Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/323830363a3430343a3a2f33322d3438203d3e20323730323231.roa
File:                     323830363a3430343a3a2f33322d3438203d3e20323730323231.roa (raw, json)
Hash identifier:          sU7H8vX0UPApJ34LxIKpigBg8cO1d0ZvYUpfr5n5XnY=
Subject key identifier:   37:CF:69:2A:2A:1B:45:CF:3A:AE:77:D1:98:9E:23:58:DC:1C:7E:18
Certificate issuer:       /CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232
Certificate serial:       7EBEBEED23CF36193A03EC4358A5489C4A7FF541
Authority key identifier: 88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/323830363a3430343a3a2f33322d3438203d3e20323730323231.roa
Signing time:             Thu 27 Aug 2026 15:26:45 +0000
ROA not before:           Thu 27 Aug 2026 15:21:45 +0000
ROA not after:            Thu 26 Aug 2027 15:26:45 +0000
asID:                     270221
IP address blocks:        2806:404::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.crl
                          rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 19:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:be:ed:23:cf:36:19:3a:03:ec:43:58:a5:48:9c:4a:7f:f5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232
        Validity
            Not Before: Aug 27 15:21:45 2026 GMT
            Not After : Aug 26 15:26:45 2027 GMT
        Subject: CN=37CF692A2A1B45CF3AAE77D1989E2358DC1C7E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:1f:d6:97:fb:b2:d3:09:94:65:a4:92:ff:
                    55:d8:9a:39:dc:c2:69:7c:03:0f:ce:80:84:5e:8b:
                    41:0e:c2:ae:e1:56:4b:c7:95:50:7d:d4:7b:62:f1:
                    93:9c:21:3a:ee:54:8a:8a:c3:12:bd:c4:d9:69:f4:
                    f7:53:33:17:54:b1:02:8d:35:c3:0e:f5:4a:65:cb:
                    f9:5e:be:62:77:42:10:0d:e7:05:80:ed:1f:9d:53:
                    71:ab:59:95:b7:9d:7e:4b:e1:9b:31:49:2b:77:46:
                    6b:2e:c0:bb:29:fa:a2:6a:4f:82:59:1f:01:dc:ca:
                    33:96:f8:48:b3:b3:37:fb:76:a3:d4:b5:4a:c0:df:
                    69:81:a9:0a:f9:5b:ed:c3:fe:28:8b:6b:18:14:38:
                    90:df:5f:8c:f1:7b:c9:8f:74:c4:12:9b:27:8e:2f:
                    8c:5d:2e:88:e6:db:73:f5:29:3e:bb:d9:d1:e1:99:
                    72:1d:69:06:df:6c:75:d4:3e:ac:0c:04:5d:37:6f:
                    8b:f2:10:2a:13:92:79:6a:2c:9e:e2:7c:ad:64:be:
                    48:14:6e:38:e3:ed:99:33:59:26:49:86:57:1c:80:
                    32:92:b3:8e:b1:d3:86:fa:33:ba:bb:86:ac:37:5b:
                    fc:4c:ff:3b:e0:b7:0e:f2:5c:bf:3f:f0:ed:94:d3:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:69:2A:2A:1B:45:CF:3A:AE:77:D1:98:9E:23:58:DC:1C:7E:18
            X509v3 Authority Key Identifier:
                keyid:88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/323830363a3430343a3a2f33322d3438203d3e20323730323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:404::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:32:18:46:fa:7e:b6:6d:5f:76:91:e0:38:19:ae:1a:18:c8:
         2b:06:65:f6:58:75:85:e0:98:bf:b3:b1:43:4a:25:3d:bd:84:
         4a:b8:46:ad:2f:22:b1:bd:b4:74:96:6f:03:78:44:f2:d9:74:
         6d:8b:5b:cc:63:6a:79:58:30:c8:bd:0f:5a:ce:c0:0a:35:2d:
         7b:56:ba:ef:fd:60:b0:a9:6b:aa:ce:99:5a:ba:3a:19:50:66:
         73:79:27:dd:46:2f:16:95:2d:a2:c2:72:58:8c:3e:a7:7b:a9:
         7a:00:14:d4:c7:f3:53:e1:80:cb:c2:33:47:06:c8:f4:22:7a:
         49:b6:bc:f5:6a:32:6f:3d:08:7e:af:1d:39:2e:de:ed:8f:e0:
         d3:a8:f2:c8:fd:83:e8:98:7f:ff:f9:4b:1f:de:7a:e3:5a:14:
         a8:72:7c:d5:ba:e6:a2:9a:04:19:a0:7e:cb:a5:81:f5:74:a5:
         21:de:f5:1b:d5:7f:72:33:a8:9d:a9:24:c5:ab:d5:04:20:50:
         cb:4f:68:99:d4:32:99:35:bb:26:44:ff:f5:7f:e9:c4:cf:cc:
         5f:c4:77:a8:e0:d1:0b:cd:60:4f:6e:37:fa:db:f8:a1:85:d3:
         91:0e:10:8a:44:6a:fe:a0:3b:dd:f0:28:13:7e:f5:55:0d:4f:
         04:9b:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:14:20 2026 by rpki-client