Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa
File:                     323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa (raw, json)
Hash identifier:          a4HKH5AFZbGE5oUbzZoftxRsqS2eni60Z6Q48/5A6W0=
Subject key identifier:   71:39:F2:92:B3:94:E5:83:B8:9A:BC:DB:90:53:FB:38:92:29:15:DB
Certificate issuer:       /CN=373B136C9A64FBA75FE203A91B8D3770CAFEBAD3
Certificate serial:       4C4790E9C593130D346F5DAF579C1716CF7FC362
Authority key identifier: 37:3B:13:6C:9A:64:FB:A7:5F:E2:03:A9:1B:8D:37:70:CA:FE:BA:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa
Signing time:             Tue 13 Oct 2026 15:40:11 +0000
ROA not before:           Tue 13 Oct 2026 15:35:11 +0000
ROA not after:            Tue 12 Oct 2027 15:40:11 +0000
asID:                     274003
IP address blocks:        2801:14:f800::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:47:90:e9:c5:93:13:0d:34:6f:5d:af:57:9c:17:16:cf:7f:c3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B136C9A64FBA75FE203A91B8D3770CAFEBAD3
        Validity
            Not Before: Oct 13 15:35:11 2026 GMT
            Not After : Oct 12 15:40:11 2027 GMT
        Subject: CN=7139F292B394E583B89ABCDB9053FB38922915DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:db:28:4c:11:c9:b9:f9:d5:6d:c5:94:7d:c2:
                    da:14:86:cc:a3:b5:9f:1b:f9:2e:70:14:56:ee:b1:
                    a6:2e:5e:e8:2b:fd:08:92:fa:c2:f3:61:12:b7:7d:
                    42:7f:14:18:ab:6a:90:9b:03:5b:45:28:dc:53:ae:
                    96:61:ad:93:ca:2c:81:a9:a2:b4:39:92:33:02:c1:
                    c2:16:13:98:fc:2e:b7:1e:f7:04:03:b6:e7:d8:dd:
                    b2:3f:65:ff:bb:b6:c7:e7:24:11:45:d5:6d:c7:a5:
                    1d:e3:62:bc:ae:ac:77:d9:77:b6:05:a3:bf:f5:e0:
                    85:48:ce:4b:1a:e3:98:fa:d6:05:6d:70:6a:16:25:
                    6e:fc:99:89:94:36:3b:57:72:25:ac:88:89:c5:af:
                    03:f2:c3:13:0d:7f:28:47:0b:9e:e3:f4:8b:7c:13:
                    61:20:fb:23:83:a6:6c:db:5b:96:45:68:6e:4a:1e:
                    b2:02:ba:56:89:c8:8c:e0:48:90:21:1a:6c:aa:1a:
                    a3:bc:5c:4c:01:ad:39:b9:74:10:7b:3e:e3:70:58:
                    92:14:2e:32:7d:34:83:68:48:d2:05:d1:82:2e:fe:
                    f0:f7:f9:4e:30:78:80:8e:64:f8:cb:01:2d:65:17:
                    81:b1:df:5b:bd:33:af:e7:0f:a3:e1:4d:e6:c3:9f:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:39:F2:92:B3:94:E5:83:B8:9A:BC:DB:90:53:FB:38:92:29:15:DB
            X509v3 Authority Key Identifier:
                keyid:37:3B:13:6C:9A:64:FB:A7:5F:E2:03:A9:1B:8D:37:70:CA:FE:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:a2:d2:58:dd:f5:c1:cd:9e:12:5f:87:bf:cd:22:74:46:24:
         d1:97:aa:92:26:73:e8:94:05:2c:da:ce:7e:75:77:2a:b8:a0:
         f8:59:cb:31:ca:e0:c0:9f:27:06:93:a9:ba:6a:84:d1:aa:56:
         b0:0f:6b:3f:75:c9:30:d8:3a:1b:e3:5f:28:e9:f5:9e:72:ad:
         71:88:4d:6f:36:95:76:53:81:3b:12:36:f5:ca:f5:f2:be:f5:
         43:ca:11:43:d2:13:ea:3d:87:44:cb:72:ce:4b:12:0e:07:60:
         09:14:7e:9d:f1:72:c4:35:1b:4f:2b:ec:40:f9:4f:0e:23:7a:
         af:99:f5:4e:4e:ce:8a:1d:b3:cf:1e:03:e7:bf:41:b8:d4:ed:
         46:5c:57:8d:1b:0d:6c:d6:30:75:0f:e3:ab:3e:4a:87:af:f0:
         9c:c0:4f:1f:4e:bf:ec:aa:ec:05:32:48:36:1d:ef:0b:bc:24:
         8c:2f:9e:b6:b8:f2:5c:b3:a6:31:0c:51:28:2c:da:63:af:47:
         f4:20:4c:bd:a5:3a:b5:26:5a:00:b2:e0:68:54:74:47:55:34:
         5e:4f:a0:c9:67:08:fc:d9:dd:10:c9:78:ed:83:e5:a1:9c:7c:
         c7:cb:f3:9c:d2:dd:41:a4:9e:53:b2:b1:0d:8a:ed:a9:58:48:
         7b:64:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:53:24 2026 by rpki-client