Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/323830313a31373a363830303a3a2f34382d3438203d3e203532343638.roa
File:                     323830313a31373a363830303a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          L340vbYh/NHFlJokEMICSSLVXK1vc8VezjReKT0/yic=
Subject key identifier:   16:C7:C8:67:B0:B9:29:0A:9D:B3:57:BF:7D:CB:13:10:3B:79:86:5F
Certificate issuer:       /CN=FE7A38E6D406AA24FBCCFA786168EADEB1058CFD
Certificate serial:       72C51BCC1803936DA6C526389EE1ED0BFC54BB3A
Authority key identifier: FE:7A:38:E6:D4:06:AA:24:FB:CC:FA:78:61:68:EA:DE:B1:05:8C:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/323830313a31373a363830303a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 26 Aug 2026 16:35:00 +0000
ROA not before:           Wed 26 Aug 2026 16:30:00 +0000
ROA not after:            Wed 25 Aug 2027 16:35:00 +0000
asID:                     52468
IP address blocks:        2801:17:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:1b:cc:18:03:93:6d:a6:c5:26:38:9e:e1:ed:0b:fc:54:bb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE7A38E6D406AA24FBCCFA786168EADEB1058CFD
        Validity
            Not Before: Aug 26 16:30:00 2026 GMT
            Not After : Aug 25 16:35:00 2027 GMT
        Subject: CN=16C7C867B0B9290A9DB357BF7DCB13103B79865F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:b4:83:73:f5:1b:21:1d:78:d8:e3:22:5e:
                    96:c5:d2:59:40:9f:e7:9f:50:9d:db:5b:0d:ec:08:
                    5d:26:67:a0:0e:23:1b:4a:4e:58:45:dd:8a:b0:24:
                    1b:71:9a:53:fa:aa:bd:c1:1d:1b:32:2e:4f:f2:09:
                    6e:d1:b7:89:40:49:1d:d0:02:ed:f8:4c:d5:a3:a2:
                    45:7b:2c:fb:f2:f3:ef:f9:94:3d:1f:3d:95:07:b4:
                    3d:bd:f5:bd:8b:90:60:3d:72:4d:e1:74:7d:b8:4e:
                    3f:6b:b5:73:50:56:f3:c8:a9:09:c9:41:72:ab:e7:
                    29:1d:da:12:04:25:e4:45:1c:fc:4e:ff:ac:75:30:
                    91:6d:79:e8:50:fc:12:9a:87:52:c1:e9:44:c6:7f:
                    52:0f:d1:29:7a:7b:56:4e:d9:2a:7f:ad:f1:0c:c6:
                    46:89:93:0e:f1:89:c9:84:ee:eb:e5:00:0b:df:37:
                    1d:b0:19:d6:c4:24:7f:72:52:0d:2a:e3:a4:d0:4b:
                    1c:38:54:a9:c9:53:9a:dd:85:ad:41:eb:89:9d:fe:
                    be:5a:05:b1:38:14:dd:c7:2c:78:81:f9:6c:61:85:
                    4a:2d:61:04:7f:cd:db:02:e0:82:c0:65:3b:91:c7:
                    30:db:b0:ff:dc:7c:6d:4b:84:6a:0f:e3:91:5a:82:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:C8:67:B0:B9:29:0A:9D:B3:57:BF:7D:CB:13:10:3B:79:86:5F
            X509v3 Authority Key Identifier:
                keyid:FE:7A:38:E6:D4:06:AA:24:FB:CC:FA:78:61:68:EA:DE:B1:05:8C:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE7A38E6D406AA24FBCCFA786168EADEB1058CFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D53EC35509C3E6697992A6F7B1B13F0F9226189FA4377EBFAB0738A8EE8F08/0/323830313a31373a363830303a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:69:6c:7b:0f:b3:57:d2:b8:2c:29:82:ec:c7:7a:78:fa:4b:
         59:c2:51:c0:2b:79:88:6e:59:95:31:8c:0f:af:4b:7f:23:66:
         7f:ea:05:5a:04:cb:8e:be:a9:61:a2:52:7a:70:61:f3:b9:23:
         83:ef:d3:f9:38:5d:d4:62:24:4f:e1:d8:39:a8:d1:ed:fa:b4:
         e2:66:77:eb:65:43:83:bd:44:cd:57:30:29:46:ae:ec:39:c5:
         f2:0c:5e:09:c7:28:59:7f:88:3f:30:b4:d3:9c:f9:7d:26:57:
         92:5f:81:f1:12:d3:b7:2d:0d:bd:62:78:d9:f4:94:92:fb:ef:
         6b:33:5a:d1:78:84:14:97:b4:63:b9:16:16:58:43:af:40:b7:
         73:ac:cd:2c:e1:b6:60:bc:38:48:0f:78:a2:93:2f:c9:3c:71:
         2b:76:99:ab:fe:86:61:b5:95:b6:8f:4d:d3:9c:8d:30:50:68:
         fc:77:3f:54:91:3c:87:79:fc:0b:2f:9b:42:3c:f0:f3:12:30:
         b2:88:26:b2:d7:f2:09:b4:58:f5:91:7f:7b:1c:05:f4:cc:3d:
         98:10:25:1c:5f:c7:b9:26:6d:bd:f8:64:fc:e2:b5:ae:5f:56:
         f0:a2:1a:0f:f3:40:86:73:88:17:f3:d0:8c:c2:90:34:c9:74:
         e2:9a:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:50:37 2026 by rpki-client