Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383033303a3a2f34342d3434203d3e203532323638.roa
File:                     323830303a6138303a383033303a3a2f34342d3434203d3e203532323638.roa (raw, json)
Hash identifier:          bQbMmi8IRaFNZpVB/ZPwaE5fIIttwpFMqhBx2V+hKxI=
Subject key identifier:   0B:2B:AB:54:08:FE:D6:32:50:42:33:63:05:09:FD:F9:22:08:BA:4C
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       1B1E18E9B20F756AC15564E270E45D0CEF3D599A
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383033303a3a2f34342d3434203d3e203532323638.roa
Signing time:             Wed 30 Sep 2026 15:20:00 +0000
ROA not before:           Wed 30 Sep 2026 15:15:00 +0000
ROA not after:            Wed 29 Sep 2027 15:20:00 +0000
asID:                     52268
IP address blocks:        2800:a80:8030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1e:18:e9:b2:0f:75:6a:c1:55:64:e2:70:e4:5d:0c:ef:3d:59:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Sep 30 15:15:00 2026 GMT
            Not After : Sep 29 15:20:00 2027 GMT
        Subject: CN=0B2BAB5408FED632504233630509FDF92208BA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:c1:5e:3e:71:d4:3f:b0:cb:cd:f7:dc:64:
                    37:20:2e:c4:f3:79:eb:a4:d7:80:47:f0:35:22:b5:
                    14:40:39:67:b2:d3:79:68:ee:d2:9d:e0:58:9c:aa:
                    20:ab:3f:30:05:83:b7:ba:1c:d7:91:b5:57:f7:90:
                    3c:a4:dd:62:ed:a8:fd:cf:07:9f:38:a5:66:a1:ff:
                    b6:19:b9:68:d2:30:7f:79:ac:6a:2d:5d:45:ec:e6:
                    7d:c1:be:19:4b:63:91:cd:0a:60:48:35:af:04:db:
                    5e:7c:f7:8e:a4:fc:ac:98:89:2b:67:9c:59:81:03:
                    89:f8:96:2d:25:95:e1:57:e1:99:ac:a0:b0:98:5b:
                    7a:a0:2c:ce:a2:78:6b:04:2c:9c:96:74:14:ac:f4:
                    04:50:ce:a3:36:95:a2:c6:41:7a:1e:c1:f8:b3:e1:
                    c8:e2:6b:da:8d:97:5f:2f:da:a4:b0:23:01:f5:a6:
                    2f:8c:df:e1:69:db:e1:e3:90:5a:c8:6a:98:d0:7f:
                    13:52:40:da:9b:3f:41:e2:ce:b3:37:f6:df:cc:9b:
                    87:01:00:2f:94:12:87:b5:ae:34:06:c4:49:8d:a5:
                    35:8c:5e:70:84:ab:87:8d:da:96:5a:3d:ba:8b:57:
                    7a:f5:1f:80:ec:ba:7d:70:05:b5:2a:ff:8b:05:27:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:AB:54:08:FE:D6:32:50:42:33:63:05:09:FD:F9:22:08:BA:4C
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383033303a3a2f34342d3434203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80:8030::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:7a:ca:52:5a:8d:90:8b:d4:61:53:50:79:9f:4b:1d:a5:b7:
         d5:94:c7:b5:4c:af:6c:fe:e8:b7:79:51:13:78:e0:a0:86:21:
         42:b9:4a:d6:8f:89:8f:30:fc:55:54:54:d7:a1:78:d4:a4:bf:
         b4:52:d5:37:76:2e:ab:3d:68:df:26:f7:15:e4:7d:29:e0:70:
         63:89:78:c3:1a:6a:09:5a:1a:26:13:01:0d:4e:70:bd:d8:3c:
         13:d2:07:59:fb:6c:6c:15:e2:b6:dc:d7:c0:d7:a7:92:ea:e3:
         34:d1:ac:90:3d:74:88:de:41:97:0c:e1:fc:b7:8d:5d:21:41:
         56:eb:9e:a3:6b:9d:f6:00:94:f9:0f:d5:8d:4d:ce:32:a9:d3:
         5c:63:8c:94:3a:9d:17:96:77:cd:bf:c7:d1:f8:5c:69:21:b6:
         91:a2:e0:1b:22:dd:b0:d4:11:ce:2d:3f:a0:19:9a:d1:a7:80:
         04:e0:09:cf:7e:9e:96:96:08:b8:d2:5b:26:97:f6:a2:24:00:
         98:95:b0:3e:d0:fc:53:b9:08:67:d7:1c:b7:11:c0:a9:be:33:
         ce:a4:97:dc:56:32:33:52:9b:b8:b9:6c:33:37:50:c7:8d:10:
         93:85:55:5a:f8:ca:b4:e9:69:f4:6e:a3:21:c0:0f:fc:26:6f:
         06:37:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:30:49 2026 by rpki-client