Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/323830313a31373a3430303a3a2f34382d3438203d3e20323734333233.roa
File:                     323830313a31373a3430303a3a2f34382d3438203d3e20323734333233.roa (raw, json)
Hash identifier:          yS9GgVswLPVwdxT9ebXLVQ9eu8WLl2haaY0mMH51YQs=
Subject key identifier:   9A:D1:AF:C1:9A:73:CC:02:54:2C:5C:04:C2:6B:19:E0:01:2D:D6:B1
Certificate issuer:       /CN=E50F44128CB2CD3901358FFF7B554DF0089BD86E
Certificate serial:       287ACADD7966200E17668BE4BBD91799C0145CEA
Authority key identifier: E5:0F:44:12:8C:B2:CD:39:01:35:8F:FF:7B:55:4D:F0:08:9B:D8:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/323830313a31373a3430303a3a2f34382d3438203d3e20323734333233.roa
Signing time:             Fri 09 Oct 2026 17:45:00 +0000
ROA not before:           Fri 09 Oct 2026 17:40:00 +0000
ROA not after:            Fri 08 Oct 2027 17:45:00 +0000
asID:                     274323
IP address blocks:        2801:17:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7a:ca:dd:79:66:20:0e:17:66:8b:e4:bb:d9:17:99:c0:14:5c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E50F44128CB2CD3901358FFF7B554DF0089BD86E
        Validity
            Not Before: Oct  9 17:40:00 2026 GMT
            Not After : Oct  8 17:45:00 2027 GMT
        Subject: CN=9AD1AFC19A73CC02542C5C04C26B19E0012DD6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:e4:d1:a3:e6:a5:53:3d:2f:2f:7f:98:d3:
                    d7:f0:24:f3:77:cd:85:e8:7d:f4:39:16:81:ae:1c:
                    c9:7f:26:02:ce:f6:3a:93:fa:1f:88:74:58:53:d6:
                    70:50:e0:7a:3e:a7:24:a3:2b:ba:ea:c4:2f:a7:80:
                    a1:53:d6:5e:3a:f7:bb:bd:b5:c7:b3:71:04:07:44:
                    b9:c8:b7:a1:1a:c6:8a:99:a5:76:7f:f1:cc:10:96:
                    78:ab:0b:d2:1c:ab:11:9a:ae:92:80:ed:07:97:30:
                    9e:bc:12:07:07:01:2b:1a:e0:b0:1a:8b:16:a9:02:
                    4c:41:b4:4f:82:69:5d:39:d9:4f:17:7a:32:21:6c:
                    53:4c:43:e2:37:46:b4:df:20:e8:a5:c0:6f:11:e9:
                    dd:e4:23:24:13:d7:02:83:79:4c:0e:e3:e3:59:99:
                    73:87:31:05:a3:bb:c8:85:99:af:ab:9a:88:0c:89:
                    b1:2e:2f:a0:2c:ab:a1:4a:8f:5a:c4:20:c3:47:eb:
                    6b:1d:bf:f8:5f:13:10:7b:7a:8e:c0:1e:1c:db:8b:
                    a2:e3:97:56:8b:ff:fa:41:d2:42:72:7c:53:ec:27:
                    0e:2d:6b:d5:0b:e1:96:5c:5b:92:90:00:8f:82:15:
                    ee:5e:2e:02:b2:ad:51:b2:db:bc:dd:8c:ec:85:56:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D1:AF:C1:9A:73:CC:02:54:2C:5C:04:C2:6B:19:E0:01:2D:D6:B1
            X509v3 Authority Key Identifier:
                keyid:E5:0F:44:12:8C:B2:CD:39:01:35:8F:FF:7B:55:4D:F0:08:9B:D8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E50F44128CB2CD3901358FFF7B554DF0089BD86E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF569322C490E22388955F1A19109608E5D852DF4BEEA9CA48657C9667DC5D01/0/323830313a31373a3430303a3a2f34382d3438203d3e20323734333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:b0:14:a9:15:38:38:8a:06:88:fb:94:3a:4f:d9:02:3b:
         5d:bb:83:76:47:81:25:fc:42:fc:ae:19:22:66:a6:b9:e3:39:
         8d:f1:31:db:36:38:a2:eb:28:be:bf:c8:24:f4:48:56:de:b5:
         14:46:b5:8c:37:9a:7b:9f:06:ef:5c:9c:80:8c:a5:58:1c:6b:
         7b:d4:d6:f1:cb:ee:8a:bc:a9:ce:7d:e9:34:33:da:7b:41:13:
         ad:f1:91:d2:5a:f1:06:9b:32:1e:db:20:9a:91:30:64:97:de:
         f5:49:38:99:de:c5:31:29:16:70:bf:dd:31:c1:b8:5e:a1:19:
         5f:98:8a:78:82:36:d8:12:18:49:79:4d:37:92:f3:fc:6f:bf:
         33:93:fa:e4:2f:61:a4:49:03:67:3e:1a:16:ed:78:ee:c7:e1:
         bc:7c:75:ba:da:e5:2e:c6:74:3e:a1:94:f3:ea:8a:16:01:13:
         ed:50:f8:a2:32:fe:db:5a:db:bf:f4:d0:1a:ba:2f:e9:5c:fa:
         ad:85:7b:1e:fa:8e:2b:a1:8e:51:28:50:0f:14:a7:79:ee:df:
         75:f0:e0:78:b9:21:17:03:a1:56:54:9c:9b:7a:0d:1e:88:9f:
         bd:9d:df:f8:e4:b0:48:d8:2b:77:03:91:44:da:1f:f1:0e:93:
         0a:f5:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:01:37 2026 by rpki-client