Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa
File:                     323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa (raw, json)
Hash identifier:          sWilWldtEXi9YPB4kM6RDW3CLnWaHBh4dkNB2G1RR5c=
Subject key identifier:   1B:20:A3:78:02:22:62:25:65:9C:A5:1A:07:FA:B4:33:4B:FD:88:46
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       22AA44A242360D4E91BC8A9D64180CAA55B00E61
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa
Signing time:             Mon 19 Oct 2026 12:41:54 +0000
ROA not before:           Mon 19 Oct 2026 12:36:54 +0000
ROA not after:            Mon 18 Oct 2027 12:41:54 +0000
asID:                     265731
IP address blocks:        2801:140:dddd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:aa:44:a2:42:36:0d:4e:91:bc:8a:9d:64:18:0c:aa:55:b0:0e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 12:36:54 2026 GMT
            Not After : Oct 18 12:41:54 2027 GMT
        Subject: CN=1B20A37802226225659CA51A07FAB4334BFD8846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:a5:9a:04:e4:38:e9:7d:e0:bd:3d:45:17:
                    08:2e:18:03:94:1b:83:b0:ef:ea:c3:26:a0:64:4f:
                    ed:9f:f7:aa:b4:f1:ba:b9:4c:bd:04:7d:2a:09:4e:
                    b9:22:16:94:7a:82:f7:56:7b:b9:e7:a5:f2:71:c4:
                    ce:68:3b:ec:da:0b:c5:f9:b7:e5:f2:19:93:1e:d2:
                    ef:c3:ab:4e:58:f7:a5:68:66:18:e9:d9:2c:1a:c6:
                    3a:99:38:2e:9b:7a:9f:9f:b2:a1:3c:02:7e:90:ba:
                    67:c2:f0:ef:1e:c4:59:73:9e:3c:83:2f:77:51:0f:
                    de:9a:ef:54:d5:fe:21:97:a9:af:b4:9b:4a:2c:99:
                    65:e9:cd:80:39:40:92:8c:aa:45:9b:8e:8a:92:70:
                    9f:01:87:2a:d9:5d:ea:1d:bf:a8:63:b2:95:9f:f7:
                    93:21:c3:42:72:8b:7a:1d:0c:0b:bb:58:f9:ef:17:
                    eb:8b:05:cf:78:c5:ee:f6:5b:df:5d:e3:25:b5:d8:
                    b9:66:dd:b1:79:1a:ff:a3:85:70:c1:ea:ee:84:32:
                    54:74:e7:0d:29:10:dd:d1:27:d1:4d:76:56:15:99:
                    d5:75:48:a9:16:71:00:d8:40:e2:d0:65:1e:3d:dc:
                    90:14:fb:dd:02:35:8d:ef:91:a5:df:e3:b8:d4:ff:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:20:A3:78:02:22:62:25:65:9C:A5:1A:07:FA:B4:33:4B:FD:88:46
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:dddd::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:24:30:22:92:42:1a:2f:6c:bc:06:db:aa:33:28:b2:25:ea:
         6c:8e:55:ae:e0:ce:ad:60:55:4a:11:1d:ea:23:23:a4:63:87:
         27:03:9b:5a:59:f6:1e:cf:9b:ce:e6:5f:2b:ed:67:1c:6c:58:
         4e:7c:57:e3:71:72:c3:2c:63:f1:54:63:ad:3b:f8:6c:c5:e0:
         77:c2:ad:d0:c2:20:c2:af:ba:29:e2:c7:5e:45:3b:e9:0a:60:
         88:f7:ae:3e:96:05:c8:07:16:0e:68:08:bc:2d:99:78:91:d8:
         18:73:3f:40:99:32:11:50:88:0d:3d:e1:ff:d2:b5:ac:d6:9e:
         2a:e8:0c:46:b1:c3:bb:38:0c:09:64:b4:58:17:f6:36:3b:af:
         a6:29:06:00:9d:9c:09:76:cb:7c:94:9d:d1:4f:f9:37:62:57:
         8a:15:24:67:5c:64:1d:6c:49:ad:c4:72:3f:76:31:f3:e3:bb:
         c4:f8:a9:23:11:48:76:75:e7:1b:bf:fd:db:46:7c:1f:00:cb:
         cb:df:b7:a2:be:16:1d:9c:db:ba:94:aa:7b:98:9a:5c:8b:e3:
         6c:0a:ae:c2:0f:0d:e6:31:95:b2:c9:b3:fc:21:cc:7c:fe:8c:
         ab:fd:5d:4b:dd:51:e4:5e:0a:90:de:c0:ee:52:31:8b:b1:19:
         49:28:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:28:41 2026 by rpki-client