Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/323830363a3230333a3a2f33322d3438203d3e203238343034.roa
File:                     323830363a3230333a3a2f33322d3438203d3e203238343034.roa (raw, json)
Hash identifier:          tQfHbPBZcIBv7XOvhe4dtZ7xPZUvoo54dbBedKmw3TU=
Subject key identifier:   68:F0:1A:DF:90:10:C1:4C:D8:9B:74:CE:BC:C3:B8:84:D7:7C:E6:4F
Certificate issuer:       /CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
Certificate serial:       55589250E68FF8EA1F7B586B2B632FFA5AA720FB
Authority key identifier: C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/323830363a3230333a3a2f33322d3438203d3e203238343034.roa
Signing time:             Tue 29 Sep 2026 07:10:01 +0000
ROA not before:           Tue 29 Sep 2026 07:05:01 +0000
ROA not after:            Tue 28 Sep 2027 07:10:01 +0000
asID:                     28404
IP address blocks:        2806:203::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:58:92:50:e6:8f:f8:ea:1f:7b:58:6b:2b:63:2f:fa:5a:a7:20:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
        Validity
            Not Before: Sep 29 07:05:01 2026 GMT
            Not After : Sep 28 07:10:01 2027 GMT
        Subject: CN=68F01ADF9010C14CD89B74CEBCC3B884D77CE64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:aa:c3:40:e0:0e:9d:3b:b4:79:aa:8d:38:
                    06:af:35:c9:2b:c3:f7:cd:67:39:89:2a:d8:dc:6d:
                    ce:d6:69:9a:c6:33:f7:2c:c0:f0:92:6d:28:7d:b4:
                    76:65:af:9c:7b:74:a4:e6:ac:47:5a:d8:6f:83:1b:
                    00:a1:36:7a:15:8a:40:c0:8a:03:df:53:1f:f6:71:
                    b4:d4:b0:8f:12:9c:e6:9c:64:74:53:39:a4:63:63:
                    65:fa:3f:62:be:1e:cd:d5:9f:50:f5:c7:aa:8c:03:
                    d7:fd:7c:fa:6e:d3:ef:60:27:0d:54:5f:73:4a:96:
                    4f:ef:14:8b:f4:22:48:41:12:ec:a5:22:51:bd:a4:
                    37:8e:17:9c:7d:ed:7a:48:e8:7a:0e:ac:21:96:5e:
                    63:79:26:c3:3e:c3:76:3d:b4:a6:d9:49:ad:2f:80:
                    89:6b:f6:ea:9a:32:af:5f:62:a3:e2:c5:0b:3d:f7:
                    b1:55:2a:2b:31:10:67:da:b7:e6:4d:52:a7:07:c5:
                    f3:b5:f2:43:2a:e9:7f:55:74:72:9d:45:c9:e0:bd:
                    63:d8:34:ed:80:83:d7:ce:29:68:74:f8:74:d2:e7:
                    54:7b:f5:c5:36:0d:1a:b9:52:10:94:36:19:f5:72:
                    2b:21:c8:c0:45:5a:84:93:ec:1b:ca:98:45:73:01:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F0:1A:DF:90:10:C1:4C:D8:9B:74:CE:BC:C3:B8:84:D7:7C:E6:4F
            X509v3 Authority Key Identifier:
                keyid:C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/323830363a3230333a3a2f33322d3438203d3e203238343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:203::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:dc:3a:f8:89:9b:31:42:57:5b:d3:b0:66:1f:ef:2b:6b:a7:
         9b:45:f7:11:a7:ae:d6:ce:d1:20:87:80:0e:5e:11:df:51:85:
         a3:33:6c:e5:a0:ca:fb:50:a9:ee:89:26:a1:a3:de:89:72:bd:
         bb:3e:66:74:2d:fd:8a:3f:81:08:cd:50:30:cc:67:5e:94:1b:
         7a:ac:1c:76:28:24:e4:ff:4d:b6:3c:8e:96:78:2d:93:aa:de:
         43:dc:1c:c3:86:3e:47:b1:f2:2d:20:a2:f6:5c:4f:c4:c4:77:
         c1:81:fe:db:e0:32:9e:07:af:1d:bb:fc:46:ae:fb:1c:b2:1c:
         e4:e0:c8:16:b2:00:b0:0b:e3:dd:0a:24:4d:69:5a:41:e3:df:
         97:c4:7c:55:06:dc:67:5e:d5:5a:52:70:60:6a:47:30:9a:aa:
         e0:e0:63:67:76:14:d5:df:a5:86:8e:11:be:c6:55:ce:6d:97:
         19:a6:a7:cb:fd:aa:4e:e2:a2:19:21:88:c9:31:96:6a:70:ca:
         90:18:ad:7e:cc:fd:71:f1:0a:ec:fc:26:2f:69:13:d3:32:16:
         fc:af:0c:91:f4:34:2b:d1:6c:54:69:d5:fa:a3:c1:62:31:bc:
         bf:b3:b6:1f:76:82:14:fe:80:a7:0b:b2:aa:a9:22:a5:d6:a7:
         d7:74:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:53:14 2026 by rpki-client