Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa
File:                     323830313a303a32303a3a2f34382d3634203d3e203631343638.roa (raw, json)
Hash identifier:          qh/E0k2xivmI+3KNY/WDF7efF6nlr6b24cOlbY2zzu0=
Subject key identifier:   EF:E3:E5:C7:BD:2D:C2:F2:31:50:53:51:9B:2C:1B:51:7A:38:20:E6
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       4AAB7C931721B4CC3046EF197AC468C1747CD4E9
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa
Signing time:             Wed 16 Sep 2026 17:35:51 +0000
ROA not before:           Wed 16 Sep 2026 17:30:51 +0000
ROA not after:            Wed 15 Sep 2027 17:35:51 +0000
asID:                     61468
IP address blocks:        2801:0:20::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ab:7c:93:17:21:b4:cc:30:46:ef:19:7a:c4:68:c1:74:7c:d4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Sep 16 17:30:51 2026 GMT
            Not After : Sep 15 17:35:51 2027 GMT
        Subject: CN=EFE3E5C7BD2DC2F2315053519B2C1B517A3820E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:38:a2:e5:fa:7d:86:7d:69:1a:2b:f7:ea:11:
                    11:b7:60:58:9d:f8:d9:c3:e5:15:f0:9a:31:10:35:
                    6c:9d:4f:3f:c6:f4:c1:5b:d6:6b:ad:4a:fe:88:fd:
                    5e:42:dc:ff:72:aa:32:40:d5:57:78:26:a9:20:54:
                    1b:fa:f4:1d:44:96:e3:85:b3:68:a6:1e:05:78:b3:
                    12:8c:78:36:a8:ed:87:9e:31:f0:37:c1:08:69:80:
                    b0:0b:b5:db:e2:c1:fe:67:b1:f1:3a:31:0a:fb:45:
                    8d:34:45:e4:34:75:8b:32:43:64:1a:3f:45:c2:ee:
                    31:c0:c0:e2:e1:30:54:e0:3e:06:bb:4b:81:ba:b0:
                    8e:55:32:35:34:8f:b6:dc:b6:f9:87:03:3b:83:94:
                    93:37:c7:86:bd:18:e3:50:86:68:6a:f0:45:28:b0:
                    17:59:65:12:0a:c3:5f:27:a6:60:5b:0c:ce:b3:15:
                    d5:ab:5b:e9:0d:4b:56:4b:a7:8d:28:87:30:f8:80:
                    3e:cb:29:93:d4:e8:3a:39:74:dc:89:72:3e:73:02:
                    30:4d:22:de:31:ce:e8:ff:51:10:39:a6:9b:3b:f4:
                    a0:a0:b4:52:87:aa:be:20:bd:f9:3a:8f:32:3a:f2:
                    4b:23:99:41:7d:d3:de:52:dc:30:af:ef:92:10:74:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:E5:C7:BD:2D:C2:F2:31:50:53:51:9B:2C:1B:51:7A:38:20:E6
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:7b:da:bc:39:25:37:7f:48:e0:36:54:44:5a:ec:ca:64:
         0c:c5:ec:e1:9d:d7:87:f6:ab:c2:f4:b4:38:a3:bf:48:bf:9e:
         32:63:ce:38:fb:3c:2a:08:68:e2:60:12:9e:55:6f:4a:a6:dd:
         e7:a0:94:24:7a:c2:df:52:0b:90:e2:ca:6d:cb:5f:3a:a0:28:
         53:59:5a:bb:b3:e9:29:96:e1:96:ae:76:9e:e9:bd:b7:2b:8b:
         47:3b:f6:47:40:e5:46:0c:0f:1b:b6:6e:20:28:d1:54:e1:81:
         78:23:4b:3a:65:43:2d:7c:75:54:c5:24:37:4e:00:4e:9b:11:
         03:8c:3f:68:8d:ee:13:c9:57:96:19:1c:2d:e9:21:7f:1b:9a:
         ac:77:96:32:b3:08:46:c3:f3:2a:8a:15:53:98:1d:bf:9d:b3:
         6b:93:41:9f:bf:8a:dc:00:5a:d4:d5:7b:4a:f5:75:44:db:cf:
         cb:20:55:d2:8e:53:38:e6:f1:6a:81:f1:8c:1d:ed:8d:27:26:
         17:cf:36:54:75:34:34:39:de:6c:be:b3:db:0e:d6:c7:84:8f:
         84:3c:b7:a8:01:d3:96:1e:e9:c3:f7:a4:20:19:e0:b8:ed:3a:
         c5:c9:3a:9b:60:29:49:34:f9:fa:f3:c7:63:d7:ce:0d:63:64:
         4f:8b:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:56:24 2026 by rpki-client