Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34382d3438203d3e203634313533.roa
File:                     323830313a3166353a3a2f34382d3438203d3e203634313533.roa (raw, json)
Hash identifier:          mDdZ5/Om7qR4DRLxb6wb/Ex9KX+8kFpAUydh8LwjHOk=
Subject key identifier:   2D:75:14:93:9F:3E:AC:A7:B0:28:2D:A2:E9:D6:41:62:84:43:8F:1B
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       13018EED91FFF9F5207431E9296B51862390C01B
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34382d3438203d3e203634313533.roa
Signing time:             Tue 12 May 2026 07:42:10 +0000
ROA not before:           Tue 12 May 2026 07:37:10 +0000
ROA not after:            Tue 11 May 2027 07:42:10 +0000
asID:                     64153
IP address blocks:        2801:1f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:01:8e:ed:91:ff:f9:f5:20:74:31:e9:29:6b:51:86:23:90:c0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: May 12 07:37:10 2026 GMT
            Not After : May 11 07:42:10 2027 GMT
        Subject: CN=2D7514939F3EACA7B0282DA2E9D6416284438F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:57:7b:ff:e4:ee:81:b0:d0:e7:5d:92:af:
                    99:15:4f:f3:fe:5f:1d:a8:73:e7:d7:a0:24:92:a3:
                    cc:03:b6:cc:35:b6:79:d9:27:da:e8:69:27:59:16:
                    cf:93:84:92:25:9b:e3:c1:32:c5:99:6c:ad:63:70:
                    cc:a3:bf:7a:24:b5:fc:47:ff:09:a0:62:1f:59:92:
                    7f:36:a9:d9:96:8a:c8:65:5d:23:c0:af:a0:25:93:
                    2b:d0:43:67:e4:8b:7e:a1:ea:92:10:e7:a8:cb:f4:
                    32:41:e6:91:d0:08:2e:b2:9f:16:27:0a:5d:8b:7e:
                    43:fb:89:40:c4:77:3f:f4:8c:cc:db:ba:b6:a0:69:
                    b4:07:5c:ba:56:78:7d:60:86:46:ee:c8:41:f6:26:
                    8b:77:3c:5e:dc:76:26:86:69:eb:b7:9c:e2:75:47:
                    bd:0e:77:b2:5b:01:cb:f3:9a:42:d9:16:d8:47:e8:
                    41:17:06:2c:6d:dc:4f:fc:00:ed:81:e7:ba:ce:ff:
                    30:1f:da:76:a2:55:5b:42:34:ef:d8:a4:24:a5:9c:
                    8e:2c:8b:2b:f8:2a:1c:c4:52:15:d3:90:77:a7:66:
                    53:04:fe:0a:8c:db:6f:bf:69:18:e5:37:35:03:a8:
                    a7:71:c2:84:bc:5a:e9:52:04:9f:21:62:7e:d8:7f:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:75:14:93:9F:3E:AC:A7:B0:28:2D:A2:E9:D6:41:62:84:43:8F:1B
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34382d3438203d3e203634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:37:55:76:b0:7a:1d:68:12:31:42:3e:bd:60:0e:d2:32:
         3c:2f:26:30:a8:b5:fd:09:94:38:7d:1f:3c:75:74:13:2c:fa:
         3f:dc:5d:6d:54:81:92:9f:30:f8:aa:ed:7c:29:d5:bb:f7:35:
         e2:b6:13:ae:63:cb:a2:f2:9d:96:8b:0c:b5:f8:f6:e7:8c:b8:
         8e:15:9a:2d:ef:6c:d7:0d:16:67:41:61:a2:59:0d:9c:cb:90:
         33:6f:94:4f:c8:26:eb:12:27:d5:9f:c7:d5:e3:6f:09:5b:52:
         77:35:c8:06:7e:6b:4a:f1:10:37:18:ec:29:1f:7b:e8:62:90:
         98:57:52:a0:47:df:1f:e5:98:21:1e:59:78:73:f3:75:e0:08:
         27:6a:2e:04:5a:29:10:b5:45:d4:28:98:d7:2f:a9:1a:40:72:
         53:72:de:9c:b8:30:ca:0d:b3:88:1f:89:19:d4:8c:69:f8:7c:
         28:ee:a1:a5:9d:88:8d:16:f4:cd:52:ac:ff:54:03:0d:28:6a:
         e7:29:60:a6:39:41:ce:db:01:97:f3:31:59:d4:b6:a6:f9:51:
         3d:6e:fe:04:33:ef:52:85:39:d4:fc:f4:4a:9c:19:f8:7d:d0:
         32:96:db:1f:f1:ae:31:b9:9c:52:16:0d:75:0a:29:02:8f:ec:
         ce:b1:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:33 2026 by rpki-client