Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313030303a3a2f34382d3438203d3e203238353436.roa
File:                     323830363a3332323a313030303a3a2f34382d3438203d3e203238353436.roa (raw, json)
Hash identifier:          0eHw3QEpF0e+rJkzaXNcClkFMwYOXRIuxSxqNk++ztA=
Subject key identifier:   CF:5A:71:2A:AA:F8:FA:36:33:24:70:70:8A:9A:0E:12:5A:68:06:27
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       0F8C8F281195991EAEBA94151A39CA3004A546EE
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313030303a3a2f34382d3438203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:08 +0000
ROA not before:           Sat 26 Sep 2026 00:55:08 +0000
ROA not after:            Sat 25 Sep 2027 01:00:08 +0000
asID:                     28546
IP address blocks:        2806:322:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8c:8f:28:11:95:99:1e:ae:ba:94:15:1a:39:ca:30:04:a5:46:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:08 2026 GMT
            Not After : Sep 25 01:00:08 2027 GMT
        Subject: CN=CF5A712AAAF8FA36332470708A9A0E125A680627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:1f:45:55:88:e0:92:f2:68:e1:1f:fa:c3:
                    db:11:a6:fc:09:49:c7:3c:a9:01:d6:7f:a4:b9:47:
                    07:c8:e7:56:38:59:9d:47:e1:d3:3c:e8:71:d7:c9:
                    b1:30:50:2f:90:5f:69:86:61:6d:51:57:92:e7:2c:
                    89:bf:82:19:35:a9:e2:47:9d:3d:d3:72:e5:87:2c:
                    66:c5:5e:10:05:84:ab:fa:49:a6:30:38:7d:08:c8:
                    20:f0:60:c5:03:15:d9:8a:a0:b5:62:76:da:a8:93:
                    0c:d1:5f:36:c9:b1:a9:3c:c1:76:d7:d4:22:77:98:
                    bb:64:ae:c5:eb:fd:d4:a2:41:63:1e:d1:02:62:0a:
                    26:69:13:4e:37:3e:12:6a:b5:ae:18:f3:88:77:59:
                    ef:39:2a:58:75:06:56:2c:10:4b:74:2a:33:d8:cf:
                    b5:19:f4:4e:2f:00:ea:fe:3c:9f:bc:a2:62:fe:48:
                    1b:21:e2:c2:2e:c8:e8:d1:78:89:ac:55:9a:90:b3:
                    e0:04:d0:d1:c1:12:6f:55:cc:e0:d3:07:3b:ac:cc:
                    b7:0e:9b:de:30:ae:8a:93:a4:40:ba:19:65:ca:9f:
                    fe:78:ed:74:f9:9a:7d:31:52:95:82:93:38:06:27:
                    6a:19:96:60:ec:66:77:a9:7d:bf:d7:a6:61:51:28:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5A:71:2A:AA:F8:FA:36:33:24:70:70:8A:9A:0E:12:5A:68:06:27
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313030303a3a2f34382d3438203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:322:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:7a:c7:3f:4f:d2:0c:69:74:5c:2b:ef:25:77:f6:07:09:4d:
         ff:2d:bf:da:ad:18:3d:8e:22:91:f2:44:17:95:6b:21:16:ed:
         45:b0:9c:67:ae:ea:68:95:91:4b:80:5d:23:9e:28:41:96:a3:
         6b:7e:91:b3:06:f0:e5:64:d8:4d:5b:8f:2a:b3:5e:9b:ff:39:
         c4:79:c2:4e:51:cd:15:e8:8b:46:25:ea:a1:be:1b:ad:7b:94:
         4c:86:d1:03:35:64:af:fb:18:34:56:17:ca:f3:5d:0a:84:16:
         37:7c:ce:d6:52:70:11:42:37:91:98:39:52:6f:a3:ea:c0:ca:
         3a:6f:8a:60:e3:e3:36:6b:a0:67:59:47:c5:fc:cb:56:82:c8:
         b7:c8:76:f5:c6:f5:2d:d2:a9:6b:46:92:c3:11:ea:67:b8:24:
         a5:c2:51:86:1a:ea:fc:80:8e:68:49:55:a4:59:d3:18:e4:f4:
         a8:ac:68:46:0f:c5:1d:e3:ed:57:0c:e8:73:9a:8c:6e:13:13:
         6d:4a:67:3f:57:a8:8c:55:e7:44:14:db:36:a3:71:c3:9d:28:
         3f:df:57:8f:05:22:65:de:51:fd:d5:a0:56:27:d0:5e:07:72:
         70:2f:a4:da:39:ca:91:38:54:ae:9f:4c:0e:af:e9:6c:61:63:
         63:bd:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 01:16:02 2026 by rpki-client