Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/323830313a31373a383030303a3a2f34382d3438203d3e203532343730.roa
File:                     323830313a31373a383030303a3a2f34382d3438203d3e203532343730.roa (raw, json)
Hash identifier:          mwEiuyMYMfLH8tuEBoaDAkBpFf9kplpva2mKsnbKQns=
Subject key identifier:   41:71:0C:23:5E:54:5E:5A:3B:4C:34:5F:53:5D:D0:0E:62:2C:D9:F5
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       7F8E52EBC89B1641259277E8C725126C71E2E831
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/323830313a31373a383030303a3a2f34382d3438203d3e203532343730.roa
Signing time:             Tue 29 Sep 2026 18:37:20 +0000
ROA not before:           Tue 29 Sep 2026 18:32:20 +0000
ROA not after:            Tue 28 Sep 2027 18:37:20 +0000
asID:                     52470
IP address blocks:        2801:17:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 00:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8e:52:eb:c8:9b:16:41:25:92:77:e8:c7:25:12:6c:71:e2:e8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Sep 29 18:32:20 2026 GMT
            Not After : Sep 28 18:37:20 2027 GMT
        Subject: CN=41710C235E545E5A3B4C345F535DD00E622CD9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:5f:6a:37:60:a7:80:87:67:4c:c7:07:44:
                    0a:b8:8f:34:8a:25:12:25:26:7b:2c:ff:d7:34:bb:
                    25:43:ba:13:01:58:dc:4a:05:a5:7e:5d:f0:4e:b5:
                    13:f0:91:95:be:a3:ef:68:fc:60:e2:5d:61:c3:8e:
                    3c:b9:9d:00:9d:b4:96:8a:55:48:12:01:e0:36:49:
                    7e:fb:a8:d4:b6:c7:6a:ec:e4:f0:99:72:2d:62:e9:
                    4a:15:6f:fe:9e:83:56:3c:69:4b:90:0d:77:f7:a1:
                    d2:c6:06:d4:50:cc:3c:5f:7a:7e:18:75:a7:3b:27:
                    11:e1:69:d3:d6:55:89:18:b7:96:af:5f:53:be:13:
                    5c:ba:f7:21:c4:49:39:df:3c:ed:7a:bc:76:87:90:
                    f4:a2:19:6e:bc:28:49:9a:a2:c0:dd:4a:de:48:73:
                    28:32:20:63:ac:d6:1d:a0:7d:09:63:c7:9f:95:b5:
                    4b:56:7e:39:37:25:09:08:0c:a6:d1:19:78:48:70:
                    3e:75:bf:03:5f:d1:23:37:8d:cb:ea:7a:88:64:92:
                    e9:14:7c:dd:41:9d:95:eb:b2:a3:81:19:34:eb:13:
                    e7:d3:8e:07:41:a7:67:42:24:89:1f:eb:25:d0:0d:
                    1a:de:33:d1:a6:a2:da:fc:0a:57:fc:1a:4c:9a:bf:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:71:0C:23:5E:54:5E:5A:3B:4C:34:5F:53:5D:D0:0E:62:2C:D9:F5
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/323830313a31373a383030303a3a2f34382d3438203d3e203532343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:70:40:9d:fe:6d:7e:a8:7e:94:99:e0:0e:4b:bd:d0:fb:
         7f:56:ff:07:94:dd:b9:d1:d5:1e:68:fd:9d:84:a3:12:9b:b9:
         bb:e2:26:86:22:6d:2e:e0:9c:27:db:ef:4f:1f:f9:02:97:58:
         5c:00:c4:10:e7:74:6f:64:9c:b7:03:da:e4:dd:b2:7b:f2:d0:
         08:6e:e2:9f:a4:2f:f3:76:f3:e7:89:15:01:15:ff:3a:56:1d:
         9a:c6:b4:d3:25:97:a6:e1:c2:37:66:46:67:5c:fd:01:31:4c:
         ed:2c:98:02:f5:e8:e3:04:ab:c7:7b:a5:c8:77:02:82:fb:69:
         41:b5:56:6c:32:0b:55:74:72:14:88:f0:54:6a:4d:c4:a6:18:
         b9:15:0a:46:5d:10:59:7f:f2:36:80:e2:ba:9d:bf:8b:fc:2c:
         ef:e0:0c:5f:df:28:ea:b0:90:5e:ad:7e:86:9c:be:dc:5d:36:
         90:5b:70:92:09:63:32:fa:85:d9:d9:83:c0:b9:a9:cd:f1:31:
         a8:6d:a6:c5:c2:87:4c:ab:b1:4e:c9:08:d4:19:1a:9a:ed:8d:
         a4:1b:17:fc:f3:0b:2f:f9:f8:a9:eb:cf:4d:ea:db:cb:55:87:
         9f:2f:1c:1a:12:ae:49:7e:dc:ff:b8:f6:d0:cc:5e:b6:27:eb:
         82:13:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:59:32 2026 by rpki-client