Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/323830363a3366363a3a2f33322d3438203d3e203238343437.roa
File:                     323830363a3366363a3a2f33322d3438203d3e203238343437.roa (raw, json)
Hash identifier:          QJDv/UWTQqC+iX78ZLddXEejCzik+CCmAajocGQuZUs=
Subject key identifier:   23:48:CF:F1:D4:FA:73:3D:05:CA:6B:4D:A8:10:FF:27:13:F6:2A:26
Certificate issuer:       /CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
Certificate serial:       77CF9666B6BFA033516B1C2849D257C762C6E363
Authority key identifier: E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/323830363a3366363a3a2f33322d3438203d3e203238343437.roa
Signing time:             Thu 29 Oct 2026 22:25:00 +0000
ROA not before:           Thu 29 Oct 2026 22:20:00 +0000
ROA not after:            Thu 28 Oct 2027 22:25:00 +0000
asID:                     28447
IP address blocks:        2806:3f6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Nov 2026 18:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:96:66:b6:bf:a0:33:51:6b:1c:28:49:d2:57:c7:62:c6:e3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
        Validity
            Not Before: Oct 29 22:20:00 2026 GMT
            Not After : Oct 28 22:25:00 2027 GMT
        Subject: CN=2348CFF1D4FA733D05CA6B4DA810FF2713F62A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:4e:c8:68:40:2c:51:1d:4a:a6:8f:2f:3d:
                    ac:68:35:38:ff:bf:45:c3:a0:67:58:a4:c6:f5:7f:
                    d9:42:1d:e0:93:21:8e:25:57:5d:1e:b2:82:e2:58:
                    3c:c1:79:12:ee:2f:45:a4:2c:bb:a4:27:d6:05:34:
                    a8:1f:91:f6:db:14:43:f2:45:77:5b:bb:32:3e:64:
                    2a:b9:11:0b:ef:59:60:cb:03:d4:aa:af:ce:0d:f9:
                    29:10:83:84:4b:86:82:7b:e1:a5:de:c5:55:d0:1e:
                    47:73:f3:1a:dd:38:bb:d6:91:73:1b:b5:b2:f0:c5:
                    01:f3:de:68:71:6c:20:2e:56:c9:28:21:71:6a:b9:
                    34:ff:c3:54:6d:da:fb:d9:2a:3b:68:f4:01:ee:ae:
                    ff:82:b9:39:da:13:a2:9f:83:ca:75:c9:5f:18:5d:
                    54:c7:ba:f3:a2:8e:eb:67:f2:4b:4e:3f:51:b8:fb:
                    10:0b:d4:eb:6c:eb:10:04:28:6f:1c:28:ec:8f:08:
                    b1:c6:b8:7e:ed:1b:56:cb:b1:b1:2c:46:89:9e:13:
                    c6:03:8f:be:3f:46:90:4b:3b:d2:d1:ea:4a:76:e9:
                    91:79:c4:77:ce:3f:0a:ff:be:09:a0:c4:43:09:3c:
                    28:d8:1f:ff:29:71:4b:be:b2:bc:c6:27:c5:e2:88:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:48:CF:F1:D4:FA:73:3D:05:CA:6B:4D:A8:10:FF:27:13:F6:2A:26
            X509v3 Authority Key Identifier:
                keyid:E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/323830363a3366363a3a2f33322d3438203d3e203238343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f6::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:f7:ac:dc:b2:50:c6:03:64:8f:78:03:a3:21:bb:e3:df:
         3c:b4:98:f3:e9:e5:2d:65:44:f6:5b:79:be:36:50:6b:cd:63:
         8a:a5:c5:97:da:0c:5a:e7:03:9f:92:fe:71:dd:44:f3:41:2c:
         f6:57:96:02:5c:91:92:d2:45:35:53:75:b6:da:93:05:2f:08:
         02:40:2f:7d:ba:b2:ce:ed:54:44:da:13:6d:77:75:18:bc:27:
         35:dd:c4:30:b9:d0:86:57:32:31:53:df:a2:7f:ea:8c:73:fd:
         be:f9:84:a2:44:dc:91:4a:e4:45:0f:7c:6a:3a:10:78:18:c0:
         af:45:03:24:0c:b5:16:77:cd:ce:99:7a:73:df:72:2d:9e:2c:
         af:14:ec:a8:1d:f6:04:2c:ab:4e:1d:6b:06:6d:71:c6:34:2a:
         62:93:a0:91:7c:06:63:29:27:be:2c:47:eb:04:01:88:3b:7b:
         ae:b2:02:fd:6b:6b:2f:34:4a:d8:4f:fa:02:20:af:da:f2:42:
         15:c7:9e:93:10:9f:a5:ad:c0:21:36:ce:12:98:73:51:db:fd:
         e7:73:4b:56:27:60:c6:e0:38:57:e7:8f:d9:e1:e3:4e:0e:ab:
         ac:66:f0:1e:f0:fd:46:bc:75:ce:d5:c7:bf:28:54:3c:eb:da:
         ba:57:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:50:03 2026 by rpki-client