Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666623a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a666666623a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          TabbCVDEbEHGdlUY/qyq63LCwycZOCVZWC0yQi/2xrY=
Subject key identifier:   B5:6B:73:2E:E1:22:16:79:23:11:49:03:B5:CA:01:14:90:E1:3B:2E
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       2A0EBB2EFADAFA6936A06DC0BB03F2A4BB760FAD
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666623a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Fri 16 Oct 2026 14:40:45 +0000
ROA not before:           Fri 16 Oct 2026 14:35:45 +0000
ROA not after:            Fri 15 Oct 2027 14:40:45 +0000
asID:                     262249
IP address blocks:        2801:140:fffb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0e:bb:2e:fa:da:fa:69:36:a0:6d:c0:bb:03:f2:a4:bb:76:0f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 16 14:35:45 2026 GMT
            Not After : Oct 15 14:40:45 2027 GMT
        Subject: CN=B56B732EE122167923114903B5CA011490E13B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:b0:13:84:0d:60:10:d7:7c:4d:38:e1:8e:
                    c3:42:ac:ba:7a:0f:83:35:2e:67:7e:49:67:6e:6b:
                    88:d5:d5:e9:46:f5:9b:b9:fe:67:b9:b5:b8:a5:0f:
                    47:70:4f:68:24:bd:55:a8:c3:e6:62:7a:8b:7a:b4:
                    a5:a1:80:6c:1c:c5:e4:d9:2e:f6:d5:ac:7d:1a:c4:
                    40:81:aa:92:b9:b8:e1:02:57:9c:48:22:4f:10:d9:
                    9c:fa:e9:54:29:81:09:02:c4:39:c7:f9:27:ad:30:
                    81:83:e6:89:76:5a:4b:7c:90:6e:75:47:c8:ad:b9:
                    6c:1e:0f:73:4e:0d:0b:54:71:59:a9:60:d0:3f:66:
                    ec:60:c2:54:19:5c:e9:82:a9:1f:7e:55:4f:ae:a4:
                    26:d6:6e:a8:1e:fb:41:e2:e4:0e:ba:80:c7:8d:22:
                    ba:d6:43:b1:ee:19:07:4c:59:da:63:d3:e1:bd:d6:
                    84:01:cd:d1:73:a9:34:bc:4e:74:72:c7:04:1f:b2:
                    1c:bb:b4:c4:bc:56:f0:30:1c:00:06:f8:d7:74:7e:
                    b3:a4:4f:cd:48:e3:36:66:3a:bd:4f:d9:4a:7c:de:
                    07:e8:e7:9a:91:85:5d:1b:5b:76:22:64:c6:20:25:
                    8b:89:7c:e3:f5:20:a1:dd:e8:03:17:87:44:1a:7d:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:73:2E:E1:22:16:79:23:11:49:03:B5:CA:01:14:90:E1:3B:2E
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666623a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:fffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:f3:36:41:3e:57:d9:de:cf:48:71:03:6c:92:c2:bb:fb:74:
         34:ed:75:4f:2d:5e:e3:83:99:88:3a:53:8f:6a:68:0e:ec:1f:
         98:d4:c3:04:2c:ee:9d:fa:88:28:e4:d5:e0:72:bf:61:a7:17:
         6c:88:9d:57:bd:fe:c7:4c:68:2d:03:66:2b:f9:cc:5a:c7:3f:
         db:68:3f:45:d0:1b:76:0d:5b:f0:36:f5:f7:8b:ae:d3:0d:09:
         96:cf:1a:11:10:20:f5:d1:c8:65:5e:5d:85:20:c1:6c:e6:51:
         51:60:10:c3:c1:24:85:69:77:69:4a:e3:2c:f8:25:76:64:c0:
         da:91:0a:64:b7:37:6a:3e:4a:b4:ac:73:6f:6b:e3:e4:37:b3:
         94:23:aa:f5:5f:ad:46:4d:48:7f:13:5c:19:59:f3:37:b5:b6:
         08:da:27:00:69:54:94:2e:7b:92:29:b9:2d:61:d5:a4:ab:cc:
         18:5d:c5:10:b7:6f:a2:ae:af:96:25:3c:45:d7:2d:ef:19:4a:
         fd:3c:6e:17:a5:c5:00:42:da:58:92:c0:38:80:b4:97:1d:2f:
         f3:3f:95:5a:ed:0e:4d:b8:2f:a2:e0:c6:09:88:63:87:3b:ee:
         df:4a:b1:b3:40:76:e7:b4:6d:b0:25:87:92:ed:76:40:36:07:
         97:e2:c3:9b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKg67Lvra+mk2oG3AuwPypLt2D60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD
MUE3RDYwMDAeFw0yNjEwMTYxNDM1NDVaFw0yNzEwMTUxNDQwNDVaMDMxMTAvBgNV
BAMTKEI1NkI3MzJFRTEyMjE2NzkyMzExNDkwM0I1Q0EwMTE0OTBFMTNCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbrAThA1gENd8TTjhjsNCrLp6
D4M1Lmd+SWdua4jV1elG9Zu5/me5tbilD0dwT2gkvVWow+Zieot6tKWhgGwcxeTZ
LvbVrH0axECBqpK5uOECV5xIIk8Q2Zz66VQpgQkCxDnH+SetMIGD5ol2Wkt8kG51
R8ituWweD3NODQtUcVmpYNA/ZuxgwlQZXOmCqR9+VU+upCbWbqge+0Hi5A66gMeN
IrrWQ7HuGQdMWdpj0+G91oQBzdFzqTS8TnRyxwQfshy7tMS8VvAwHAAG+Nd0frOk
T81I4zZmOr1P2Up83gfo55qRhV0bW3YiZMYgJYuJfOP1IKHd6AMXh0QafWjxAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUtWtzLuEiFnkjEUkDtcoBFJDhOy4wHwYDVR0j
BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5
MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG
Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND
MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD
MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzgzMDMxM2EzMTM0MzAzYTY2NjY2
NjYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzIzNDM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAEBQP/7MA0GCSqGSIb3DQEBCwUAA4IBAQCu8zZBPlfZ3s9IcQNsksK7+3Q0
7XVPLV7jg5mIOlOPamgO7B+Y1MMELO6d+ogo5NXgcr9hpxdsiJ1Xvf7HTGgtA2Yr
+cxaxz/baD9F0Bt2DVvwNvX3i67TDQmWzxoRECD10chlXl2FIMFs5lFRYBDDwSSF
aXdpSuMs+CV2ZMDakQpktzdqPkq0rHNva+PkN7OUI6r1X61GTUh/E1wZWfM3tbYI
2icAaVSULnuSKbktYdWkq8wYXcUQt2+irq+WJTxF1y3vGUr9PG4XpcUAQtpYksA4
gLSXHS/zP5Va7Q5NuC+i4MYJiGOHO+7fSrGzQHbntG2wJYeS7XZANgeX4sOb
-----END CERTIFICATE-----
Generated at Mon Nov 2 19:28:35 2026 by rpki-client