Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E26EAD9B503CC0A153C9529D0DEF0677E80F340844E2154C41C6A9426FA8B377/0/323830313a3137353a3a2f34342d3434203d3e20323733383233.roa
File:                     323830313a3137353a3a2f34342d3434203d3e20323733383233.roa (raw, json)
Hash identifier:          HF+0gJ2mfOOqB/yjP1YC/BhShFJ9WdM+swyUu6b262A=
Subject key identifier:   56:48:72:23:53:88:F9:04:84:D8:40:06:9A:2E:6C:4C:FB:D4:9E:0B
Certificate issuer:       /CN=8DFAC9895849B5E5772D355F96BCE0D0CB2746AC
Certificate serial:       1F26675F69748C8BE9B92ABFC49F847A90B8ED3D
Authority key identifier: 8D:FA:C9:89:58:49:B5:E5:77:2D:35:5F:96:BC:E0:D0:CB:27:46:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DFAC9895849B5E5772D355F96BCE0D0CB2746AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E26EAD9B503CC0A153C9529D0DEF0677E80F340844E2154C41C6A9426FA8B377/0/323830313a3137353a3a2f34342d3434203d3e20323733383233.roa
Signing time:             Wed 15 Jul 2026 13:30:00 +0000
ROA not before:           Wed 15 Jul 2026 13:25:00 +0000
ROA not after:            Wed 14 Jul 2027 13:30:00 +0000
asID:                     273823
IP address blocks:        2801:175::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E26EAD9B503CC0A153C9529D0DEF0677E80F340844E2154C41C6A9426FA8B377/0/8DFAC9895849B5E5772D355F96BCE0D0CB2746AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E26EAD9B503CC0A153C9529D0DEF0677E80F340844E2154C41C6A9426FA8B377/0/8DFAC9895849B5E5772D355F96BCE0D0CB2746AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DFAC9895849B5E5772D355F96BCE0D0CB2746AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:26:67:5f:69:74:8c:8b:e9:b9:2a:bf:c4:9f:84:7a:90:b8:ed:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DFAC9895849B5E5772D355F96BCE0D0CB2746AC
        Validity
            Not Before: Jul 15 13:25:00 2026 GMT
            Not After : Jul 14 13:30:00 2027 GMT
        Subject: CN=564872235388F90484D840069A2E6C4CFBD49E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:f6:82:25:59:12:e3:bb:d0:33:a1:98:45:
                    bb:a8:d6:c6:3e:34:83:f6:1f:90:22:e1:68:d9:9f:
                    00:57:79:c6:67:df:5c:1e:2e:3b:48:fe:57:02:55:
                    05:aa:3d:10:d2:6e:a8:c2:d7:0a:67:7f:79:ac:a5:
                    39:3c:dc:96:56:4e:e5:ea:2d:75:a2:7b:8d:94:f9:
                    a4:8e:88:92:12:3a:ab:ec:24:0a:5e:d3:23:73:59:
                    94:d4:43:47:ef:3f:02:98:f7:d5:5a:38:39:ba:cb:
                    a6:6f:d0:68:f2:d9:07:2b:88:ec:68:49:9a:d8:d4:
                    e7:fd:f6:af:90:bc:2c:e6:dc:65:62:65:4b:73:5f:
                    e1:44:a3:ac:54:ec:33:dd:de:65:c0:88:7e:88:45:
                    7e:13:92:d1:f6:7d:77:19:f2:82:63:73:67:56:79:
                    54:d3:53:1c:ac:74:21:d9:72:6f:2d:8d:0c:27:ca:
                    c4:3d:1d:54:88:f9:b6:8f:29:b0:b8:0a:f7:b8:2e:
                    30:fe:a0:d4:f1:04:d6:a2:3c:72:94:b3:98:47:1f:
                    f3:aa:31:2b:ba:4d:7b:28:33:f2:07:71:ec:b4:3c:
                    a7:30:33:76:84:f4:a4:54:6c:c0:96:14:42:77:57:
                    01:4b:c0:4d:69:41:c7:16:70:27:53:5f:73:59:81:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:72:23:53:88:F9:04:84:D8:40:06:9A:2E:6C:4C:FB:D4:9E:0B
            X509v3 Authority Key Identifier:
                keyid:8D:FA:C9:89:58:49:B5:E5:77:2D:35:5F:96:BC:E0:D0:CB:27:46:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E26EAD9B503CC0A153C9529D0DEF0677E80F340844E2154C41C6A9426FA8B377/0/8DFAC9895849B5E5772D355F96BCE0D0CB2746AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DFAC9895849B5E5772D355F96BCE0D0CB2746AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E26EAD9B503CC0A153C9529D0DEF0677E80F340844E2154C41C6A9426FA8B377/0/323830313a3137353a3a2f34342d3434203d3e20323733383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:175::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:1f:b1:10:e6:78:a4:ee:06:28:3b:ed:3b:11:21:ed:3c:
         d0:d4:03:e3:31:0c:2a:7b:68:6b:2b:cb:15:50:07:14:2e:fc:
         92:a8:a8:0c:e1:82:06:79:62:88:39:73:93:7c:ee:54:cb:fb:
         fd:fb:bc:bb:1e:3e:31:20:7c:74:28:36:2b:4a:c9:a4:16:e9:
         92:bb:70:a0:c3:1f:77:9c:de:c6:14:60:45:c1:48:81:88:27:
         b1:5f:fc:d1:4b:5e:e3:3c:46:28:d3:d9:04:09:a1:9f:c5:3d:
         eb:a4:5c:ad:52:8c:fe:7b:39:12:a5:ec:dc:93:f8:6d:d3:91:
         af:1e:0f:29:1b:86:d0:d2:9f:ce:ca:9d:08:c3:88:4c:4f:3d:
         81:b9:14:a1:6e:7b:51:12:e8:d8:c6:50:17:91:09:ff:87:cc:
         00:5e:0d:59:e6:63:a8:e2:2d:33:f5:ce:f7:49:b7:2f:76:85:
         8a:c3:64:32:82:cb:0f:da:54:43:7e:2f:a1:22:7f:97:ad:ab:
         35:67:c7:4b:8e:cc:e0:9b:b2:86:57:b2:e1:37:7d:23:88:e1:
         e6:81:24:2e:b2:12:59:25:eb:64:16:a5:37:8d:87:a8:ba:88:
         48:33:27:50:21:25:01:ee:f0:e4:e0:30:cc:ba:67:26:d1:8f:
         07:50:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:30 2026 by rpki-client