Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa
File:                     323830303a383a3a2f33322d3438203d3e203130373738.roa (raw, json)
Hash identifier:          E/OyKZOhQp+naM5Qgqfr/V46GErVw8YKwKOcTC9Q4vU=
Subject key identifier:   61:A6:6C:F7:AB:2B:68:C3:A6:2A:51:F2:38:6D:10:B1:D3:2E:B7:CB
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       6BD92C6F6A5916E1B37F0084D8BAFD0FE9716E15
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 20:54:28 +0000
ROA not before:           Tue 06 Jan 2026 20:49:28 +0000
ROA not after:            Tue 05 Jan 2027 20:54:28 +0000
asID:                     10778
IP address blocks:        2800:8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 18:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d9:2c:6f:6a:59:16:e1:b3:7f:00:84:d8:ba:fd:0f:e9:71:6e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:28 2026 GMT
            Not After : Jan  5 20:54:28 2027 GMT
        Subject: CN=61A66CF7AB2B68C3A62A51F2386D10B1D32EB7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:98:b6:2c:c3:49:fd:1f:3b:b1:43:26:09:
                    07:22:19:64:9c:77:13:68:b9:1c:43:89:eb:9d:5e:
                    71:c9:93:13:2a:10:34:97:3d:94:3a:87:52:04:ed:
                    ca:4a:0c:41:bf:f9:2a:5a:f0:9f:ab:9f:68:e7:35:
                    35:40:6f:a3:6c:03:49:1e:3d:51:45:d5:65:b4:2e:
                    0c:aa:45:a3:fb:2a:7c:cd:43:47:32:4a:23:b2:d9:
                    03:24:76:ee:54:3b:27:19:21:7e:2b:8d:25:ac:1a:
                    e2:19:94:21:b0:7a:4d:69:cc:44:82:b1:7f:09:e2:
                    3e:ec:8a:d7:46:ee:89:63:4f:ff:b9:3e:95:60:c4:
                    cf:23:f6:e7:7c:f6:9b:47:c6:8d:1c:83:be:f0:a9:
                    84:e5:f9:65:a5:49:bc:7e:0b:9f:a2:4f:58:e6:d5:
                    dd:e2:50:ac:65:90:ae:de:c7:b2:e1:9f:b2:16:20:
                    2c:d0:5c:cc:f0:1b:09:1d:5d:6a:e6:3a:cb:5e:b6:
                    6b:5a:e2:12:dd:8f:87:a9:21:e3:41:89:56:f9:e4:
                    e0:61:c3:d5:d4:5e:40:e0:c7:d4:b0:0f:5f:01:4b:
                    47:f8:9e:16:05:5c:75:24:84:f8:c3:12:5d:b7:7c:
                    42:b1:ca:3a:be:68:c2:08:01:cd:9d:7f:df:08:74:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A6:6C:F7:AB:2B:68:C3:A6:2A:51:F2:38:6D:10:B1:D3:2E:B7:CB
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:25:dc:32:1c:26:c2:f3:4a:6f:20:fc:83:7f:cc:0b:90:
         8c:0f:20:57:f6:b6:85:94:f0:b6:9c:22:a2:eb:b5:22:71:c0:
         ca:8f:27:9d:56:e1:ed:6d:74:ca:59:4a:e9:67:4b:dc:eb:eb:
         7d:ed:b7:ed:b3:43:16:3e:53:21:da:83:48:b8:ba:c5:9e:09:
         14:11:80:cc:c6:7a:fd:a7:e3:3b:5c:47:dc:3b:6b:e1:6b:36:
         ac:2b:59:96:b0:e1:70:96:a1:01:64:e0:c8:b2:e0:23:6f:2f:
         0b:d8:11:11:86:11:c6:28:fc:cd:82:5a:49:c2:7e:37:71:c6:
         8b:59:0b:17:51:b4:75:af:87:a9:29:59:f1:26:17:4f:8a:9a:
         2d:14:a5:14:73:c1:d5:e6:bf:af:1b:a6:6d:ac:71:5d:d1:1b:
         65:81:37:53:9c:8d:f9:18:ab:02:27:fa:a5:19:f1:44:02:e3:
         39:5b:f4:1a:5e:9a:85:29:99:b5:55:e6:12:48:26:65:37:c7:
         a0:e7:91:c3:50:f3:62:38:7c:bb:44:00:c3:ba:2a:98:53:2a:
         45:41:26:1c:a9:af:4a:bf:2a:dd:27:35:1f:d0:86:b1:01:02:
         fa:11:44:b7:a6:7f:42:ea:80:02:d4:7e:35:ab:a2:ef:61:08:
         48:99:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:12:35 2026 by rpki-client