Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa
File:                     323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa (raw, json)
Hash identifier:          vQGerGbF2/6vD/AJZHujXTCPH3shFjHbNix2QwvFHsA=
Subject key identifier:   66:F0:78:BD:3F:3C:7D:93:01:F2:29:52:89:3A:9A:AD:94:93:4D:10
Certificate issuer:       /CN=84B80CC6B02BB4525CA87C82E224988CEEA1F809
Certificate serial:       505434B408A7B72B2B3FB1122E7D8139267B0346
Authority key identifier: 84:B8:0C:C6:B0:2B:B4:52:5C:A8:7C:82:E2:24:98:8C:EE:A1:F8:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa
Signing time:             Thu 08 Oct 2026 23:39:26 +0000
ROA not before:           Thu 08 Oct 2026 23:34:26 +0000
ROA not after:            Thu 07 Oct 2027 23:39:26 +0000
asID:                     272020
IP address blocks:        2801:15:1801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:54:34:b4:08:a7:b7:2b:2b:3f:b1:12:2e:7d:81:39:26:7b:03:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B80CC6B02BB4525CA87C82E224988CEEA1F809
        Validity
            Not Before: Oct  8 23:34:26 2026 GMT
            Not After : Oct  7 23:39:26 2027 GMT
        Subject: CN=66F078BD3F3C7D9301F22952893A9AAD94934D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:8b:0b:ba:82:d4:cd:4d:89:43:fb:92:ea:
                    d7:ce:83:fe:a3:2f:1b:93:33:6e:95:88:b8:3e:24:
                    fb:92:dc:fc:62:9f:cc:1b:62:b7:5b:5b:a8:f4:3f:
                    05:6f:f7:22:72:b6:34:57:30:1f:63:42:34:d5:47:
                    bb:c6:35:43:7f:72:4c:01:4c:a8:8c:8a:e8:d3:de:
                    57:f8:ed:e3:93:12:6f:40:0b:93:3c:1f:6e:83:e7:
                    8b:20:70:cf:9b:f1:42:4d:c7:94:8a:ea:3f:7b:07:
                    54:31:6f:f4:68:de:99:61:3d:83:e4:8a:b9:84:e5:
                    a3:b4:03:91:26:8d:3f:3d:c7:95:e8:a5:09:9d:f7:
                    3d:0a:2c:ef:d6:9b:45:6e:50:59:d2:ab:17:68:2f:
                    b1:67:fc:44:65:4a:f0:63:01:10:e2:9b:ef:44:78:
                    51:44:6d:99:ee:11:54:1f:7e:18:0e:d7:75:11:c2:
                    1e:fd:ab:25:ac:52:5b:7a:fe:17:96:d1:6d:e2:c5:
                    01:24:07:95:22:de:22:60:96:96:55:f7:a9:da:e2:
                    24:9e:41:17:d6:8a:60:81:1c:c0:fc:cd:1f:99:2e:
                    5f:c9:60:99:67:4a:8b:9a:e0:ba:be:aa:de:66:db:
                    1d:f0:b9:e7:7f:e9:17:39:9d:ad:4a:b4:14:dd:7f:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F0:78:BD:3F:3C:7D:93:01:F2:29:52:89:3A:9A:AD:94:93:4D:10
            X509v3 Authority Key Identifier:
                keyid:84:B8:0C:C6:B0:2B:B4:52:5C:A8:7C:82:E2:24:98:8C:EE:A1:F8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B80CC6B02BB4525CA87C82E224988CEEA1F809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0CA759B8199E5906366E9FAA851E79C0B9FE535F6D9863A2EA90A0AAFBA36B29/0/323830313a31353a313830313a3a2f34382d3438203d3e20323732303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:18:93:a7:85:83:c8:76:30:17:90:0d:49:6e:59:ea:8a:
         64:43:5c:28:27:28:f1:45:bc:6e:de:9b:81:61:a8:5d:58:59:
         a2:83:97:b0:53:5d:0d:4f:8b:da:0d:70:3a:40:95:28:b3:23:
         a5:67:5a:49:32:e2:83:a3:11:a8:be:ff:e6:34:74:ef:12:4e:
         69:0d:72:ef:f5:9d:9e:70:3c:72:6e:5c:cc:32:8d:95:80:e3:
         6d:ea:a0:45:24:2e:24:eb:aa:a6:52:fa:cf:b0:92:68:b8:6e:
         08:6e:58:4a:7c:b1:2b:8a:b3:f7:9d:c2:63:b2:7f:00:17:2d:
         c3:5e:fe:5f:9a:b3:50:67:6c:a9:b4:30:92:45:64:87:50:82:
         c2:81:0c:83:0b:aa:b1:a7:ef:8f:21:73:22:6e:ac:27:51:63:
         64:ca:f0:cc:13:13:48:65:c0:e0:bc:dc:26:0b:46:b8:6f:fa:
         54:a6:2e:a7:26:a3:bf:6c:49:56:c9:18:36:ce:8a:99:93:6d:
         b5:8b:57:28:32:20:1d:2d:7f:23:f6:30:07:ed:d5:75:1b:38:
         c5:81:da:aa:21:d3:6b:8a:82:bd:a0:b6:bc:98:97:5a:5b:54:
         8f:84:0d:81:33:b7:59:39:6d:d6:f6:03:b1:76:cc:a0:e4:d8:
         eb:e7:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:23:43 2026 by rpki-client