Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          fIHDdAkvp6aZT2/1lVMyw/ktklSVU1ksY+oKrAsxQUQ=
Subject key identifier:   16:04:D5:A6:6D:C3:F6:7E:05:8C:8E:06:B3:4E:DF:82:19:32:77:82
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       1B18020043B5A05D0846012AB732090403949FFD
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 12:41:52 +0000
ROA not before:           Mon 19 Oct 2026 12:36:52 +0000
ROA not after:            Mon 18 Oct 2027 12:41:52 +0000
asID:                     262249
IP address blocks:        2801:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:18:02:00:43:b5:a0:5d:08:46:01:2a:b7:32:09:04:03:94:9f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 12:36:52 2026 GMT
            Not After : Oct 18 12:41:52 2027 GMT
        Subject: CN=1604D5A66DC3F67E058C8E06B34EDF8219327782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:7d:96:87:88:11:52:50:22:70:e8:85:f5:
                    b8:fb:e8:d2:78:be:24:e7:c0:0a:07:ed:ca:c9:48:
                    31:d1:b7:04:4e:06:1d:79:d1:00:9b:75:6c:dc:b2:
                    2f:32:48:21:34:a5:fa:fb:65:44:05:fe:1e:f3:b0:
                    95:0a:b8:ea:f7:b1:59:b0:57:bb:20:5a:bb:ce:17:
                    9b:99:e1:54:6a:63:58:bd:d7:7a:c2:20:c2:2e:34:
                    72:c1:6a:00:f2:11:d1:27:41:42:e4:7a:0c:03:e0:
                    52:f9:5e:78:a9:95:f5:98:f9:f4:43:b2:dc:1a:88:
                    f7:da:ed:f7:a0:25:b1:63:4f:d7:bc:71:20:be:43:
                    df:18:9e:aa:14:33:83:74:b4:03:e1:84:0c:2d:92:
                    71:70:dd:cf:d7:a6:f5:6d:0b:8b:cd:96:24:e8:4b:
                    85:d1:3b:93:17:5a:3a:8b:d3:14:fc:19:50:f2:38:
                    e5:bd:aa:6a:30:22:46:a5:d2:dd:c8:a3:4e:5c:d5:
                    95:61:33:92:79:e3:91:3a:f2:b0:5b:bf:02:b0:f7:
                    99:29:d4:2e:b4:2a:dd:c8:0d:9b:6d:f1:03:c7:69:
                    33:09:06:6e:37:1a:fa:bb:ce:90:77:a5:a1:fe:d6:
                    13:85:2f:10:15:d9:6b:8a:a0:5b:29:99:3f:68:d8:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:04:D5:A6:6D:C3:F6:7E:05:8C:8E:06:B3:4E:DF:82:19:32:77:82
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:43:0a:c1:9e:f3:43:50:2b:b3:48:21:20:04:f1:66:c2:
         63:7e:b6:f3:b4:31:4c:ee:bd:70:21:2a:38:2b:9a:84:fa:f4:
         7a:b9:ac:50:0b:a4:f2:6b:8b:03:36:8c:ad:70:4f:66:19:5e:
         7b:b3:74:1c:ba:7a:00:16:35:2a:7b:0f:b3:3e:21:65:d3:23:
         d5:18:6d:8d:29:5e:06:bc:82:cc:d4:81:ab:31:dc:02:79:36:
         87:7f:2d:c8:6f:b1:73:4b:6d:91:d9:3e:dc:42:d8:72:05:63:
         85:2c:31:31:2f:52:82:58:91:df:cf:a6:ed:ce:72:05:97:d8:
         48:01:fc:6e:ba:c3:ca:42:8c:ef:ac:05:9e:4d:33:2c:49:36:
         48:d1:47:23:f4:93:06:91:54:39:fc:45:2f:40:15:a7:5d:eb:
         60:c2:98:fc:01:55:4d:13:49:03:89:90:e8:04:ee:7c:1f:a6:
         e7:31:84:1f:d2:7e:f5:4d:7a:37:71:97:64:c3:d9:b8:34:88:
         9c:f4:59:e1:5d:b2:9b:2d:4a:be:8a:10:30:c8:17:37:ab:c7:
         70:d6:13:65:af:3d:5d:43:60:cd:54:67:80:e5:d3:48:b3:39:
         17:cc:d1:f6:ef:71:50:6e:9c:5d:da:a7:34:d5:da:84:4e:ba:
         20:a9:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:06:19 2026 by rpki-client