Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/323830313a31373a3430303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31373a3430303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          TnrLfm8bWUzush5kqBLaR8Z3i9+GlVW6s76s7YupnWg=
Subject key identifier:   1C:1E:A5:C0:A9:4C:70:97:26:78:16:31:D4:DA:FD:9D:4B:57:42:2E
Certificate issuer:       /CN=E50F44128CB2CD3901358FFF7B554DF0089BD86E
Certificate serial:       7E6FC484C52A1DF0DFE883256A3EBB704C4619DF
Authority key identifier: E5:0F:44:12:8C:B2:CD:39:01:35:8F:FF:7B:55:4D:F0:08:9B:D8:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/323830313a31373a3430303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Fri 09 Oct 2026 17:45:00 +0000
ROA not before:           Fri 09 Oct 2026 17:40:00 +0000
ROA not after:            Fri 08 Oct 2027 17:45:00 +0000
asID:                     14080
IP address blocks:        2801:17:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6f:c4:84:c5:2a:1d:f0:df:e8:83:25:6a:3e:bb:70:4c:46:19:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E50F44128CB2CD3901358FFF7B554DF0089BD86E
        Validity
            Not Before: Oct  9 17:40:00 2026 GMT
            Not After : Oct  8 17:45:00 2027 GMT
        Subject: CN=1C1EA5C0A94C709726781631D4DAFD9D4B57422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:89:11:ff:b8:fe:e2:79:16:57:dc:8b:b4:
                    33:3c:3c:c0:db:98:c6:a1:e7:c3:55:9e:a7:90:d1:
                    7f:51:1b:85:2b:45:96:e8:7f:38:65:de:a7:44:11:
                    22:a3:da:13:f7:a2:0c:e0:f7:ce:c2:79:ec:bb:f3:
                    24:b5:40:e7:19:21:8f:eb:f2:d5:1f:33:7f:c2:af:
                    5c:6d:3b:91:d9:64:a1:7c:80:ed:04:91:e8:70:63:
                    7d:4b:4f:29:69:63:b9:36:ee:db:51:e7:32:bf:f0:
                    e1:0c:69:f9:39:11:f6:11:1b:79:0d:fc:ea:3e:61:
                    9c:54:a2:64:de:fe:e9:cb:6e:44:2d:4c:6a:f1:cb:
                    32:63:8d:a0:57:f4:9e:e0:c1:11:12:2a:1e:2d:02:
                    ff:cc:39:15:1b:1c:b2:cf:a6:b8:ee:28:a0:7f:65:
                    df:08:68:1f:23:ce:47:ea:7f:d8:f4:5d:e3:f3:c5:
                    c0:a6:1b:a0:ed:67:b1:ec:c8:3f:fe:fe:ca:3a:62:
                    02:4a:78:ff:ae:24:55:5c:ad:37:38:9a:f8:ae:67:
                    6a:e8:a5:0a:f5:9c:10:5c:f0:f8:72:af:79:b3:7d:
                    44:88:e0:af:29:17:05:f0:12:d2:d2:3b:60:f2:7d:
                    99:05:8c:f7:ae:37:ae:ed:b1:68:63:d1:2e:00:2a:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1E:A5:C0:A9:4C:70:97:26:78:16:31:D4:DA:FD:9D:4B:57:42:2E
            X509v3 Authority Key Identifier:
                keyid:E5:0F:44:12:8C:B2:CD:39:01:35:8F:FF:7B:55:4D:F0:08:9B:D8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/323830313a31373a3430303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:10:be:6c:77:44:c8:bd:e0:f3:6f:ec:68:c1:27:0e:9e:51:
         37:17:bf:c9:fb:ff:21:22:33:40:c1:66:c4:99:d9:58:e9:68:
         9b:f3:5a:db:69:ca:7c:d9:fd:83:e3:eb:4b:e4:0f:4a:1f:a0:
         55:75:d2:db:52:38:30:c1:39:4b:ff:81:b5:78:7d:70:63:69:
         d9:27:fe:9b:dc:fe:36:71:93:94:87:73:b0:a9:64:3b:a9:48:
         6f:33:0a:2a:69:ce:da:57:b9:05:2c:ec:56:c9:20:7f:54:9f:
         2e:92:cf:73:3e:93:45:55:d0:f0:9c:33:dc:97:99:e0:f7:5e:
         2b:f6:9f:05:30:c1:0d:2d:51:7c:17:11:ed:08:01:6d:7c:37:
         b4:95:4d:de:43:18:bd:9f:3b:d6:3c:fd:0c:de:8a:b9:33:9d:
         dd:a0:43:8c:97:c3:95:e9:f1:0c:e5:09:35:bf:cf:c5:8f:d5:
         c8:07:35:7d:b9:40:71:1a:23:93:c9:98:dd:a3:59:0c:f2:35:
         c6:bc:24:05:41:42:b0:a2:23:c1:30:bf:7a:40:53:0b:b5:7b:
         ae:0b:ea:f4:d3:f6:35:38:02:a5:4d:89:03:bd:de:96:7d:e0:
         98:dc:bf:de:ab:41:75:67:19:99:ae:07:2d:8a:56:25:fa:7a:
         85:3f:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:09:38 2026 by rpki-client