Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa
File:                     323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa (raw, json)
Hash identifier:          SQBX3HCae3xKiSIY6XBvB+Q2WyHXR/JxOgc7S0X3gAY=
Subject key identifier:   E7:16:5E:C5:1C:A6:E0:37:72:40:68:6D:BC:EF:25:FD:BA:CA:FF:74
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       63922C2B981C8C2D7D64EDCA4FF3D3631BD375E9
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa
Signing time:             Wed 07 Oct 2026 19:39:03 +0000
ROA not before:           Wed 07 Oct 2026 19:34:03 +0000
ROA not after:            Wed 06 Oct 2027 19:39:03 +0000
asID:                     22927
IP address blocks:        2800:a00:c8fe:f000::/54 maxlen: 54
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:92:2c:2b:98:1c:8c:2d:7d:64:ed:ca:4f:f3:d3:63:1b:d3:75:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct  7 19:34:03 2026 GMT
            Not After : Oct  6 19:39:03 2027 GMT
        Subject: CN=E7165EC51CA6E0377240686DBCEF25FDBACAFF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:c1:8c:12:d6:96:dd:bd:d1:9f:d9:69:0c:
                    91:10:1d:5b:3b:94:22:cb:4b:53:e2:1f:d1:8b:9a:
                    57:97:34:58:12:5f:61:7f:29:9f:92:0a:36:8b:98:
                    09:1f:63:fc:fd:a6:43:6c:da:8b:fe:d7:93:c2:7d:
                    f9:0f:98:37:ac:17:d9:36:b7:10:53:be:c6:91:53:
                    f7:23:8e:85:fb:ae:5a:74:83:97:3d:f3:81:ad:76:
                    56:f2:d4:00:dd:2b:13:22:26:4c:4b:af:0e:9c:90:
                    27:44:d6:63:15:d8:4a:11:39:7f:f3:2d:dc:6d:4a:
                    39:b6:db:99:02:06:23:6f:e2:78:e2:b6:ea:e3:bb:
                    cc:9e:2b:cc:9f:8d:d6:70:6f:7f:9d:68:23:1e:f0:
                    de:18:9d:ff:db:6c:19:db:ef:6c:65:b6:4c:24:b6:
                    5d:d7:10:ea:a5:bd:aa:d0:d7:38:92:55:bc:b2:ee:
                    12:db:e9:23:52:36:91:a0:02:72:ea:ce:02:5e:6f:
                    5b:51:68:1b:b4:37:0e:54:e4:4a:21:f1:87:ba:42:
                    31:38:08:b5:04:73:6c:44:92:60:49:b8:ef:1d:eb:
                    49:51:91:0e:1f:29:e0:59:d0:8d:83:06:a8:95:78:
                    19:bb:0b:1c:66:b0:4b:a6:df:75:6c:5f:ca:f0:07:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:16:5E:C5:1C:A6:E0:37:72:40:68:6D:BC:EF:25:FD:BA:CA:FF:74
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:c8fe:f000::/54

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:b3:1f:9a:d9:1d:dc:80:96:3b:f8:b6:a6:69:07:6e:ab:
         6a:96:b5:96:6f:52:8f:1d:28:0c:19:a5:0f:30:94:4f:6d:79:
         b0:6f:0b:61:ca:07:a3:aa:56:db:81:b6:06:35:2b:4e:4e:95:
         bc:25:70:a6:0d:5a:65:50:84:a4:e6:f2:7a:23:ba:4b:30:23:
         3d:cf:75:98:69:b6:c4:2f:2e:ac:32:dc:e2:74:25:39:07:4f:
         78:87:4e:21:8a:64:ee:95:31:33:d6:90:7c:33:54:11:ed:c5:
         71:22:b2:a1:91:14:8a:75:40:f3:1c:02:8d:47:9d:ca:19:40:
         ea:5e:81:3b:b9:73:88:38:fc:9a:31:bc:75:8e:08:84:1c:f7:
         c6:09:c6:0e:b3:62:6a:48:9b:e1:0c:df:7c:fb:32:bc:45:fb:
         76:20:d6:82:8d:52:58:b4:a8:78:e0:5d:77:a5:34:f6:ce:5d:
         d8:31:74:9d:3e:b0:f5:35:f4:26:2d:37:44:fd:2f:60:0f:61:
         d3:4d:5d:22:3e:db:8f:f8:60:c7:13:cd:2f:98:b9:d3:89:9e:
         49:4d:10:36:f9:61:d2:de:2b:f2:ec:41:c3:b5:e2:b6:3c:30:
         9e:4c:d1:5b:4d:a1:16:a2:5f:9a:9e:11:7b:55:8f:5b:c1:39:
         12:2b:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:51:25 2026 by rpki-client