Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/323830363a3238353a3a2f33322d3438203d3e20323635353233.roa
File:                     323830363a3238353a3a2f33322d3438203d3e20323635353233.roa (raw, json)
Hash identifier:          hpwAcXNyOv687NLosgOx82caeWVUfzVk5W1qT8+7iPU=
Subject key identifier:   84:81:29:8C:34:6E:6A:26:CA:79:15:E6:B6:C4:99:0F:A1:05:35:99
Certificate issuer:       /CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
Certificate serial:       79B61120241339C9B6C450F70330A51FD63B133F
Authority key identifier: 40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/323830363a3238353a3a2f33322d3438203d3e20323635353233.roa
Signing time:             Thu 05 Mar 2026 23:35:00 +0000
ROA not before:           Thu 05 Mar 2026 23:30:00 +0000
ROA not after:            Thu 04 Mar 2027 23:35:00 +0000
asID:                     265523
IP address blocks:        2806:285::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Mar 2026 20:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b6:11:20:24:13:39:c9:b6:c4:50:f7:03:30:a5:1f:d6:3b:13:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
        Validity
            Not Before: Mar  5 23:30:00 2026 GMT
            Not After : Mar  4 23:35:00 2027 GMT
        Subject: CN=8481298C346E6A26CA7915E6B6C4990FA1053599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:8e:01:23:49:76:63:be:e8:da:0f:0b:0d:
                    79:38:a5:89:44:b8:16:3e:5a:14:86:91:6c:ae:ed:
                    bb:bf:4b:b3:da:e8:87:ba:57:20:3c:60:7b:15:40:
                    a1:34:34:64:19:e7:80:1b:27:3d:8c:a9:cd:b1:a0:
                    b7:d2:a8:04:b9:39:90:a2:9a:6a:cb:30:e1:f4:df:
                    4e:0d:1f:4a:f4:8e:d6:57:c7:6c:1e:f9:39:c9:0e:
                    a4:9a:d4:e5:85:13:f4:75:da:f2:16:40:02:f8:ac:
                    18:b4:f1:ea:f4:a8:5d:73:da:c0:06:0b:85:fa:25:
                    12:4f:6c:c1:92:d7:7c:85:79:16:bd:03:29:4b:b9:
                    82:b9:21:6c:c3:5b:33:7b:57:66:fc:40:ab:25:bd:
                    fc:00:5e:ff:d7:b8:ba:d4:04:1e:02:a6:2f:12:b9:
                    44:65:15:e0:d8:11:b4:15:eb:fa:64:f3:a3:47:67:
                    c4:8e:6f:0c:2e:25:a1:8a:3d:72:98:1e:9a:b4:e3:
                    c0:33:a5:f0:82:76:ec:9f:52:c9:0a:27:87:f5:79:
                    59:8b:ab:9e:c3:f3:a6:f6:a1:a6:19:de:0d:9d:40:
                    d0:e2:5e:11:d9:cf:9e:d4:b2:7b:eb:3d:18:80:d7:
                    9e:06:f9:bb:a0:31:c1:1c:8d:f4:ad:39:1c:aa:6c:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:81:29:8C:34:6E:6A:26:CA:79:15:E6:B6:C4:99:0F:A1:05:35:99
            X509v3 Authority Key Identifier:
                keyid:40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/323830363a3238353a3a2f33322d3438203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:285::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:38:be:b8:c3:02:fc:dd:8f:5e:5e:fc:23:6c:6b:a2:37:10:
         0d:76:1e:d7:7c:f4:42:d3:66:fe:03:1e:61:eb:8d:53:99:b2:
         c2:cb:29:12:a1:db:50:ee:c6:5b:30:c2:aa:47:7b:98:51:b6:
         0e:1e:a5:f3:11:03:14:c5:07:57:f7:95:b3:2f:ca:68:32:49:
         92:99:98:17:5f:75:d4:bf:c0:63:f1:c7:e2:0f:5a:b3:84:c5:
         1e:a5:96:6a:d7:22:bb:2f:67:34:92:6c:24:91:27:af:ee:b7:
         08:30:98:08:5b:e3:80:0b:fa:82:bb:fa:fa:e6:0b:b7:a2:b6:
         ca:a1:03:61:87:5e:ec:a7:54:33:69:cf:e6:d6:0b:91:fb:19:
         a1:2f:ce:4c:b3:bf:e5:f4:73:f2:6f:1d:27:2d:1d:b9:db:12:
         bc:ef:17:21:23:49:56:2b:34:00:24:23:f0:64:76:01:98:0b:
         8a:bd:30:e3:8c:46:d0:e4:8a:44:4b:06:3a:6f:ee:83:c3:ea:
         18:85:c4:2f:b4:a0:c8:3c:36:28:80:d8:0d:7f:fa:2b:dc:a8:
         b5:0d:45:fd:b3:86:ee:3c:e3:ba:cc:0f:73:09:df:93:fc:ef:
         e4:01:71:f6:02:1f:23:a7:b8:a5:4a:65:b2:60:29:d8:26:d3:
         d6:ac:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:46:10 2026 by rpki-client