Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a313a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a313a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          x+HalT/DWJYhfUCjZ0q4ouUc7vohXKWfsvy2+1sks1k=
Subject key identifier:   E5:44:96:D5:BE:93:8F:27:22:77:18:C9:6A:BC:72:EE:13:3A:0E:57
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       3876C1C9BAACBCF5078F8404C23BEF4C3BD0D723
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a313a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 12:41:52 +0000
ROA not before:           Mon 19 Oct 2026 12:36:52 +0000
ROA not after:            Mon 18 Oct 2027 12:41:52 +0000
asID:                     262249
IP address blocks:        2801:140:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Nov 2026 04:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:76:c1:c9:ba:ac:bc:f5:07:8f:84:04:c2:3b:ef:4c:3b:d0:d7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 12:36:52 2026 GMT
            Not After : Oct 18 12:41:52 2027 GMT
        Subject: CN=E54496D5BE938F27227718C96ABC72EE133A0E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:97:80:ae:c8:bc:9d:e9:5f:81:17:9a:b3:
                    f6:e7:87:a3:64:3a:de:03:82:20:7a:80:84:b8:d6:
                    3a:ee:fe:1b:ed:76:ff:42:bc:fd:f0:8f:02:ff:92:
                    c7:83:b5:c3:11:9d:5a:6a:0f:a5:64:2c:4d:39:f8:
                    b2:74:68:ff:4e:8c:dd:a9:a8:5d:a5:06:17:6e:43:
                    8f:e5:2f:8a:9d:35:84:cd:98:f6:bc:69:10:f3:2a:
                    8c:0f:4d:05:e9:f1:89:c0:38:47:16:1e:f1:ed:0f:
                    e2:41:5c:99:3b:51:21:29:1b:2c:51:d3:db:de:e1:
                    4b:93:18:fa:73:c7:3c:43:b3:46:81:87:ec:af:f8:
                    7c:29:d2:36:3b:19:0b:45:5f:81:da:3a:ee:4d:6a:
                    05:9f:46:ed:67:6f:74:d0:84:6b:18:81:53:f2:0e:
                    d6:85:f5:aa:1d:76:52:90:25:7b:26:a4:da:9a:88:
                    d3:86:c7:4e:f2:14:18:0a:85:04:9a:50:8b:d3:13:
                    b7:73:cd:9b:55:ec:bf:c3:36:ca:64:0e:42:05:52:
                    ef:e7:fe:54:c0:97:7f:4c:1c:41:cb:e1:a8:03:6f:
                    68:e9:25:92:b4:a0:1e:8f:6b:91:3b:99:2e:33:aa:
                    70:0d:23:63:97:d0:da:40:02:f8:cf:d1:2b:7e:f2:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:44:96:D5:BE:93:8F:27:22:77:18:C9:6A:BC:72:EE:13:3A:0E:57
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a313a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:f0:e9:97:47:e6:47:3c:22:55:82:ea:d1:a0:4b:83:cd:
         ef:05:09:c8:fa:7d:8e:2b:ca:a3:48:f3:ff:19:63:0c:bc:58:
         3d:2a:a6:e3:ee:29:43:a4:47:66:14:0f:86:77:33:9c:52:8e:
         d8:cc:d5:ca:1c:1b:63:34:53:01:6e:1e:24:89:53:49:9b:7e:
         76:7b:87:50:56:38:33:29:b1:93:64:7c:59:4b:d3:01:07:20:
         5c:f3:93:b6:ba:10:42:58:3a:29:2f:df:f1:23:db:eb:5d:d3:
         a9:d8:a9:31:e3:0b:85:03:45:bd:a0:8b:bb:4f:50:63:f5:70:
         89:8f:3a:ad:92:ac:46:8d:dd:3d:cc:e3:c1:f0:19:2c:f1:29:
         ba:b2:ac:e4:0f:4d:2a:2c:af:cb:68:e0:cd:a8:d7:a7:6e:95:
         59:ed:91:7f:64:1b:65:fd:b2:39:3e:db:e3:45:ff:ae:7e:45:
         83:57:58:0a:bb:6c:00:bd:b0:46:74:80:f1:10:9b:1b:2d:56:
         dd:35:9f:b5:3c:69:a5:3b:fe:47:4d:c4:95:08:93:7d:93:91:
         4e:91:68:50:81:bb:00:b2:b0:d0:ea:f6:f3:98:64:5c:2f:e8:
         5c:29:51:e4:dc:a1:16:9c:36:2f:26:6e:f2:bc:db:cd:c7:d8:
         e0:37:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:10:31 2026 by rpki-client