Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa
File:                     323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa (raw, json)
Hash identifier:          cg9WECqaj5T3eVgCpLGEenonMgNV4tCSewWGX++bO68=
Subject key identifier:   59:4F:45:7D:CB:2F:E1:88:A5:5D:E6:83:4A:49:0D:90:E8:60:4A:61
Certificate issuer:       /CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
Certificate serial:       6E0450E7FDEA359CA16FD6139A9B5FB907335D1D
Authority key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa
Signing time:             Thu 01 Oct 2026 03:37:37 +0000
ROA not before:           Thu 01 Oct 2026 03:32:37 +0000
ROA not after:            Thu 30 Sep 2027 03:37:37 +0000
asID:                     273242
IP address blocks:        2801:19:7800::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:04:50:e7:fd:ea:35:9c:a1:6f:d6:13:9a:9b:5f:b9:07:33:5d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
        Validity
            Not Before: Oct  1 03:32:37 2026 GMT
            Not After : Sep 30 03:37:37 2027 GMT
        Subject: CN=594F457DCB2FE188A55DE6834A490D90E8604A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:6d:76:37:80:7f:fc:d6:80:9c:39:fd:39:
                    00:ae:25:02:28:09:95:ca:d8:5c:6e:06:16:44:45:
                    c5:1b:09:19:66:1e:d1:0e:57:fc:e4:16:2e:7e:77:
                    8c:05:0e:04:e2:0c:52:bd:8f:1c:fd:cf:1f:b4:ac:
                    50:fc:90:d0:57:eb:e1:d3:5c:c5:46:b6:06:92:00:
                    97:80:49:62:de:30:64:34:70:2b:bf:f1:c4:51:e8:
                    7b:9b:82:11:ec:7d:ed:ec:6a:2e:18:05:bf:5d:cc:
                    6f:80:c1:4b:27:4a:14:4d:f5:c5:3d:ff:71:15:fc:
                    ec:23:7a:09:eb:51:05:e8:ce:2c:e2:69:13:46:46:
                    10:43:bd:7b:f7:e0:18:27:6d:f7:9b:2d:b6:35:69:
                    85:85:9a:83:fe:9a:4f:fa:18:a4:1e:6f:95:0a:b7:
                    e8:43:a6:88:d0:1a:af:60:02:23:0f:9e:19:21:e4:
                    73:2d:ac:35:e8:85:49:10:0f:2b:75:04:8d:4f:0e:
                    2d:59:4b:86:e5:ba:15:3f:48:61:1d:a5:23:28:f0:
                    7a:2b:e3:1c:fb:dc:4b:bf:2c:48:26:65:61:3c:6d:
                    05:c8:6f:51:da:ea:7b:f0:77:01:93:85:3e:16:51:
                    44:7c:c0:2b:a0:d6:7e:38:28:f4:24:de:1e:2a:5d:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4F:45:7D:CB:2F:E1:88:A5:5D:E6:83:4A:49:0D:90:E8:60:4A:61
            X509v3 Authority Key Identifier:
                keyid:06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34342d3438203d3e20323733323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:7800::/44

    Signature Algorithm: sha256WithRSAEncryption
         ee:49:1d:13:fb:8c:7e:aa:b0:93:01:e4:86:45:75:ef:68:14:
         69:ac:9e:4e:9d:94:d4:a2:5a:c6:e3:9d:07:31:94:ee:db:1b:
         a3:ea:7e:ff:17:b6:33:83:49:81:05:30:0a:43:2c:30:d8:8a:
         e0:5d:41:17:24:3b:1c:1b:ad:03:48:41:cc:aa:62:71:65:3c:
         48:71:ff:3b:f7:a6:df:8c:86:89:d9:f4:8e:2b:69:5b:46:2f:
         a4:9d:fb:4e:45:22:c7:2d:3f:c8:ec:7f:76:ae:5c:92:a1:e7:
         21:88:5c:5f:5f:f7:2e:dd:f1:71:4e:be:dd:fd:59:67:96:56:
         88:7c:ff:69:72:2b:4f:ca:1a:7d:e7:d8:d5:24:91:b5:9c:d1:
         95:67:2d:1d:b3:2b:f3:f7:85:52:15:fa:41:d5:eb:37:76:15:
         5c:a2:49:40:1f:8c:5b:c7:db:9f:5e:40:fd:aa:51:04:b3:41:
         66:86:2f:d0:29:4d:a0:5d:e5:3d:da:52:a5:0e:a7:6a:6a:0b:
         38:5c:c7:5b:ce:cb:35:6b:a2:b7:c9:a0:e4:2c:c4:bf:75:c6:
         2f:a5:02:40:9b:d5:1a:3e:56:39:a9:3d:91:13:13:30:03:9b:
         aa:90:20:0d:b5:d4:b6:e2:7f:53:47:b8:cb:3e:05:ee:02:31:
         02:1f:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:26:19 2026 by rpki-client