Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/323830313a63343a35303a3a2f34382d3438203d3e203238353139.roa
File:                     323830313a63343a35303a3a2f34382d3438203d3e203238353139.roa (raw, json)
Hash identifier:          81X+TLH6YWCADhlXFZmIhMDRrdbmsAYdBJ+DKr0SdsI=
Subject key identifier:   85:41:BF:25:49:FC:22:C4:68:FA:58:BA:57:79:2B:71:CA:AD:C8:E4
Certificate issuer:       /CN=BA37BA6B417CEF8AD4663D8734D77A748FE64112
Certificate serial:       70D3C97AF91718970E906FA697E6C9868E9205C4
Authority key identifier: BA:37:BA:6B:41:7C:EF:8A:D4:66:3D:87:34:D7:7A:74:8F:E6:41:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/323830313a63343a35303a3a2f34382d3438203d3e203238353139.roa
Signing time:             Thu 03 Sep 2026 22:30:00 +0000
ROA not before:           Thu 03 Sep 2026 22:25:00 +0000
ROA not after:            Thu 02 Sep 2027 22:30:00 +0000
asID:                     28519
IP address blocks:        2801:c4:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 23:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d3:c9:7a:f9:17:18:97:0e:90:6f:a6:97:e6:c9:86:8e:92:05:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA37BA6B417CEF8AD4663D8734D77A748FE64112
        Validity
            Not Before: Sep  3 22:25:00 2026 GMT
            Not After : Sep  2 22:30:00 2027 GMT
        Subject: CN=8541BF2549FC22C468FA58BA57792B71CAADC8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:8c:a2:54:1d:ad:c6:4d:44:fc:4c:8c:95:
                    84:b3:ac:d2:c3:9e:45:e4:76:8a:30:67:85:e9:28:
                    0a:48:bc:c4:3e:f3:f0:fc:35:60:80:72:a7:3b:df:
                    43:66:d4:ce:14:cb:e3:87:0e:30:25:72:b9:8d:4f:
                    d5:0f:e4:18:c8:a4:bf:58:be:bb:c6:ca:a1:1f:11:
                    90:71:25:b5:16:7d:82:8d:bb:d4:66:41:15:11:8e:
                    88:b1:d3:c1:c2:6e:65:10:08:58:1f:75:01:f1:08:
                    8d:19:d8:78:6e:7b:d9:49:7d:80:ed:07:45:af:5b:
                    d5:92:a7:16:b4:c8:40:b4:22:18:0d:c4:f9:74:c0:
                    1a:9b:ca:5f:d8:1d:72:b4:c5:3d:4e:96:a2:29:35:
                    d2:d3:fd:8c:5f:51:b0:ec:1b:04:f6:83:59:ac:57:
                    fb:70:d2:ee:43:78:39:37:5c:56:c1:c5:8f:f5:32:
                    c2:52:be:2c:6f:8a:c6:a6:e9:22:d3:d0:96:e6:cc:
                    92:e4:28:f3:b2:b2:11:7d:9f:f1:75:83:b3:e1:b8:
                    7a:5f:c3:c5:41:81:80:b5:95:3a:2c:6d:c0:89:66:
                    28:68:17:42:f9:7f:8d:93:65:5d:6c:43:f5:74:59:
                    01:b8:53:e3:c5:0a:02:c8:d0:31:c9:0e:c3:97:23:
                    7d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:41:BF:25:49:FC:22:C4:68:FA:58:BA:57:79:2B:71:CA:AD:C8:E4
            X509v3 Authority Key Identifier:
                keyid:BA:37:BA:6B:41:7C:EF:8A:D4:66:3D:87:34:D7:7A:74:8F:E6:41:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/323830313a63343a35303a3a2f34382d3438203d3e203238353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:df:16:f2:fa:d9:0b:2c:71:1f:8f:e0:3d:2a:6b:f7:d9:3e:
         b6:28:d5:8f:70:79:43:0b:a0:2c:b0:37:80:bb:90:65:62:6d:
         1d:d9:06:55:b8:a8:54:06:35:14:5b:fe:4c:7b:48:dd:52:2e:
         56:0d:83:ce:ce:9e:2b:a6:f4:1c:db:2a:a6:eb:8e:c4:27:9d:
         91:c7:a6:a9:d1:f8:df:25:ef:f4:ec:2a:bc:d6:4c:1b:3c:1c:
         6d:d8:10:5d:4f:d4:e7:1b:3b:aa:1e:51:5a:7a:f5:f2:22:18:
         69:9f:a9:f6:58:ef:13:7c:a6:12:29:ed:7e:82:f0:a8:16:34:
         f9:98:ca:b3:ea:3e:43:dc:fe:44:55:be:62:85:9b:c3:37:54:
         f6:d4:a6:c1:d7:ab:f4:1e:42:57:fe:6b:20:94:10:c7:30:c1:
         49:4d:2e:de:80:65:ce:5e:06:61:81:e6:db:6f:45:e4:7d:08:
         02:b6:e6:d9:03:39:d9:73:95:bf:f6:59:69:76:c3:8d:55:66:
         fa:5e:d9:95:f2:ac:20:a7:f3:a7:56:a8:51:2f:d6:7a:96:00:
         17:5c:4d:a7:f8:a2:fe:bc:f8:8d:c0:ce:e2:f2:26:35:0c:bb:
         f1:52:ea:20:c0:16:9e:f0:88:12:0c:03:8f:aa:4f:06:ec:b0:
         e0:1b:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:00:45 2026 by rpki-client