Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          bYlYADLX4HzwDhVmS0zKNuq6QvQPnQ8MpqsxKa0YAsw=
Subject key identifier:   0C:0A:99:19:08:EB:91:49:D5:43:66:33:67:59:26:73:EB:8D:EB:07
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       429247201D1F40FABD901C4C05E682CB07E3FDFC
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:18 +0000
ROA not before:           Fri 30 Jan 2026 06:36:18 +0000
ROA not after:            Fri 29 Jan 2027 06:41:18 +0000
asID:                     262191
IP address blocks:        2800:b70:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:92:47:20:1d:1f:40:fa:bd:90:1c:4c:05:e6:82:cb:07:e3:fd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:18 2026 GMT
            Not After : Jan 29 06:41:18 2027 GMT
        Subject: CN=0C0A991908EB9149D543663367592673EB8DEB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:b7:3b:66:5e:66:3e:41:6a:87:b5:c6:cc:
                    ef:fe:d2:03:3b:0e:69:1f:d1:8a:9e:37:d8:47:48:
                    83:ea:4a:8f:35:3c:ea:ad:7c:17:94:69:0a:5b:8d:
                    56:7b:e5:c9:01:77:3e:10:8b:26:9e:39:5c:96:fb:
                    8d:d1:ac:14:7c:9e:8d:b0:28:21:a2:27:57:14:4e:
                    c2:e8:f9:2b:1e:e0:c7:cf:3e:17:0c:a0:44:ef:46:
                    59:e0:d9:1d:a9:18:57:9a:cc:4d:5f:ff:bf:70:c6:
                    60:d3:ce:2a:e8:80:2a:50:e3:7c:1e:08:a1:dd:87:
                    cd:cd:fb:7d:73:9a:ce:a4:bd:d7:78:11:6c:74:03:
                    fe:2b:1b:68:f5:32:ab:cf:61:99:4f:05:44:7f:78:
                    1c:77:c9:61:91:64:d4:01:92:a0:4c:6c:0c:b0:8b:
                    98:59:12:dd:c9:b1:5e:62:99:70:34:7e:73:a0:3d:
                    04:41:72:c4:2f:ea:c7:a8:fb:d1:6a:58:18:8a:8e:
                    07:1d:5a:4f:96:c7:d9:e2:28:4c:e8:75:29:80:25:
                    b9:56:56:b8:a4:61:17:0a:19:2d:ab:57:78:ed:22:
                    d2:00:ea:13:1d:58:5f:46:be:3e:1c:76:9b:dd:d2:
                    69:f2:d7:43:07:31:71:86:f0:70:26:05:a4:25:dd:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0A:99:19:08:EB:91:49:D5:43:66:33:67:59:26:73:EB:8D:EB:07
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:0a:77:37:44:3f:83:02:12:73:69:cd:1e:90:1e:ca:a0:
         21:ee:e3:78:03:d8:b2:e8:48:45:af:f9:36:1d:e3:0a:5b:f0:
         b2:79:f3:2f:96:9d:1d:53:5e:bf:3c:22:30:02:09:5f:70:ea:
         47:6e:ae:b2:a0:12:25:2d:8c:09:49:ca:3c:a1:d6:22:5f:51:
         9f:ac:34:14:a6:33:91:13:d0:93:0a:61:27:4d:74:b3:eb:d0:
         6e:c2:06:7f:97:bf:5b:2a:6a:34:7b:4d:49:46:96:bb:94:a6:
         f1:3b:ae:4d:f1:33:2c:35:51:e6:75:f3:8b:b4:17:fd:cd:a3:
         16:fb:63:a6:f1:d8:63:00:1a:24:82:b7:7b:43:c4:e3:6b:5b:
         30:e7:ba:84:4b:66:0a:54:86:5f:da:73:57:cc:34:bd:d6:56:
         97:91:50:74:a7:4b:06:34:a1:1e:f8:2a:0f:e1:27:ad:e9:f1:
         8b:cc:a8:56:b2:42:ff:9e:5d:1c:68:13:c3:ba:ba:b7:bf:40:
         90:59:25:e8:31:cc:82:b1:2e:5c:84:dd:66:f8:16:9c:25:f4:
         ac:b3:dd:b2:b4:4d:37:a1:2c:05:a6:7e:40:b2:ea:f8:20:78:
         0f:c9:a5:92:bc:37:61:74:d1:af:44:65:41:ad:41:ba:5b:44:
         7a:ac:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:21:43 2026 by rpki-client