Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa
File:                     323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa (raw, json)
Hash identifier:          Jf84Hfqg5pOKAd84893HhoZUKhlanJ29WSmX9P22A6o=
Subject key identifier:   A2:02:09:FB:50:BF:EF:36:A9:64:75:77:78:F6:7B:FE:E0:82:8B:14
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       45E1E672DD96C7A6DDD99E6E26898B55ABC56CE1
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa
Signing time:             Tue 21 Jul 2026 18:15:19 +0000
ROA not before:           Tue 21 Jul 2026 18:10:19 +0000
ROA not after:            Tue 20 Jul 2027 18:15:19 +0000
asID:                     11830
IP address blocks:        2801:151:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e1:e6:72:dd:96:c7:a6:dd:d9:9e:6e:26:89:8b:55:ab:c5:6c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Jul 21 18:10:19 2026 GMT
            Not After : Jul 20 18:15:19 2027 GMT
        Subject: CN=A20209FB50BFEF36A964757778F67BFEE0828B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:11:c4:f8:48:ed:60:80:ac:78:22:26:6b:
                    6a:8c:eb:05:7a:80:a8:60:2c:0b:a3:06:0d:6e:7d:
                    48:60:75:00:dd:53:d5:7d:e6:74:3c:9e:3e:a3:ea:
                    f8:f4:05:c6:2b:84:40:a9:0f:9f:63:81:e9:f1:e5:
                    6f:29:c7:12:c8:c9:a2:8e:e7:23:71:0f:70:8c:36:
                    e1:3c:c9:df:b2:38:b0:80:9e:0c:d7:47:11:84:87:
                    97:52:8a:b3:2a:41:ab:d1:99:ac:92:50:bd:e1:2a:
                    ab:73:7b:1b:a9:f3:90:a8:05:e8:4f:93:1a:aa:e4:
                    a9:fa:81:df:4d:48:95:6a:5f:47:c4:ed:d9:d9:89:
                    e5:8b:fd:25:15:f2:fb:18:4b:e8:f6:a9:23:5d:e0:
                    eb:ab:4d:dd:6e:aa:df:a3:37:4b:b4:78:47:5e:6a:
                    00:b9:09:88:3d:89:e0:7c:8b:65:00:b9:68:0e:60:
                    10:9d:46:a9:4c:64:d9:a8:3b:89:16:76:84:34:66:
                    b0:e4:18:80:4f:f2:49:5c:25:40:c9:fa:81:29:f6:
                    bd:7b:37:a3:33:28:44:18:c9:53:8e:39:52:59:a1:
                    f7:dc:9d:11:a6:78:9c:19:6d:70:33:6c:34:ab:0a:
                    97:b8:06:af:58:b2:f4:e7:c3:da:a4:16:01:1d:91:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:02:09:FB:50:BF:EF:36:A9:64:75:77:78:F6:7B:FE:E0:82:8B:14
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a32323a3a2f34382d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:2d:ef:65:96:b9:44:98:68:72:d0:58:4f:14:fc:da:a0:d9:
         71:35:b4:5f:3e:8f:2a:5b:fc:78:eb:1a:85:e2:7d:8a:88:06:
         06:84:8b:fa:30:dd:fe:42:ef:74:ac:f8:6d:f7:ce:fa:48:9d:
         4e:fb:b3:25:f0:ec:1b:5c:1a:3e:94:d1:4e:7f:b8:59:90:27:
         b3:e5:90:70:e7:09:57:32:e5:d5:60:09:e6:0e:e8:0f:37:ed:
         c8:50:41:e6:dd:d2:bf:87:27:6d:2f:3a:f3:22:ea:f6:b0:1a:
         7e:7c:9c:78:1b:72:2b:af:e7:7f:3c:cd:80:9e:fc:1b:52:4a:
         81:d5:00:02:1d:14:76:05:56:ef:f6:33:12:e1:dd:f7:fc:c0:
         16:f9:f8:6a:d7:31:32:21:64:dd:e2:6f:eb:6a:71:8b:2d:c3:
         b1:fe:82:a8:e8:6d:9d:eb:1d:45:cb:c8:b9:59:8b:c0:a9:4d:
         29:3f:a4:85:0c:67:47:39:7e:cb:6f:15:e6:34:8d:bb:77:64:
         fe:39:31:09:39:b5:21:da:0a:bc:74:47:04:ca:a7:c2:36:cc:
         79:58:2b:93:2c:f4:ca:75:ff:15:97:6b:8c:54:a2:be:78:84:
         88:7b:c7:09:3d:ff:7a:39:f0:5c:a5:89:b8:a0:97:bb:5a:ba:
         2b:7f:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:05:29 2026 by rpki-client