Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/323830313a31613a353830303a3a2f34382d3438203d3e203634313436.roa
File:                     323830313a31613a353830303a3a2f34382d3438203d3e203634313436.roa (raw, json)
Hash identifier:          HOu6yQsIcVrfJGMzF+pnsRd1OR/evdRS6GBA+ucOyJ8=
Subject key identifier:   EB:84:CA:AC:F6:DF:B2:62:2E:BC:24:99:76:8B:D8:C6:9A:B1:E7:60
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       28F1BA4BE1870689430CFD6801323E90A2EAC04D
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/323830313a31613a353830303a3a2f34382d3438203d3e203634313436.roa
Signing time:             Thu 10 Sep 2026 14:34:52 +0000
ROA not before:           Thu 10 Sep 2026 14:29:52 +0000
ROA not after:            Thu 09 Sep 2027 14:34:52 +0000
asID:                     64146
IP address blocks:        2801:1a:5800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f1:ba:4b:e1:87:06:89:43:0c:fd:68:01:32:3e:90:a2:ea:c0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Sep 10 14:29:52 2026 GMT
            Not After : Sep  9 14:34:52 2027 GMT
        Subject: CN=EB84CAACF6DFB2622EBC2499768BD8C69AB1E760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:20:b2:5b:e9:7a:dd:d2:4f:cc:18:24:ce:
                    53:6e:0f:4c:fe:b6:b6:72:ca:88:e7:1f:64:62:5a:
                    50:e8:06:e8:e8:5a:08:05:da:9f:9c:4a:ed:3a:ab:
                    1c:c0:bd:00:04:96:97:cd:b0:11:62:6a:f5:fd:f6:
                    ac:1e:60:a0:01:65:a5:ae:01:8c:4b:4f:ea:2d:46:
                    7d:78:8a:28:51:5a:3a:61:1e:31:d3:96:c3:c4:77:
                    e9:b8:1a:99:75:ac:50:c0:c4:51:f3:f6:e7:ac:e9:
                    e7:60:8d:dd:cc:26:fd:34:64:53:ea:8e:56:5e:a3:
                    81:56:37:46:56:e6:5a:cc:36:db:fe:89:54:ee:e0:
                    50:05:48:1e:d8:b7:a2:6a:84:2d:46:31:a0:15:c8:
                    2d:0c:3b:de:2f:cf:07:fb:e6:39:de:45:65:15:a9:
                    c3:97:12:1c:af:5f:18:69:9c:96:b3:e5:f8:82:33:
                    e8:11:f7:4e:65:4b:07:7b:f1:f1:64:f1:4d:6f:f0:
                    ad:94:d9:38:9e:75:3b:4d:a4:10:3c:2f:2c:93:8e:
                    40:56:31:f0:d8:8c:f4:30:46:55:5d:2c:b1:0d:f4:
                    f8:29:f0:68:6a:e2:54:32:88:2d:f8:7f:20:d2:70:
                    d1:e7:c7:32:e2:64:ae:1b:12:5e:85:fc:34:31:30:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:CA:AC:F6:DF:B2:62:2E:BC:24:99:76:8B:D8:C6:9A:B1:E7:60
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/323830313a31613a353830303a3a2f34382d3438203d3e203634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:14:32:cb:6c:d6:78:96:7b:f2:c6:e0:5f:c2:b2:cb:5b:29:
         5e:7c:ce:eb:51:89:bf:7a:ab:fe:d3:3a:55:9f:6e:44:be:43:
         04:2f:4e:1e:2e:a4:1a:7f:3a:e3:4b:e2:61:90:ff:c0:91:13:
         e6:b9:3b:71:0e:8a:fd:a7:17:95:fd:32:2c:aa:d1:71:3e:a7:
         f8:63:f3:c0:06:12:67:b6:60:c7:d9:93:a7:6c:2f:7a:9b:11:
         80:e9:c5:a3:77:dc:00:4b:87:ef:17:ee:13:e2:af:87:97:29:
         56:fe:68:c9:30:f4:ae:cb:ed:92:7a:42:9c:63:84:2f:f2:ee:
         3e:10:07:84:0b:47:45:12:25:91:d2:60:bb:55:4b:43:40:47:
         0f:c6:a4:d0:6d:b6:70:84:eb:81:85:22:22:23:7f:9b:21:22:
         81:f0:9a:80:47:b6:6c:e8:b5:db:bc:34:dd:d6:e1:81:4d:ff:
         1e:f3:fc:a9:d6:f3:5f:01:50:9c:df:fb:a1:5f:25:7d:da:d2:
         13:8b:f9:b6:07:00:09:65:86:99:59:51:09:aa:39:4a:09:2d:
         05:b4:9a:50:e3:9a:f4:bd:b7:c7:be:93:2b:30:76:cc:2d:3e:
         63:b2:77:fd:e9:31:e1:94:d4:42:37:41:3e:f3:c5:93:68:2c:
         5f:46:81:10
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUKPG6S+GHBolDDP1oATI+kKLqwE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI2REY0Nzk3QjA3NDRENjY5MjVBOTE2NjcyMzQwNTAx
REM4RDJDQjAeFw0yNjA5MTAxNDI5NTJaFw0yNzA5MDkxNDM0NTJaMDMxMTAvBgNV
BAMTKEVCODRDQUFDRjZERkIyNjIyRUJDMjQ5OTc2OEJEOEM2OUFCMUU3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1iCyW+l63dJPzBgkzlNuD0z+
trZyyojnH2RiWlDoBujoWggF2p+cSu06qxzAvQAElpfNsBFiavX99qweYKABZaWu
AYxLT+otRn14iihRWjphHjHTlsPEd+m4Gpl1rFDAxFHz9ues6edgjd3MJv00ZFPq
jlZeo4FWN0ZW5lrMNtv+iVTu4FAFSB7Yt6JqhC1GMaAVyC0MO94vzwf75jneRWUV
qcOXEhyvXxhpnJaz5fiCM+gR905lSwd78fFk8U1v8K2U2TiedTtNpBA8LyyTjkBW
MfDYjPQwRlVdLLEN9Pgp8Ghq4lQyiC34fyDScNHnxzLiZK4bEl6F/DQxMEsDAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU64TKrPbfsmIuvCSZdovYxpqx52AwHwYDVR0j
BBgwFoAUYm30eXsHRNZpJakWZyNAUB3I0sswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNkNBQzUzNEVCRUMzNTlGQzM4QjcwNERCOTI1NDQ1MUJG
MEVDN0I4RTZGOUI0ODJFOUY1MEYxM0U3MDJFNkZDLzAvNjI2REY0Nzk3QjA3NDRE
NjY5MjVBOTE2NjcyMzQwNTAxREM4RDJDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjZERjQ3OTdCMDc0NEQ2Njky
NUE5MTY2NzIzNDA1MDFEQzhEMkNCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzZDQUM1MzRFQkVDMzU5RkMzOEI3MDREQjkyNTQ0NTFCRjBFQzdCOEU2
RjlCNDgyRTlGNTBGMTNFNzAyRTZGQy8wLzMyMzgzMDMxM2EzMTYxM2EzNTM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzQzMTM0MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAaWAAwDQYJKoZIhvcNAQELBQADggEBADcUMsts1niWe/LG4F/CsstbKV58zutR
ib96q/7TOlWfbkS+QwQvTh4upBp/OuNL4mGQ/8CRE+a5O3EOiv2nF5X9Miyq0XE+
p/hj88AGEme2YMfZk6dsL3qbEYDpxaN33ABLh+8X7hPir4eXKVb+aMkw9K7L7ZJ6
QpxjhC/y7j4QB4QLR0USJZHSYLtVS0NARw/GpNBttnCE64GFIiIjf5shIoHwmoBH
tmzotdu8NN3W4YFN/x7z/KnW818BUJzf+6FfJX3a0hOL+bYHAAllhplZUQmqOUoJ
LQW0mlDjmvS9t8e+kyswdswtPmOyd/3pMeGU1EI3QT7zxZNoLF9GgRA=
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:24:27 2026 by rpki-client