Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/323830363a3430313a3a2f33322d3438203d3e20323730323138.roa
File:                     323830363a3430313a3a2f33322d3438203d3e20323730323138.roa (raw, json)
Hash identifier:          859LgBA2mPuajN6CbLnh5xq7/MTmTGMtksUOs+KkSk0=
Subject key identifier:   D0:22:D6:DD:7F:FA:BA:E0:F3:7A:E1:56:1D:82:71:86:18:20:71:60
Certificate issuer:       /CN=9D98B90757B8CB40B7C9F37D51A2866FB3487370
Certificate serial:       22F87E296D40A6CE50021EB10B5C2393CCA120C7
Authority key identifier: 9D:98:B9:07:57:B8:CB:40:B7:C9:F3:7D:51:A2:86:6F:B3:48:73:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/323830363a3430313a3a2f33322d3438203d3e20323730323138.roa
Signing time:             Mon 02 Feb 2026 15:28:53 +0000
ROA not before:           Mon 02 Feb 2026 15:23:53 +0000
ROA not after:            Mon 01 Feb 2027 15:28:53 +0000
asID:                     270218
IP address blocks:        2806:401::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f8:7e:29:6d:40:a6:ce:50:02:1e:b1:0b:5c:23:93:cc:a1:20:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D98B90757B8CB40B7C9F37D51A2866FB3487370
        Validity
            Not Before: Feb  2 15:23:53 2026 GMT
            Not After : Feb  1 15:28:53 2027 GMT
        Subject: CN=D022D6DD7FFABAE0F37AE1561D82718618207160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:7c:2d:31:76:43:42:ed:fe:a8:a4:6f:6d:
                    48:73:8a:07:db:4c:c2:bb:35:08:44:f7:b1:7d:b4:
                    92:cc:75:14:ec:df:72:5c:1f:2f:8f:b1:1c:e9:5d:
                    88:25:b9:31:9e:b6:0f:48:06:52:c9:ae:d9:b1:3b:
                    d0:a9:4f:29:43:3f:88:8e:20:b9:6f:f1:3a:2b:7b:
                    34:b2:f4:07:c5:d9:2f:0c:eb:c5:fd:ed:8c:a7:a8:
                    94:45:e3:31:78:36:67:38:d0:76:04:f8:08:54:11:
                    80:38:5d:b0:a6:bc:e7:cc:0d:81:90:03:3f:f0:76:
                    8e:59:89:a3:3c:a1:1d:eb:fd:23:b7:c9:d1:2f:fa:
                    bb:12:4d:f3:79:63:d2:c5:7a:aa:d6:ad:53:e4:06:
                    87:d6:45:08:56:8a:7f:53:20:10:59:08:01:37:22:
                    b8:0d:13:0d:ae:1e:58:63:92:eb:9e:d6:a8:42:24:
                    db:e4:c7:b5:20:c2:75:54:76:15:40:60:4b:bf:fc:
                    d9:79:84:53:1e:d9:bb:90:15:b5:0e:b6:85:13:87:
                    45:ad:9f:37:c5:9e:81:31:06:1d:41:87:ff:1e:d5:
                    b7:25:d3:e6:3a:a6:a4:2c:d0:9f:66:6a:5a:a5:10:
                    ef:c5:49:8e:37:a3:7a:35:19:a5:5a:51:03:16:ca:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:D6:DD:7F:FA:BA:E0:F3:7A:E1:56:1D:82:71:86:18:20:71:60
            X509v3 Authority Key Identifier:
                keyid:9D:98:B9:07:57:B8:CB:40:B7:C9:F3:7D:51:A2:86:6F:B3:48:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/323830363a3430313a3a2f33322d3438203d3e20323730323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:401::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:20:72:34:06:9a:31:93:8d:56:be:3f:30:1a:71:d6:ca:
         99:0d:9b:90:8a:dd:2c:22:17:a2:fd:64:89:90:14:d4:3a:d0:
         2c:18:c3:da:2c:7f:52:06:6f:a5:36:64:be:f0:4d:26:e2:bc:
         2b:25:88:8e:53:69:8d:d9:ad:27:87:8f:dd:6e:35:dd:c4:29:
         26:e5:67:22:5d:a2:8d:ae:b3:14:96:59:4c:9f:a6:bc:17:60:
         74:b5:84:67:1e:9f:ff:6c:2b:d5:d2:fc:01:9a:1e:10:b1:7f:
         28:71:5c:8c:dc:c8:f6:6f:7e:8c:ab:a5:50:b6:58:78:f7:a3:
         cd:22:25:05:02:30:58:df:05:d1:8e:db:1c:c7:79:90:a1:d3:
         78:7a:d6:b5:35:0c:0f:e0:3b:c1:55:df:fa:ef:2d:46:08:50:
         24:61:1d:6c:cd:93:6b:ee:98:e1:3f:de:63:c4:8b:fd:a3:3f:
         5d:47:26:16:94:e3:29:c5:6e:af:c7:5c:35:95:c9:5d:ec:a3:
         41:fe:e3:af:52:51:6b:6f:41:6b:e4:5c:e0:67:76:2b:67:08:
         a4:71:2d:ee:7b:66:04:44:26:52:82:a2:eb:d5:de:ae:d9:bd:
         a3:98:9d:3e:9c:69:1d:c5:e9:09:3e:32:9b:a4:0b:53:ba:61:
         43:0f:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:31:46 2026 by rpki-client