Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa
File:                     323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa (raw, json)
Hash identifier:          mfT3X8uj0RF4ZZMDStem+kzuezXf3W84uQA5m1p90uc=
Subject key identifier:   39:A0:46:E9:AF:E1:55:B1:5C:83:24:63:A2:3B:F0:AD:2E:AD:C9:53
Certificate issuer:       /CN=865E5586107E0C9E056624D8900338C5C1CBFCC5
Certificate serial:       69564A7EB62723603784DD07E663EEE56B42E09E
Authority key identifier: 86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa
Signing time:             Tue 13 Oct 2026 23:40:16 +0000
ROA not before:           Tue 13 Oct 2026 23:35:16 +0000
ROA not after:            Tue 12 Oct 2027 23:40:16 +0000
asID:                     273280
IP address blocks:        2001:1226:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:56:4a:7e:b6:27:23:60:37:84:dd:07:e6:63:ee:e5:6b:42:e0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865E5586107E0C9E056624D8900338C5C1CBFCC5
        Validity
            Not Before: Oct 13 23:35:16 2026 GMT
            Not After : Oct 12 23:40:16 2027 GMT
        Subject: CN=39A046E9AFE155B15C832463A23BF0AD2EADC953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:b9:56:7a:4d:2a:bb:d5:2e:f7:be:44:98:
                    c9:fd:b6:c0:52:94:82:1a:77:ce:0b:8d:62:0d:e7:
                    77:48:ff:60:23:14:84:a4:25:af:de:77:00:ff:51:
                    b8:a7:4d:6d:52:38:1c:71:b9:df:5e:f3:74:b6:57:
                    31:87:bc:b8:80:86:4c:3a:7f:6d:f4:f5:e3:12:40:
                    ec:68:b3:03:12:b6:66:77:72:a6:89:d6:da:80:52:
                    17:a7:00:f8:92:50:a1:fd:aa:7d:a3:ae:7c:0a:0c:
                    26:48:9d:f1:26:1d:e9:04:2b:a7:13:af:19:05:59:
                    5f:2a:57:8e:25:cc:a3:13:cd:ae:96:20:d4:9b:ee:
                    e5:17:9a:92:e6:98:c1:db:c7:f1:8e:e9:ec:de:6a:
                    06:c0:d8:7a:2a:15:b5:24:ee:f1:94:a4:ef:c3:56:
                    c3:b5:fe:7d:89:e2:cf:66:36:17:86:c9:47:b7:7d:
                    52:da:c1:74:24:ea:26:ff:dd:6c:f0:49:28:3e:bf:
                    b3:5c:cb:c0:8b:c3:57:a9:03:48:ff:0e:72:f4:81:
                    94:da:15:e5:7d:49:50:4b:f3:b0:89:09:ba:dd:d1:
                    f3:36:57:80:e1:77:20:70:2a:63:1a:0b:4b:32:9f:
                    64:6c:a5:58:eb:79:22:a4:65:e3:8a:03:8b:a4:75:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A0:46:E9:AF:E1:55:B1:5C:83:24:63:A2:3B:F0:AD:2E:AD:C9:53
            X509v3 Authority Key Identifier:
                keyid:86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/323030313a313232363a313030303a3a2f34302d3430203d3e20323733323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1226:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:0f:bf:85:94:15:58:4a:f7:2d:93:d1:ac:6d:85:3c:ad:b8:
         c8:65:52:43:66:18:d0:5e:c5:4a:a4:44:a8:99:a3:df:66:0e:
         6d:61:47:bf:6a:60:be:83:41:2f:77:e4:bc:dc:4b:f6:7e:b9:
         d6:ac:d5:7b:2f:f9:58:33:64:bf:ab:93:e8:e2:a5:aa:2f:60:
         9a:9c:6b:db:58:08:75:0f:69:8f:9b:c8:10:a7:df:9a:cc:4d:
         36:92:d8:31:ea:4d:21:8a:3a:6a:ea:ee:a7:b8:26:9f:65:b5:
         4c:a8:34:e5:95:a9:47:5c:8b:cc:a1:78:94:98:fb:d9:4c:d2:
         61:b3:63:c1:3e:ca:1d:2b:93:79:67:c1:92:69:bd:16:45:ad:
         0c:b2:79:46:92:d2:fc:97:ea:4d:06:15:f2:a9:d0:53:c2:0d:
         f6:a2:7a:3b:c2:1c:f3:47:a5:7f:48:07:bf:9a:3c:71:71:97:
         25:1c:09:25:54:9e:6d:f4:4c:f3:e8:a5:2a:d9:71:90:2a:f9:
         50:53:53:a8:3d:35:07:03:d3:ac:44:eb:31:ee:7c:14:40:2a:
         77:7e:59:c5:95:5d:4f:2a:e0:22:0d:3b:45:70:31:b7:1d:54:
         43:2a:51:16:ce:ad:36:99:a0:d6:54:52:a7:27:e5:fd:c1:c1:
         89:a0:04:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:56:30 2026 by rpki-client