Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/323830303a613032383a3a2f33322d3332203d3e203237383932.roa
File:                     323830303a613032383a3a2f33322d3332203d3e203237383932.roa (raw, json)
Hash identifier:          z1H8N1rWSTQ2y5Vmi2BUDhKaUHv5ByM9LTndr8Z6WB8=
Subject key identifier:   AD:C8:E1:58:43:9F:6F:FE:18:94:04:B6:F8:01:6A:E7:2B:2D:C2:46
Certificate issuer:       /CN=68DBCC5CE140160B185BF17F4114347E2C82B275
Certificate serial:       61E66DEE9B26E7C205B7480F151E47B7263EA413
Authority key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/323830303a613032383a3a2f33322d3332203d3e203237383932.roa
Signing time:             Sun 12 Jul 2026 21:15:02 +0000
ROA not before:           Sun 12 Jul 2026 21:10:02 +0000
ROA not after:            Sun 11 Jul 2027 21:15:02 +0000
asID:                     27892
IP address blocks:        2800:a028::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e6:6d:ee:9b:26:e7:c2:05:b7:48:0f:15:1e:47:b7:26:3e:a4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DBCC5CE140160B185BF17F4114347E2C82B275
        Validity
            Not Before: Jul 12 21:10:02 2026 GMT
            Not After : Jul 11 21:15:02 2027 GMT
        Subject: CN=ADC8E158439F6FFE189404B6F8016AE72B2DC246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:61:e8:29:3e:d6:be:b7:70:08:43:91:49:
                    b2:cb:0a:5b:cc:91:c4:1d:07:e3:ab:37:e4:ab:99:
                    75:be:e5:3f:1c:fc:9a:63:6c:6b:76:f0:2a:7a:9c:
                    4c:1a:4d:39:71:5e:43:fb:ca:72:df:a9:cd:dc:17:
                    31:a9:a5:08:f4:a2:57:19:3c:bd:88:42:4c:f6:6a:
                    ab:40:cc:67:36:9d:2a:c6:ed:00:33:b6:cd:5f:a6:
                    85:0d:91:f6:84:a6:88:4c:82:64:d9:eb:4d:1d:4d:
                    10:ea:ae:4c:ec:ec:a3:a2:72:0e:a4:64:18:bb:41:
                    4d:b4:c9:ce:65:2a:26:8a:a7:51:9c:da:72:96:f2:
                    85:f9:47:d7:d4:91:09:90:14:8f:21:5a:af:90:9e:
                    46:7c:84:50:c8:40:49:13:82:88:f7:d2:de:80:6d:
                    52:fc:60:a6:6a:12:02:b3:58:7a:22:d4:0b:c2:98:
                    70:fe:03:d4:0d:b9:9b:2a:be:9b:81:df:20:d2:08:
                    07:40:80:fd:e1:cd:92:79:68:27:0f:68:10:f5:c0:
                    ba:e3:68:cd:20:0e:c6:2d:57:4d:be:c9:02:de:4e:
                    66:79:eb:af:8e:c1:fa:40:7d:a2:20:84:fc:4e:58:
                    22:8a:54:67:68:78:38:62:13:97:76:9d:6a:3d:b4:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C8:E1:58:43:9F:6F:FE:18:94:04:B6:F8:01:6A:E7:2B:2D:C2:46
            X509v3 Authority Key Identifier:
                keyid:68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/323830303a613032383a3a2f33322d3332203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a028::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:a9:6f:77:a0:6c:10:de:34:0a:57:f9:64:45:28:1b:cd:20:
         4c:b0:f6:d3:41:7f:c0:51:bf:e0:c0:08:b7:f0:a2:a9:0c:c3:
         24:19:7b:32:ac:da:18:bd:63:be:f0:1d:42:35:88:d6:b5:42:
         13:1d:02:33:9f:6a:fd:da:cf:71:91:5c:2f:2a:da:65:15:bc:
         32:a7:c4:60:ba:7b:e4:5e:99:6f:13:7e:e9:91:df:fc:8a:bf:
         95:a9:9d:a1:d0:52:25:38:cf:58:37:44:5f:2a:6f:6b:06:0e:
         85:b8:94:a3:0c:77:d9:23:15:43:15:87:28:b3:a7:ed:d6:51:
         49:45:be:a4:c8:ee:75:2c:2e:a6:64:a6:44:72:c0:6c:b3:09:
         c7:ab:2c:77:a5:45:41:fb:f6:1f:65:11:da:14:60:61:a7:aa:
         9e:8b:ff:f9:d4:a5:fe:6f:3f:63:4d:b6:80:b8:44:b8:99:cb:
         f1:01:27:3f:45:43:a5:61:10:0c:e8:58:e7:58:48:fb:34:bf:
         a7:de:f0:2d:9f:31:ee:84:47:57:21:9c:03:9e:64:8a:b2:4c:
         8b:ff:59:ca:67:03:70:2a:07:77:2a:bb:ef:00:11:20:0b:31:
         32:7a:44:02:00:33:05:0a:9a:a0:e7:07:68:8d:66:30:0c:81:
         31:45:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:28:51 2026 by rpki-client