Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          HnnBguSvt+J/xFS1QJAZvmBdqwBddx5A0wCxLnloztw=
Subject key identifier:   A7:90:BE:62:11:AC:4F:6E:5F:36:F4:2A:98:69:EA:BB:C3:7C:85:5E
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       30D24E7B8E4563A1AE07094AC10AA4BF0E00CB0A
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Wed 19 Aug 2026 18:26:06 +0000
ROA not before:           Wed 19 Aug 2026 18:21:06 +0000
ROA not after:            Wed 18 Aug 2027 18:26:06 +0000
asID:                     22927
IP address blocks:        2800:a00:d480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d2:4e:7b:8e:45:63:a1:ae:07:09:4a:c1:0a:a4:bf:0e:00:cb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Aug 19 18:21:06 2026 GMT
            Not After : Aug 18 18:26:06 2027 GMT
        Subject: CN=A790BE6211AC4F6E5F36F42A9869EABBC37C855E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:39:15:b3:c8:2f:54:09:96:f7:f8:65:e1:
                    a8:ea:b9:00:dd:5b:cf:9b:9d:fa:00:e5:8e:be:28:
                    c0:9b:77:50:5f:14:3d:33:63:70:8c:fc:d7:85:a1:
                    0c:03:a3:bb:a7:ce:24:0d:9d:07:9f:3c:78:6b:13:
                    4a:72:94:27:5a:dd:cf:d5:bb:33:dc:5b:74:fb:18:
                    0b:dd:df:4b:ab:d8:89:d8:a8:01:3d:fb:4a:7b:9c:
                    a6:ce:3e:ea:98:a7:d5:ab:19:3d:c9:5b:9c:5b:af:
                    51:5e:00:f8:61:be:23:a7:3e:70:0d:79:fc:31:74:
                    ad:aa:98:48:4f:3a:15:ec:59:60:6e:cc:94:c2:42:
                    03:c0:22:53:5d:c2:d6:59:a6:75:44:de:e1:bf:c9:
                    f4:20:1a:b0:e4:98:a9:b6:c2:af:29:bb:4f:53:42:
                    e5:8c:a7:b4:eb:e9:54:dc:89:d5:69:3c:8c:11:0c:
                    86:e1:8c:08:d7:f8:55:18:87:1e:0b:a5:57:8c:1f:
                    e6:fb:56:88:77:1a:4c:52:3f:c3:80:82:a5:fe:ac:
                    11:5d:92:00:5e:13:37:2b:84:d7:3d:fa:7a:ae:5d:
                    9d:f6:20:d1:14:18:a9:3c:5d:04:03:f1:42:4c:6c:
                    7d:d4:78:cd:24:b9:a2:ce:62:e2:84:22:2f:f4:4d:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:BE:62:11:AC:4F:6E:5F:36:F4:2A:98:69:EA:BB:C3:7C:85:5E
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:d480::/41

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:b0:31:3e:1b:d5:30:07:10:52:17:53:4b:4c:54:4d:60:
         24:df:18:9c:c4:ee:f0:b5:35:2f:9c:0b:14:88:37:80:25:25:
         a7:e0:0b:39:19:52:10:34:2e:d6:27:03:75:64:3f:11:50:21:
         cd:07:22:75:e8:d4:ae:3a:8e:51:e5:70:8c:d3:95:14:db:48:
         0f:47:63:cc:42:02:66:23:f1:09:03:14:3a:4f:70:80:25:6e:
         d8:a9:c2:41:c2:47:e9:96:2c:dd:65:73:9c:96:f4:25:7b:c9:
         aa:45:48:40:7f:8a:55:88:74:67:eb:70:60:27:57:3c:76:bd:
         78:63:6d:d2:5b:b6:a9:46:51:73:34:1d:02:a0:51:48:fb:df:
         58:03:08:a7:4e:ff:2b:b3:f6:f9:2b:af:00:38:8a:f0:fb:9b:
         2f:92:29:9f:da:8e:da:ec:73:61:9d:ee:da:fb:8d:90:79:88:
         e3:65:a0:4e:b6:59:5b:69:9f:e9:ce:fa:15:c6:39:43:17:70:
         15:cc:b1:af:3d:11:f2:44:0f:e4:64:ca:55:73:0b:96:66:72:
         bc:4e:d8:2d:71:70:05:41:33:11:97:d7:01:e8:0d:30:dd:e5:
         db:c8:30:3c:87:16:b9:55:7d:80:1a:7a:6e:36:e8:3d:b0:09:
         db:77:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 16:44:43 2026 by rpki-client