Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643038303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a643038303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          rdVq/JQpctvMrx0pM/dlyU+LSDokKOpJlOmY0NttIxk=
Subject key identifier:   EA:72:B2:9C:D4:F6:43:D6:55:E5:B7:E9:65:B0:C8:D7:F6:C5:19:BA
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       35E74E0EF43C761BFB2C11E1D9BBEB913D50FE9D
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643038303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Fri 25 Sep 2026 21:37:05 +0000
ROA not before:           Fri 25 Sep 2026 21:32:05 +0000
ROA not after:            Fri 24 Sep 2027 21:37:05 +0000
asID:                     22927
IP address blocks:        2800:a00:d080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 00:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e7:4e:0e:f4:3c:76:1b:fb:2c:11:e1:d9:bb:eb:91:3d:50:fe:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 25 21:32:05 2026 GMT
            Not After : Sep 24 21:37:05 2027 GMT
        Subject: CN=EA72B29CD4F643D655E5B7E965B0C8D7F6C519BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:a3:c7:e4:43:be:b5:3f:d8:d5:71:a8:f8:
                    bd:65:28:d9:2a:67:f6:23:48:a2:d6:cd:13:18:02:
                    5f:83:c6:de:5f:b8:0e:ff:72:2c:37:32:51:90:f0:
                    3f:08:43:8b:45:08:c1:22:8c:7f:bc:b7:16:ff:90:
                    81:c2:1e:19:b2:b5:2e:f5:ec:39:95:ad:2f:ac:8c:
                    61:9e:6b:23:c1:62:da:ad:35:07:36:33:75:5c:14:
                    ca:ae:b2:e2:36:35:45:57:48:64:93:04:73:66:e4:
                    86:39:b3:c9:e7:55:dc:33:ee:1c:f9:72:9e:7a:ef:
                    ab:48:e7:68:44:03:f6:e6:14:75:44:92:77:4d:6c:
                    1b:3e:01:ad:89:89:2f:62:56:8e:24:7d:73:c4:3e:
                    58:53:6a:74:49:77:16:6c:ae:9d:d1:1b:e0:f1:29:
                    fa:ab:e3:d2:e4:b7:0e:38:bc:2b:3e:f8:1e:11:9a:
                    37:a9:db:63:a8:5e:1f:38:23:ad:e2:8c:92:94:ab:
                    18:e3:a8:8f:3e:94:ce:ef:16:2b:3d:d7:5d:a3:16:
                    6d:d7:9d:6e:13:8a:fa:73:4b:87:81:ff:0f:dd:eb:
                    c2:3e:e1:95:69:dd:a5:16:59:a3:37:02:88:e4:ef:
                    b0:50:cc:15:00:27:56:23:f9:54:b5:c0:b2:1e:56:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:72:B2:9C:D4:F6:43:D6:55:E5:B7:E9:65:B0:C8:D7:F6:C5:19:BA
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643038303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:d080::/41

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:3e:f1:ba:a0:e0:a4:0f:c9:89:e9:11:ac:d0:ee:36:f4:
         9e:59:6c:c7:61:66:9a:8a:9c:d6:c2:29:22:c8:bc:0a:fa:54:
         6b:56:fa:bb:1b:4b:c7:b0:b5:30:84:f1:19:8b:fb:13:9f:c1:
         9e:76:c7:35:b1:af:2c:c7:1e:09:3b:19:66:65:41:3f:32:d8:
         e4:7d:15:00:80:f8:ff:75:0b:8e:b5:12:eb:2f:dd:11:c5:af:
         c7:df:d2:31:95:e6:cc:c0:83:53:3f:5c:a0:cc:32:b1:c9:5f:
         84:0d:26:72:4a:8f:79:85:4b:f5:a9:04:4d:95:5a:a0:52:32:
         fa:24:a9:b0:e3:ea:39:d6:a2:3f:35:23:95:1f:fa:19:fc:f4:
         09:85:be:ec:01:2e:50:fa:95:4f:5b:c1:04:2d:1c:f1:d1:5a:
         fa:b2:47:1f:11:18:53:80:0a:b0:4f:48:c1:a7:1a:22:69:e5:
         40:ef:c5:44:25:8c:bc:a1:a3:d3:4c:63:56:16:10:b5:a3:4f:
         ba:d3:c3:25:45:58:b2:88:55:82:07:58:16:13:38:13:ab:53:
         3d:38:32:7d:11:c4:d6:fb:2f:4d:2f:de:6f:f4:8f:52:4a:3b:
         99:2f:53:69:e7:f2:12:84:c6:ab:ee:0c:01:78:e2:bc:e1:b4:
         41:25:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:52:41 2026 by rpki-client