Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/008F47EBF857CF9B27E6C6430393B37DF27375194C95F1E7B88C8193E2FC075F/0/323830313a31653a613030303a3a2f34382d3438203d3e203631343635.roa
File:                     323830313a31653a613030303a3a2f34382d3438203d3e203631343635.roa (raw, json)
Hash identifier:          cHwQbKmdhDqOpcn83zvFupnWQxyEXum6QywRpeUC6HY=
Subject key identifier:   16:48:E7:97:81:0D:C3:3A:14:EE:9E:B7:60:9E:5B:7C:B2:79:3C:E8
Certificate issuer:       /CN=F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D
Certificate serial:       1C7CCBEBC4921878B01D089CAE91E57554FC5618
Authority key identifier: F3:8D:4C:6E:E8:12:E5:0A:65:14:CA:B7:7B:C9:2F:E6:AD:9C:AC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/008F47EBF857CF9B27E6C6430393B37DF27375194C95F1E7B88C8193E2FC075F/0/323830313a31653a613030303a3a2f34382d3438203d3e203631343635.roa
Signing time:             Wed 16 Sep 2026 18:35:53 +0000
ROA not before:           Wed 16 Sep 2026 18:30:53 +0000
ROA not after:            Wed 15 Sep 2027 18:35:53 +0000
asID:                     61465
IP address blocks:        2801:1e:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/008F47EBF857CF9B27E6C6430393B37DF27375194C95F1E7B88C8193E2FC075F/0/F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/008F47EBF857CF9B27E6C6430393B37DF27375194C95F1E7B88C8193E2FC075F/0/F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7c:cb:eb:c4:92:18:78:b0:1d:08:9c:ae:91:e5:75:54:fc:56:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D
        Validity
            Not Before: Sep 16 18:30:53 2026 GMT
            Not After : Sep 15 18:35:53 2027 GMT
        Subject: CN=1648E797810DC33A14EE9EB7609E5B7CB2793CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:93:33:c3:b8:0c:a6:13:11:d1:59:d1:40:
                    3e:41:f8:db:ff:97:19:d6:29:36:29:3f:6d:e1:07:
                    8a:aa:b2:e3:9c:25:62:47:5c:6b:92:b3:f5:89:93:
                    fb:8f:db:10:34:b5:bd:a5:8e:15:f6:6e:83:ea:d1:
                    0f:66:cf:dd:84:e1:b1:7a:9f:65:62:66:8f:bd:df:
                    91:d9:d0:b6:6f:c1:59:0e:d2:1a:3d:4c:3d:61:1c:
                    78:82:a9:41:44:94:d3:d4:5e:d9:d5:10:dd:5e:ba:
                    18:de:54:a0:82:94:1c:a2:bd:4b:a3:bf:c8:2a:36:
                    f6:df:ac:fc:c0:7b:7f:61:7f:1c:21:df:03:ea:00:
                    3a:cd:ec:0a:13:52:3a:fd:7c:28:74:86:f9:bf:33:
                    35:57:50:d8:9e:7f:a5:09:6e:20:c5:e7:09:ca:b7:
                    2d:24:c6:ad:99:ce:5a:9b:b2:1c:cd:33:56:48:2e:
                    e1:75:4f:54:51:09:18:ba:83:54:71:8f:c5:28:05:
                    25:ea:82:99:3c:fb:79:e2:7b:73:9c:28:83:77:17:
                    18:76:4b:c9:3a:f3:7d:e9:9d:1a:1c:52:4e:05:47:
                    d9:2c:72:20:e9:ef:4a:be:16:f2:d8:1f:83:e8:92:
                    d9:bb:5f:a5:9a:84:92:7b:1e:3f:f2:ab:c7:19:36:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:48:E7:97:81:0D:C3:3A:14:EE:9E:B7:60:9E:5B:7C:B2:79:3C:E8
            X509v3 Authority Key Identifier:
                keyid:F3:8D:4C:6E:E8:12:E5:0A:65:14:CA:B7:7B:C9:2F:E6:AD:9C:AC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/008F47EBF857CF9B27E6C6430393B37DF27375194C95F1E7B88C8193E2FC075F/0/F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F38D4C6EE812E50A6514CAB77BC92FE6AD9CAC2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/008F47EBF857CF9B27E6C6430393B37DF27375194C95F1E7B88C8193E2FC075F/0/323830313a31653a613030303a3a2f34382d3438203d3e203631343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:ac:a6:01:3a:f9:f9:5b:71:d1:9b:58:62:25:93:79:2e:ab:
         31:a2:22:ed:8a:d5:cb:30:c7:ce:0f:1a:88:3c:2c:b0:41:e2:
         71:80:3d:ed:b5:87:f7:f5:42:54:0d:4b:18:a7:d1:f1:77:e6:
         56:cd:7f:eb:9a:6e:5a:61:63:dc:27:cd:00:51:bf:fb:87:37:
         cf:f7:6a:b0:7d:f4:7a:f7:8d:ac:d7:dd:4e:30:36:3d:11:ca:
         96:f4:48:2b:4d:48:5c:d0:18:98:d3:00:dc:8e:18:64:a0:96:
         ac:7e:f6:76:6a:5a:0d:12:62:7a:ed:84:58:05:45:c6:3d:c2:
         b8:ca:91:53:28:d8:13:61:f9:c7:c3:2f:a9:20:a4:b5:4c:62:
         9e:0a:65:36:0f:fb:e2:46:b5:c5:6b:f8:01:b2:46:40:39:15:
         7d:85:26:ea:7f:46:ae:e8:1c:79:bf:16:7e:24:62:be:a7:11:
         b5:fa:4a:9e:a2:63:dd:76:b4:cf:62:c5:f1:bb:72:1c:6b:61:
         4f:2e:9a:6e:c3:05:44:52:08:dd:58:ed:da:9b:4c:84:fe:2a:
         1d:12:ae:ac:d6:ae:e0:92:b5:b2:e6:d7:df:4f:f8:10:20:ca:
         79:1b:e6:03:ce:f4:43:3a:a6:b8:de:1f:1c:7e:0e:2e:d5:26:
         23:4c:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:49:20 2026 by rpki-client