Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa
File:                     323830363a3432343a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          0NyAjCvPV/NDvUykwQjyXIB6j90jaOeMy7tG6fF7z8c=
Subject key identifier:   93:5F:A2:D3:E0:1E:4D:A3:F0:0C:F5:4F:3B:CE:E5:45:D8:6B:25:99
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       07CB93177F7CB747CE0C2B7F54A817BBAB0E9357
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 07 Sep 2026 22:34:14 +0000
ROA not before:           Mon 07 Sep 2026 22:29:14 +0000
ROA not after:            Mon 06 Sep 2027 22:34:14 +0000
asID:                     0
IP address blocks:        2806:424::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cb:93:17:7f:7c:b7:47:ce:0c:2b:7f:54:a8:17:bb:ab:0e:93:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Sep  7 22:29:14 2026 GMT
            Not After : Sep  6 22:34:14 2027 GMT
        Subject: CN=935FA2D3E01E4DA3F00CF54F3BCEE545D86B2599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:16:06:61:b9:f7:e5:6e:78:57:93:46:ab:
                    8d:83:fc:4b:00:62:76:a6:17:a6:c5:fb:c7:cc:75:
                    03:ad:9a:ff:df:5e:45:94:12:25:30:28:84:f6:e1:
                    7d:36:5d:1f:fb:33:87:58:7b:7f:c8:3b:15:62:42:
                    0e:c2:cc:9b:3e:d5:73:7b:bf:6a:e0:a5:89:2f:e7:
                    d9:a4:23:18:59:20:ee:9d:e5:eb:18:b6:5f:dc:7c:
                    88:16:fd:57:65:fa:72:6c:b6:40:f8:a0:5e:0e:c1:
                    83:ca:6e:77:97:c6:5d:c9:65:2e:6e:14:cb:df:1b:
                    90:be:e0:63:fa:9c:45:37:52:85:35:88:09:69:16:
                    33:81:9b:0c:eb:b4:55:ae:31:2f:fd:48:22:17:12:
                    a3:6d:0e:51:82:01:01:1e:f4:bb:bb:56:dd:0d:19:
                    1d:92:ef:41:c3:d8:6c:5a:8d:be:aa:0d:e1:4d:bb:
                    37:ca:ff:a2:43:06:f7:fd:e8:e1:13:78:1b:8d:a9:
                    18:cc:3e:40:29:2b:27:df:fc:e9:43:9c:bc:26:e1:
                    6c:ef:78:43:ad:76:35:cf:8d:85:76:a4:58:9f:d4:
                    57:c4:1e:d5:0e:4e:67:0c:0b:8a:4c:b6:1d:62:dd:
                    b9:4c:9b:55:72:7f:f6:eb:54:f9:d7:b3:7d:f8:2a:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:A2:D3:E0:1E:4D:A3:F0:0C:F5:4F:3B:CE:E5:45:D8:6B:25:99
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:424::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:ac:5e:5c:ea:3b:9a:1f:1c:60:57:64:52:b8:43:86:03:
         b9:1e:5a:14:c0:16:d7:4f:58:64:e0:c3:7a:bb:86:a9:70:28:
         91:60:d1:75:e6:ff:60:84:3f:6f:8a:be:11:0b:8d:d8:78:dd:
         a5:6e:63:24:ed:9e:e6:8d:cf:89:16:50:67:03:6f:e7:0c:23:
         7a:18:b3:4e:52:ee:27:b3:e9:81:96:fc:cf:9d:13:f0:f9:7e:
         f1:4e:51:a7:99:a3:b6:3d:3f:7a:9d:b9:f1:d1:ee:4c:47:42:
         35:a3:25:bc:d2:8e:86:20:1b:f0:1b:a1:2a:e8:67:2a:03:d4:
         e5:cd:bb:ef:32:8e:f2:50:76:2a:d2:01:ed:12:1a:62:f9:4f:
         b5:ee:72:eb:33:e1:90:82:ee:e8:4a:a6:15:98:3f:bd:f3:85:
         6d:20:69:55:5c:5d:19:6f:ea:20:01:2f:b8:14:8b:c8:41:66:
         08:49:d6:2b:b7:3e:a0:c3:52:e6:fc:e7:b6:f3:1a:6f:4b:9c:
         66:4e:42:8f:5a:8b:94:52:1a:c5:42:53:1a:67:85:92:b8:59:
         7f:a5:3e:05:47:fe:04:40:b3:7c:8d:c2:fd:d4:8b:8c:4c:29:
         3e:26:87:8d:6d:ab:4c:b6:0f:ec:6b:9a:e0:97:d4:cf:3a:27:
         4b:34:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:34:04 2026 by rpki-client