Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32333a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a32333a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          RUz0hHPa0f5NYS5gIK5fi4NBm+31xw4qIE0YV4reXSk=
Subject key identifier:   62:53:E1:F7:34:AE:B0:EF:73:A9:85:8D:4C:FD:97:FF:E2:B2:DD:EC
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       0C97096CB75418D3B94A306AE7AD347C90E2A122
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32333a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:08 +0000
ROA not before:           Fri 30 Jan 2026 06:36:08 +0000
ROA not after:            Fri 29 Jan 2027 06:41:08 +0000
asID:                     262191
IP address blocks:        2800:b70:23::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:09:6c:b7:54:18:d3:b9:4a:30:6a:e7:ad:34:7c:90:e2:a1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:08 2026 GMT
            Not After : Jan 29 06:41:08 2027 GMT
        Subject: CN=6253E1F734AEB0EF73A9858D4CFD97FFE2B2DDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:85:03:b3:81:dc:01:b6:7d:43:fd:44:ab:
                    ff:8e:da:50:a6:0b:00:30:48:ba:6b:5c:d5:f6:ac:
                    67:49:40:4c:d6:14:fa:f1:26:94:51:1a:8d:31:49:
                    40:ed:48:a6:6a:07:68:36:d4:9e:01:0a:55:2d:39:
                    e5:65:d5:e5:d7:a1:14:10:f1:13:f6:83:88:a4:a1:
                    33:59:63:e1:f3:87:c5:8a:41:ce:40:f7:61:83:34:
                    41:3d:54:e3:85:d9:db:4c:3b:a9:62:c1:7d:8f:ad:
                    e8:63:00:68:13:3b:6a:d1:6a:07:0d:db:bb:a0:e0:
                    4f:de:42:00:71:8d:ef:a4:cb:6a:84:25:58:2e:2d:
                    51:7e:85:7b:3c:4e:ba:f4:46:1a:46:94:d9:cb:20:
                    41:4a:ba:48:38:0d:8c:3c:ed:fa:34:22:5c:e6:44:
                    24:67:31:2d:e0:ff:db:7a:3d:6c:6c:c3:31:92:a2:
                    86:69:ee:1f:68:71:aa:79:92:19:16:7a:cc:a0:e8:
                    9a:b3:0e:6d:ee:2a:25:43:7a:45:67:cd:41:d2:f7:
                    f6:27:c4:f5:a5:ec:a4:ba:2b:cf:5c:62:99:98:b7:
                    1a:61:0b:60:f0:36:7d:b2:32:b1:a8:e9:3c:cc:9f:
                    6b:ce:60:c3:d0:34:07:1d:d1:cb:2c:c6:29:bf:42:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:53:E1:F7:34:AE:B0:EF:73:A9:85:8D:4C:FD:97:FF:E2:B2:DD:EC
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32333a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:23::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:0c:e7:be:3f:74:9f:41:d9:63:34:21:f2:4d:21:df:83:21:
         b6:4b:ef:6f:ef:0e:fb:e5:e9:b8:db:7a:1b:41:1d:f2:33:7e:
         6b:e5:27:ac:b4:59:96:17:38:52:f0:71:79:58:d5:8d:2d:39:
         ed:30:77:d7:2f:95:f2:b1:25:d5:55:ad:e9:79:99:c5:5d:60:
         a4:2c:38:44:3f:be:6d:19:cf:4e:87:5c:a6:e6:fa:9b:67:71:
         82:2f:77:00:6d:5b:d4:ef:de:c3:57:fc:da:c4:d5:b2:65:5d:
         5b:a6:61:7e:45:8b:eb:52:a5:51:f7:04:a1:02:f6:3f:79:90:
         47:a9:f3:81:ad:b5:e4:67:f7:d5:ef:90:3c:a6:b3:ab:74:e3:
         30:ea:08:27:25:b7:7d:8c:2c:86:6a:64:0f:11:e8:4b:e2:8b:
         5e:07:25:31:8a:db:08:1d:64:5d:61:2c:34:cc:5b:d3:62:c6:
         ab:71:0e:09:a0:f3:c9:72:ab:5c:9f:46:7f:a4:b7:9f:4f:16:
         5d:97:f9:d4:63:fb:8e:10:59:00:6a:72:e5:2d:8a:4d:a4:4e:
         cf:a4:97:d7:a4:eb:05:50:7d:ee:2c:3a:32:37:6c:ed:21:85:
         40:de:b6:75:94:27:07:01:e1:b3:55:c1:f7:2d:6b:da:b4:a9:
         f8:d3:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:22:05 2026 by rpki-client