Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6130373a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6130373a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          sN0VtTNybP7LQ7ArVngRtEk4Bk3hKcru+PrbkBrYQTA=
Subject key identifier:   37:99:33:AB:1B:93:13:B5:20:52:08:DA:BB:72:BC:75:1A:77:76:7B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6EA2E93F3B980F45C313031070E4ED1C0206639B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6130373a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 12 Feb 2026 15:30:12 +0000
ROA not before:           Thu 12 Feb 2026 15:25:12 +0000
ROA not after:            Thu 11 Feb 2027 15:30:12 +0000
asID:                     18678
IP address blocks:        2800:310:a07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a2:e9:3f:3b:98:0f:45:c3:13:03:10:70:e4:ed:1c:02:06:63:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 12 15:25:12 2026 GMT
            Not After : Feb 11 15:30:12 2027 GMT
        Subject: CN=379933AB1B9313B5205208DABB72BC751A77767B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:6b:bc:b9:16:81:00:f2:b9:d7:f7:cb:96:
                    1c:6b:45:4e:b5:c5:93:0b:25:5b:05:e3:c2:fb:4c:
                    30:d1:ad:04:18:1e:4b:6e:71:6d:1a:46:86:7f:76:
                    75:0b:99:12:74:f5:3b:97:10:58:15:ad:d5:2a:d3:
                    95:43:b7:a5:07:17:af:5e:13:3a:77:8f:69:1f:0a:
                    f3:30:e8:5e:2f:58:e1:75:6c:c5:85:4b:20:c6:77:
                    95:79:dc:66:eb:3f:c4:c2:1a:68:34:1b:02:25:29:
                    4f:19:36:c8:57:fa:96:96:f9:e4:f0:18:ef:91:48:
                    a9:db:73:47:42:23:0c:29:ce:fd:3d:f5:f8:cb:94:
                    8a:40:0d:34:cd:e7:57:61:69:ee:45:7c:c6:ef:a3:
                    72:1a:9d:e3:77:03:1e:cd:d2:dc:1a:96:00:65:fc:
                    f9:f3:88:05:95:4a:61:49:e3:18:fc:55:af:e9:bd:
                    4e:aa:81:38:7d:0f:a1:a3:8f:72:5f:12:2a:44:11:
                    ee:2a:0b:a0:76:55:05:12:71:45:07:5a:57:16:e0:
                    55:4e:78:ea:68:8f:9a:95:eb:eb:45:2c:13:49:a9:
                    30:65:38:d0:b4:62:62:55:43:ec:69:80:20:82:5c:
                    3c:fa:7f:2f:38:e7:74:65:8b:6e:e8:00:ed:1b:50:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:99:33:AB:1B:93:13:B5:20:52:08:DA:BB:72:BC:75:1A:77:76:7B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6130373a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:a07::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:30:6e:7f:c5:dd:50:64:c2:ac:2b:8e:fd:3b:10:a9:c9:4b:
         9c:09:79:f0:cb:f4:81:c6:f8:78:32:f7:09:e2:02:99:2f:78:
         43:4f:d3:6b:6b:45:74:91:6e:15:8e:18:c7:b6:09:78:2f:d6:
         02:b0:3e:6d:23:1c:1b:4c:9e:2c:19:f9:b4:75:75:5e:e4:7c:
         73:12:38:c4:87:5e:bc:0e:e1:78:79:32:dd:25:fa:5e:1b:b8:
         22:7f:b4:a1:ff:d5:b4:e3:1e:4c:ac:41:d4:de:c8:f2:7f:ba:
         2e:1a:c2:2d:f8:07:69:a2:0a:c1:cd:3a:e7:76:f4:d5:3e:1b:
         29:58:c1:6d:d7:a0:a6:f8:80:82:4e:50:e3:51:f9:53:4c:70:
         a9:1f:02:ec:7b:b1:78:7f:3c:c3:ee:0e:e3:4e:93:e7:72:50:
         97:ce:3f:99:9f:63:b8:aa:03:6a:5e:9d:71:b6:46:33:8d:09:
         cf:3b:61:72:89:34:7f:e5:6f:ef:0d:f9:4a:d8:8e:b0:ad:b7:
         c3:b4:a3:8e:90:a9:7b:e6:24:a8:e1:7a:86:a4:aa:e4:f9:5e:
         54:fc:88:8c:6a:72:28:f2:b2:d4:0b:bc:a3:fa:76:e3:e8:95:
         6c:d0:77:3d:af:e3:15:d9:2a:cc:15:5f:36:56:ba:b6:38:f9:
         7e:a6:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:14 2026 by rpki-client