Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430323a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a6430323a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          4n8Vjtb1LN9iMOetg5Vchh/86mCkQ7Df69ybGliRDiA=
Subject key identifier:   9B:E9:CC:02:19:ED:A4:FA:68:B2:61:4C:E6:BB:2E:B0:77:93:BB:20
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6B4F118E8E10267C9A14234E958367D9ACC0F324
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430323a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 12 Feb 2026 15:30:12 +0000
ROA not before:           Thu 12 Feb 2026 15:25:12 +0000
ROA not after:            Thu 11 Feb 2027 15:30:12 +0000
asID:                     18678
IP address blocks:        2800:310:d02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4f:11:8e:8e:10:26:7c:9a:14:23:4e:95:83:67:d9:ac:c0:f3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 12 15:25:12 2026 GMT
            Not After : Feb 11 15:30:12 2027 GMT
        Subject: CN=9BE9CC0219EDA4FA68B2614CE6BB2EB07793BB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:42:0d:5b:ec:97:6e:3d:b7:1f:48:31:54:
                    b3:80:29:51:52:5d:fe:f7:36:d0:3a:9f:ca:9c:73:
                    38:12:2d:ca:13:27:1f:91:f7:00:f6:7e:35:5d:40:
                    7e:b5:d6:1e:f7:b1:08:3a:f6:a7:8f:5f:a4:d3:9c:
                    8c:2f:a6:b2:c4:e3:4e:9c:f9:2b:4f:dd:b8:d8:e6:
                    cf:cd:ff:cc:1a:36:83:5b:65:fe:34:1f:29:03:f5:
                    cd:40:d8:0f:af:cf:d1:57:73:1e:15:e3:8c:44:bb:
                    d4:07:7d:44:c4:13:4f:f5:25:5d:83:8d:89:a2:dd:
                    c0:4f:a8:91:4c:35:02:c4:3d:32:40:f1:fe:70:02:
                    d7:b8:ad:50:bc:51:2d:56:f8:5c:2f:01:33:cd:0e:
                    d9:dd:74:2a:c0:cf:61:73:7d:70:31:60:fc:28:65:
                    fb:0e:40:4d:18:85:c9:74:7b:23:b1:fb:60:48:0d:
                    0b:f4:8c:32:a8:a0:52:cc:51:c0:a1:d2:8e:f7:ce:
                    af:be:26:28:84:63:96:a7:78:79:bf:16:a0:9c:ac:
                    e2:cf:d0:cb:ea:6d:6d:6c:f1:fc:c4:2d:bb:71:a7:
                    2f:6f:c6:17:f7:1d:da:4d:f1:1d:72:91:33:a6:21:
                    67:9e:a9:ba:7f:7c:b0:b8:75:b2:39:10:46:14:1e:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:CC:02:19:ED:A4:FA:68:B2:61:4C:E6:BB:2E:B0:77:93:BB:20
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430323a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:d02::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:77:60:6f:5e:5f:cf:e7:a4:a7:cd:45:8d:3c:2e:ea:8c:
         22:e8:61:9c:88:7b:bb:93:dc:a7:65:5f:8c:ac:b0:88:df:b7:
         a7:df:03:9e:03:8b:c4:41:eb:87:f3:b5:b8:c3:54:f2:40:d7:
         b4:b7:ab:05:f9:1a:cb:5c:9f:78:bb:fb:d3:27:ef:a9:39:83:
         87:02:c4:76:d0:8f:c3:a3:5a:9f:17:f6:59:99:0e:7c:99:9c:
         d8:b9:8e:75:8b:ee:6b:63:95:ca:3c:d1:08:a2:ba:ec:ae:8b:
         61:09:1c:49:65:5e:13:8b:9d:1b:1e:ff:39:9d:14:71:dd:09:
         f7:91:2c:d0:ec:55:b3:79:b4:39:5a:e0:d8:19:cc:a6:08:a1:
         fe:16:b6:dc:37:1d:17:97:d6:b7:c7:08:be:50:29:68:67:66:
         ab:56:14:bb:e4:98:08:3f:b3:69:4a:4e:06:e3:75:5b:38:e1:
         8e:e8:fb:cd:7d:44:ab:19:63:48:63:d2:43:2f:78:d8:05:c8:
         ca:b4:32:68:62:44:40:78:d6:73:54:a1:f9:48:c8:27:cc:41:
         5c:14:06:d0:5e:6c:5c:7b:79:ad:b9:5b:49:18:53:0f:de:26:
         e1:ca:0b:d1:d5:bc:50:2e:51:f2:bf:07:b9:d7:3e:65:d0:70:
         de:34:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:13 2026 by rpki-client