Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0AB9F8D676B0B38B39C9CEE82007E5B4897BE05CF91B3B622739DC9D1C33153E/0/323830313a31313a333830303a3a2f34382d3438203d3e203232343131.roa
File:                     323830313a31313a333830303a3a2f34382d3438203d3e203232343131.roa (raw, json)
Hash identifier:          uQAjBKpOEmFEa6C20olhNmrRiNvKC21ZXhAEhMkE5dQ=
Subject key identifier:   2C:30:E4:1A:71:5B:1D:83:65:09:4E:08:19:08:6F:C0:E5:1A:36:19
Certificate issuer:       /CN=57372A7374A77B4AE2025CEBF61B7BDDF639A311
Certificate serial:       4BB18A4410B378094965DA1E06CCE709B404B04B
Authority key identifier: 57:37:2A:73:74:A7:7B:4A:E2:02:5C:EB:F6:1B:7B:DD:F6:39:A3:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57372A7374A77B4AE2025CEBF61B7BDDF639A311.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AB9F8D676B0B38B39C9CEE82007E5B4897BE05CF91B3B622739DC9D1C33153E/0/323830313a31313a333830303a3a2f34382d3438203d3e203232343131.roa
Signing time:             Tue 08 Sep 2026 19:00:00 +0000
ROA not before:           Tue 08 Sep 2026 18:55:00 +0000
ROA not after:            Tue 07 Sep 2027 19:00:00 +0000
asID:                     22411
IP address blocks:        2801:11:3800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AB9F8D676B0B38B39C9CEE82007E5B4897BE05CF91B3B622739DC9D1C33153E/0/57372A7374A77B4AE2025CEBF61B7BDDF639A311.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AB9F8D676B0B38B39C9CEE82007E5B4897BE05CF91B3B622739DC9D1C33153E/0/57372A7374A77B4AE2025CEBF61B7BDDF639A311.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57372A7374A77B4AE2025CEBF61B7BDDF639A311.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b1:8a:44:10:b3:78:09:49:65:da:1e:06:cc:e7:09:b4:04:b0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57372A7374A77B4AE2025CEBF61B7BDDF639A311
        Validity
            Not Before: Sep  8 18:55:00 2026 GMT
            Not After : Sep  7 19:00:00 2027 GMT
        Subject: CN=2C30E41A715B1D8365094E0819086FC0E51A3619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:da:aa:80:45:04:fa:e1:f3:8a:e5:01:cb:eb:
                    26:e2:8c:ba:4a:a8:10:0f:20:8f:77:5d:38:7e:af:
                    3c:d1:c9:cc:06:49:2c:84:66:d7:84:9d:3e:d4:7c:
                    18:5b:1c:e3:4d:3d:27:99:55:09:41:04:d7:ba:76:
                    90:fb:dd:74:8e:b2:b1:7a:03:c1:3c:28:f9:ef:9f:
                    33:6c:b0:98:6f:e7:58:d0:20:8f:a9:4f:36:ed:1c:
                    a4:fd:e1:c7:92:76:e6:fc:60:fd:60:d8:2c:55:e9:
                    46:a4:df:22:b0:ae:50:46:a3:f2:cd:29:79:39:46:
                    49:9f:11:b1:f0:de:89:88:07:48:c3:5a:b6:4b:3b:
                    fa:37:88:c0:76:2d:54:10:dd:ab:35:70:cf:84:ce:
                    16:e2:f4:2e:c0:e8:c3:af:4c:30:f0:54:51:0f:48:
                    e1:cf:8b:19:1a:34:8d:d1:be:00:b9:be:07:55:0b:
                    87:07:66:75:de:fd:66:24:b0:56:30:c7:9e:7e:4d:
                    3f:a5:11:49:c3:d4:82:37:89:a6:49:0c:84:1b:9c:
                    e8:61:52:89:29:3d:7d:f0:9e:e3:9c:cf:f7:63:f8:
                    75:41:7f:0f:10:51:54:66:8a:75:64:ce:fb:31:ca:
                    99:17:71:f1:53:9a:b8:12:31:23:bc:23:e8:fc:d1:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:E4:1A:71:5B:1D:83:65:09:4E:08:19:08:6F:C0:E5:1A:36:19
            X509v3 Authority Key Identifier:
                keyid:57:37:2A:73:74:A7:7B:4A:E2:02:5C:EB:F6:1B:7B:DD:F6:39:A3:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AB9F8D676B0B38B39C9CEE82007E5B4897BE05CF91B3B622739DC9D1C33153E/0/57372A7374A77B4AE2025CEBF61B7BDDF639A311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57372A7374A77B4AE2025CEBF61B7BDDF639A311.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AB9F8D676B0B38B39C9CEE82007E5B4897BE05CF91B3B622739DC9D1C33153E/0/323830313a31313a333830303a3a2f34382d3438203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:0c:44:0d:6c:fc:7b:cd:74:df:f6:d8:85:91:f9:4a:ea:5a:
         06:14:a2:f9:53:18:b7:82:e0:72:2e:0f:47:0e:d4:ec:4c:e1:
         5d:7f:d0:fb:11:f9:c3:ee:20:d5:bf:b9:39:e9:ae:bd:46:96:
         9d:b0:66:f1:6b:1f:9b:6c:4f:0b:5b:75:bc:18:5d:76:42:bf:
         0c:31:f8:97:2b:0f:97:bb:92:b1:88:8b:ce:36:97:98:11:5c:
         f9:71:5a:48:4c:d9:47:4f:5b:b6:af:c6:04:73:4a:d3:69:6d:
         8a:bb:3c:63:96:27:b9:a3:00:c4:1b:d6:2b:5a:b5:f1:07:c0:
         12:a3:77:71:19:26:ef:63:f3:11:a9:33:8e:68:8d:2f:79:6e:
         31:5c:cd:32:c7:bd:10:06:f0:e8:af:02:2c:74:07:90:cb:e1:
         d9:9d:f6:74:f6:ec:8d:27:dd:09:49:a6:17:ea:5b:6c:55:ea:
         30:85:85:87:d9:d5:e2:35:12:a5:62:6d:e9:0e:fd:05:5a:c1:
         ce:c0:6b:75:ab:57:13:34:58:11:7e:c4:ae:a7:3d:0f:ac:3a:
         a6:e0:b2:c9:31:5a:08:e1:c8:16:ab:c1:9f:3e:b5:49:2b:be:
         2a:a7:7a:72:07:0d:77:9d:07:8d:e0:84:85:e3:a8:a6:30:ab:
         95:9f:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:27 2026 by rpki-client