Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a31303a3a2f34382d3438203d3e203138383430.roa
File:                     323830303a3863303a31303a3a2f34382d3438203d3e203138383430.roa (raw, json)
Hash identifier:          0HIC9xVNktZWcfmEp03KIvv3rPt9p2D/yl2uD+LCBZ8=
Subject key identifier:   3D:62:EF:A9:E7:0B:69:C3:5D:14:53:FA:B0:52:4E:15:81:84:A3:94
Certificate issuer:       /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial:       3D82270B95BC500A57A29BCFDDCDB36047EAA093
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a31303a3a2f34382d3438203d3e203138383430.roa
Signing time:             Thu 30 Jul 2026 22:40:00 +0000
ROA not before:           Thu 30 Jul 2026 22:35:00 +0000
ROA not after:            Thu 29 Jul 2027 22:40:00 +0000
asID:                     18840
IP address blocks:        2800:8c0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Sep 2026 20:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:82:27:0b:95:bc:50:0a:57:a2:9b:cf:dd:cd:b3:60:47:ea:a0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
        Validity
            Not Before: Jul 30 22:35:00 2026 GMT
            Not After : Jul 29 22:40:00 2027 GMT
        Subject: CN=3D62EFA9E70B69C35D1453FAB0524E158184A394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:08:4f:69:9a:db:c7:11:5b:86:c2:01:1e:
                    a2:8d:90:9a:1c:09:2c:82:ee:53:e9:f5:57:38:62:
                    a3:a6:24:0a:b0:47:60:f2:ba:cd:7c:6c:4d:71:77:
                    05:41:57:f9:9b:05:6a:2e:11:1c:c2:43:1d:87:0b:
                    4b:c7:dc:59:e5:3e:2c:34:1d:03:d9:3e:24:90:54:
                    11:d8:32:6c:6b:31:d4:a4:39:6d:40:f3:85:0b:d3:
                    29:e7:5c:0a:7b:b0:7f:5c:ab:2e:72:d9:cb:77:0b:
                    83:5e:e8:9e:e0:7b:9f:a8:83:14:09:2a:ea:62:ca:
                    c6:da:63:cb:2f:4a:e7:c5:34:32:77:cd:29:d3:45:
                    db:b4:e0:24:ac:2f:85:6d:e7:84:1f:83:76:77:9c:
                    3d:69:a4:4f:bd:d6:ec:4d:5c:3b:7e:ed:1e:df:71:
                    14:6b:91:89:9d:26:cb:c7:6e:6a:89:5a:70:1f:eb:
                    e8:d2:53:88:a5:ba:65:62:e8:1c:ce:1b:5b:79:c0:
                    c8:cd:98:ab:04:51:08:0a:c1:42:d1:24:fd:8d:6d:
                    3e:fe:5d:09:3a:d2:7e:f1:02:a0:da:7a:ab:92:1d:
                    07:5f:b8:cb:13:6b:d9:d0:a2:e3:a9:1f:ab:49:d1:
                    1f:ce:50:44:4b:9a:3d:8f:c8:fd:75:af:73:a5:2d:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:62:EF:A9:E7:0B:69:C3:5D:14:53:FA:B0:52:4E:15:81:84:A3:94
            X509v3 Authority Key Identifier:
                keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a31303a3a2f34382d3438203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8c0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:93:85:39:9b:d3:45:3a:59:a1:d6:17:17:c4:d5:e6:c4:9d:
         1f:54:c6:a4:09:3f:67:61:06:f0:37:14:95:f0:d7:2c:c4:6b:
         f8:d1:9e:4a:bd:97:9c:33:b8:b2:f5:e7:c7:3f:80:d9:a3:4e:
         19:5e:a4:11:56:c9:65:74:45:3e:b7:40:8b:a9:78:7d:83:43:
         24:a3:b7:d5:19:a7:19:74:6f:46:58:54:19:1d:9e:9a:31:a9:
         c3:74:56:6f:a2:ec:5d:19:e7:f2:6e:43:16:e9:0d:a6:eb:5b:
         da:ed:04:55:33:45:f1:95:6d:6e:a3:74:56:ed:d0:48:46:db:
         19:8f:f1:cb:e2:4b:cf:ba:d3:72:43:a2:ab:85:86:0e:eb:f3:
         5e:a2:73:95:2b:bd:70:9b:4e:82:b3:6b:1b:e4:7b:18:b1:a5:
         53:0e:3b:a0:ab:b6:b9:5b:3c:6b:a8:35:20:5c:d2:b4:24:60:
         53:b7:ea:ae:d8:b8:ef:e8:31:a6:40:0b:ac:98:76:d6:52:49:
         a3:db:9e:a5:a0:df:0e:51:ae:2f:1a:ed:88:ca:35:bc:ad:aa:
         25:5c:5f:27:85:f8:88:16:f9:28:b7:3e:3d:ce:9f:49:41:0f:
         7d:c0:4f:50:25:b5:46:eb:a8:93:ec:b8:f5:10:9b:96:ea:b3:
         e6:5e:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 15:12:58 2026 by rpki-client