Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313030313a3a2f34382d3438203d3e203238353436.roa
File:                     323830363a3332323a313030313a3a2f34382d3438203d3e203238353436.roa (raw, json)
Hash identifier:          ZixUWN4TW+giNYNyrWNh6xH12HyUADymh9gNVkXp6yA=
Subject key identifier:   F5:FA:8A:74:B9:9B:D7:C1:FC:9A:39:84:D9:0C:E8:8D:00:8C:42:F9
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       45B9CB59B9CF78C9F2A5427A03F4C1AA1EF2C901
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313030313a3a2f34382d3438203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:03 +0000
ROA not before:           Sat 26 Sep 2026 00:55:03 +0000
ROA not after:            Sat 25 Sep 2027 01:00:03 +0000
asID:                     28546
IP address blocks:        2806:322:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b9:cb:59:b9:cf:78:c9:f2:a5:42:7a:03:f4:c1:aa:1e:f2:c9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:03 2026 GMT
            Not After : Sep 25 01:00:03 2027 GMT
        Subject: CN=F5FA8A74B99BD7C1FC9A3984D90CE88D008C42F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:4e:13:ae:30:f9:19:0a:8a:cc:61:47:fe:
                    d9:82:91:1e:1c:49:5e:36:a8:dd:4c:d6:b5:0b:db:
                    99:37:f0:32:a0:c2:21:64:8e:ad:45:da:08:4f:b1:
                    fc:e3:f3:65:cd:51:27:d1:7d:cc:0e:fb:01:47:c8:
                    21:60:7e:16:c7:e5:f6:53:0b:2e:44:13:e8:99:7f:
                    b9:c3:b6:37:99:04:9d:0f:85:75:dd:7c:1d:28:04:
                    ff:8c:2c:31:0b:b0:8d:d6:47:b8:b0:c6:99:ed:12:
                    a7:94:19:7a:34:3b:73:0b:19:81:1a:22:ca:25:bf:
                    4d:96:07:8b:fe:c2:2b:b7:e3:7e:95:a6:5e:24:85:
                    11:5b:50:5b:3f:a6:bb:76:bf:17:65:4a:85:ba:56:
                    c9:4f:48:75:76:ba:59:a8:e3:b3:d7:27:e7:a5:7b:
                    c3:c2:f8:96:9c:cd:5c:9a:db:fc:b9:84:64:07:c6:
                    1d:a7:65:f9:66:b5:6f:07:14:e1:9e:52:e4:76:86:
                    f1:af:99:ab:cc:17:dc:9f:d8:84:d0:23:d6:52:6c:
                    b4:d2:2e:9c:49:e2:52:b4:62:d4:94:c6:4a:4a:66:
                    86:00:5c:cb:28:4c:e7:f7:18:b0:d6:d6:ad:c8:66:
                    5f:3a:19:2d:ac:26:2e:63:4e:54:4b:6a:e8:78:84:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:8A:74:B9:9B:D7:C1:FC:9A:39:84:D9:0C:E8:8D:00:8C:42:F9
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313030313a3a2f34382d3438203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:322:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:93:a2:2f:c0:ec:32:b3:ad:06:94:a0:6e:ae:fd:29:01:e5:
         a5:0e:5e:b3:a1:c3:42:d0:3e:3c:35:1b:16:de:76:98:88:8f:
         6d:0f:32:78:a0:88:06:bc:4e:5c:13:a0:1d:55:54:fc:b2:a4:
         6f:01:5f:c7:af:1e:2e:33:f9:88:46:5d:d1:1f:5d:ee:6a:b1:
         d5:07:48:86:01:fc:f6:e6:6c:43:ef:ca:ce:c6:37:f6:3e:31:
         10:44:95:6b:ed:63:d9:31:0b:01:d4:08:bd:3c:f0:6d:67:23:
         48:bd:db:ae:2e:ba:82:d8:3b:4c:1f:96:0c:53:ca:81:ff:e5:
         88:13:19:dd:89:88:9a:03:3d:dc:02:a9:14:34:43:ee:61:61:
         3d:6b:66:e3:2f:bc:da:0d:7e:ee:9f:bf:40:1a:cd:f2:a9:c2:
         b8:35:0d:f7:47:93:da:fe:5c:b3:9a:26:ad:00:31:7a:01:e3:
         68:0c:d6:78:bf:a0:41:68:cf:2f:90:6f:a5:25:8f:05:aa:9d:
         3e:cc:a8:ab:84:f5:9f:9e:89:05:be:c1:c6:fc:35:aa:a1:2e:
         75:fd:cb:68:0b:c4:1c:b1:45:fb:39:c5:f1:0d:f3:1c:ec:f3:
         2b:3e:f6:af:90:1c:88:8e:14:0a:7f:63:c7:19:e9:42:e7:ab:
         34:d1:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:29:54 2026 by rpki-client