Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          scxIfyaP3MyVpw1BE4MiOCcH7wVcxKANpjaUnDfY6jQ=
Subject key identifier:   F3:EC:7D:02:E9:1A:36:4E:9F:B6:89:D2:56:3D:93:00:AE:7D:C2:B0
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       359BD7031176E7F011A428680C39C8ED18A71938
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 12:41:53 +0000
ROA not before:           Mon 19 Oct 2026 12:36:53 +0000
ROA not after:            Mon 18 Oct 2027 12:41:53 +0000
asID:                     262249
IP address blocks:        2801:140:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9b:d7:03:11:76:e7:f0:11:a4:28:68:0c:39:c8:ed:18:a7:19:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 12:36:53 2026 GMT
            Not After : Oct 18 12:41:53 2027 GMT
        Subject: CN=F3EC7D02E91A364E9FB689D2563D9300AE7DC2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:99:d2:de:10:5d:77:45:2a:bf:be:95:78:
                    f7:0a:13:3e:a3:7a:59:24:8f:0d:3c:57:81:dc:b4:
                    66:10:b3:ac:c2:fc:58:a6:8b:8f:74:31:a1:9e:90:
                    40:b5:4b:af:8e:0b:9e:ef:90:53:e7:ff:43:3e:27:
                    ba:43:33:16:a8:a3:a6:bf:cd:0e:8e:b6:c8:87:d7:
                    a5:a9:4e:95:a7:54:c5:3c:ec:a4:28:70:9c:21:85:
                    58:5c:ef:a3:3a:6f:95:b4:ad:70:02:e5:ad:11:98:
                    e3:6e:48:1c:21:2c:25:1f:42:6a:7f:45:76:f0:f3:
                    29:8a:42:77:e0:22:10:0e:fe:c2:7f:84:77:74:67:
                    8a:ec:2f:dd:4f:fa:b4:f1:2a:f8:cd:d4:e1:16:72:
                    f4:e7:0e:a2:3d:2e:b2:07:c7:61:99:85:12:ac:c9:
                    f3:03:8d:23:55:3a:86:55:50:8a:3b:cf:e6:1b:73:
                    b4:76:a5:21:5b:39:58:eb:50:42:f3:51:46:2c:22:
                    c4:fa:59:dd:bf:23:f9:85:ba:5b:a9:bb:35:64:c4:
                    c5:0a:84:02:0f:1e:20:63:33:86:66:21:bc:6f:76:
                    bb:b5:98:ad:bf:c4:fd:11:76:73:3d:7c:9a:0a:87:
                    fb:c0:77:37:b4:6e:61:78:0f:f9:14:d3:b4:d6:7b:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:7D:02:E9:1A:36:4E:9F:B6:89:D2:56:3D:93:00:AE:7D:C2:B0
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a31313a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:c6:89:ae:02:10:01:01:3c:3b:43:8a:39:77:b6:dd:3a:44:
         e2:1a:cc:ec:3c:62:9e:4c:d6:38:ee:90:a4:7d:6d:75:8d:89:
         b7:2d:15:13:ad:7d:b9:ad:3d:ed:47:21:3e:78:1c:14:ec:e4:
         f7:be:7f:6b:5b:3b:77:c5:da:92:21:14:9c:39:d8:04:50:99:
         17:10:a7:e1:2b:c7:36:b0:88:fc:4f:de:72:bf:cf:0c:ca:36:
         c2:f5:68:3a:1c:21:ec:17:b8:9e:29:50:6b:5d:c2:d2:2c:2a:
         25:be:36:4b:4d:98:e9:09:d6:79:c9:d9:10:85:e8:f0:15:de:
         16:f2:21:ba:01:e1:20:09:c7:54:0c:78:fb:b4:65:d7:e8:03:
         26:df:57:80:e2:1b:1b:9e:c4:41:4d:9e:84:33:29:28:2e:03:
         f9:0e:4f:c6:36:fb:8b:4c:84:37:4e:5a:13:1e:a0:c0:cf:f4:
         d9:20:8b:9b:6e:0a:e2:cd:c1:35:4d:d6:04:f0:31:24:87:45:
         4b:36:92:c9:9f:96:c6:1c:ea:db:14:17:9e:8a:13:88:06:8e:
         46:26:9e:ce:d8:00:8e:69:e7:f7:81:af:cf:f0:8f:c7:7e:3d:
         9c:5b:4f:39:25:fc:d5:f8:ee:8e:be:4d:d1:8a:13:dd:9f:7b:
         00:ce:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 21:05:12 2026 by rpki-client