdENTI5QjUwRUNFNkY1NTFDMEZGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDcxMTk5QjBENDZGQUQ5QjIzNzZEN0VGOUU4NEYxQUQ2Qjk3MTI5QzVG
NDA2Q0U0RDYxMTMxRDY1NjQ1RTVFOC8wLzMyMzgzMDMxM2EzMTYxNjQzYTNhMmYz
NDMyMmQzNDMyMjAzZDNlMjAzMTM0MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKAEBrQAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCIFHYwcz9ffM0REGu/CJKTiPtOWymtYhqKGJ/NvRD5
lg4bLPXLGBsZzKEfGU1p3k7rd8VH1qfVCvAhqFuC8WHF8bo/bQ5TGWAQiviAUcri
3e7iPB3+Mx3C7rlUsso5OOXj/pbCwqHNJ5BUjb1Y1oDAbXYwuTKxW3UtcQDs/ZAG
4TDP6dTu37IfA9CrgMQrFiNydPL1k+ZXVlDgneAtlB1RkhGScZfpqhHDySIvtI9Q
INuuZz9T+a54GaPynz8VbDmkKYwtzJVS9Toww5nBckn6XaBvtFBj6eGVqeH+izAE
hTT892si7xZLDj3HnuuqpJ7LRb7qOlkmZatFm6Lvf6B3
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:03:23 2026 by rpki-client