Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3438203d3e20323734303236.roa
File:                     323830313a3130343a3a2f34302d3438203d3e20323734303236.roa (raw, json)
Hash identifier:          MiqHAerVtQ45LYQ/myTOrjXL1MCnWroz93o/TZupuGk=
Subject key identifier:   13:16:2B:36:88:75:C8:13:93:50:F7:B5:EC:E3:0D:4B:92:DF:D3:B4
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       14CAE847B5B4B663ECB113F8878570606DA6AE81
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3438203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 04:15:01 +0000
ROA not before:           Fri 27 Mar 2026 04:10:01 +0000
ROA not after:            Fri 26 Mar 2027 04:15:01 +0000
asID:                     274026
IP address blocks:        2801:104::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ca:e8:47:b5:b4:b6:63:ec:b1:13:f8:87:85:70:60:6d:a6:ae:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 04:10:01 2026 GMT
            Not After : Mar 26 04:15:01 2027 GMT
        Subject: CN=13162B368875C8139350F7B5ECE30D4B92DFD3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:44:5a:d7:2f:b4:1d:41:4d:a9:ba:69:12:
                    de:79:87:65:ed:c2:96:1f:d3:f3:e2:a3:fb:7e:3e:
                    6a:31:51:1e:68:26:fb:eb:9d:8f:e3:04:51:04:61:
                    43:23:93:14:f6:eb:3e:67:9e:79:a5:8b:06:d3:22:
                    ed:ea:c8:bd:57:2c:dc:bf:38:9b:ce:1d:69:54:e6:
                    ed:1b:c9:87:48:50:cb:ff:1c:be:e0:bd:49:b2:f1:
                    f8:62:89:e9:3e:34:94:a3:06:7e:88:cf:59:79:9c:
                    42:3a:93:0e:81:ab:e8:98:55:d2:d0:7c:d3:16:77:
                    ab:d3:a0:38:a2:21:c6:21:d9:74:b2:77:6b:4f:e7:
                    fa:56:58:f2:74:77:04:1d:65:e3:78:33:e4:ce:2d:
                    a2:40:f5:3f:5c:78:8e:e5:97:fe:89:1d:e9:c1:62:
                    c0:f5:07:76:c4:32:fd:e8:c3:12:1a:2e:ed:9a:ef:
                    cc:03:db:84:e3:85:4d:f4:39:cb:68:f9:9f:00:b5:
                    6b:b7:fa:e0:9f:15:95:fd:d7:be:6a:4f:0d:01:50:
                    10:86:a9:5b:11:85:52:2f:54:8c:b6:02:26:7c:d1:
                    55:39:09:3f:94:26:b7:6f:d6:6a:33:4b:e2:20:64:
                    61:f3:5f:54:d2:78:c5:9e:c4:91:a1:07:6e:7d:5d:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:2B:36:88:75:C8:13:93:50:F7:B5:EC:E3:0D:4B:92:DF:D3:B4
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/323830313a3130343a3a2f34302d3438203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:104::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:b3:98:08:fa:84:2b:89:82:fc:65:db:66:e1:da:4d:7c:
         7e:50:f7:fc:f2:32:67:a6:5f:9c:04:20:2c:69:2b:67:1d:21:
         cf:16:9e:f1:a0:57:83:fd:0f:2b:a0:99:53:35:68:5e:2c:78:
         57:7d:f3:2d:1e:c6:d4:c9:07:89:d7:c4:35:51:37:4b:dd:37:
         8b:64:a3:cf:08:ac:19:ab:b7:85:c5:f4:e5:10:fa:c7:52:70:
         14:6d:94:fc:b6:75:f5:4a:9b:0b:08:4d:ed:bd:bb:04:71:5e:
         0d:4d:4f:a3:58:55:3e:70:14:a4:74:12:3d:46:a6:76:b8:2e:
         9c:95:ff:a6:ad:86:94:8f:34:18:cf:73:d8:a5:68:6c:59:9e:
         e2:3a:3a:52:79:04:53:23:1b:33:c3:12:5c:f9:0b:d3:fb:17:
         8b:d7:5c:3e:ba:66:f9:71:98:82:eb:39:3f:32:a8:52:a5:d0:
         16:25:71:a3:92:14:93:bc:10:2b:ad:c8:ee:df:fe:ef:73:db:
         4e:d5:f6:00:70:52:e2:4a:bf:5f:ea:22:36:07:77:9d:f4:df:
         f1:d7:80:a4:a7:75:2c:46:cf:16:d6:3c:45:ff:0e:36:e8:a2:
         ed:4a:ad:d0:a5:f1:3f:a3:1d:28:26:7f:e3:b2:34:97:7e:1b:
         5a:17:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:56:43 2026 by rpki-client