Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313034303a3a2f34382d3438203d3e203238353436.roa
File:                     323830363a3332323a313034303a3a2f34382d3438203d3e203238353436.roa (raw, json)
Hash identifier:          W6tC4VXnWFWc1l/L/HD79HwJdWtN1uw/VfzkS4M1DfU=
Subject key identifier:   A3:68:43:A1:8B:3D:8B:F1:49:91:80:A5:EC:04:26:7D:76:7A:9F:8B
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       144EACA39B7275CF5D711BE97DF0842B06BC8C83
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313034303a3a2f34382d3438203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:01 +0000
ROA not before:           Sat 26 Sep 2026 00:55:01 +0000
ROA not after:            Sat 25 Sep 2027 01:00:01 +0000
asID:                     28546
IP address blocks:        2806:322:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4e:ac:a3:9b:72:75:cf:5d:71:1b:e9:7d:f0:84:2b:06:bc:8c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:01 2026 GMT
            Not After : Sep 25 01:00:01 2027 GMT
        Subject: CN=A36843A18B3D8BF1499180A5EC04267D767A9F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:fe:07:64:9f:90:bd:ec:31:ba:07:3f:36:
                    f4:7f:08:83:86:93:30:c5:c6:41:9d:4c:03:a2:f7:
                    05:e4:f3:10:5e:d7:c2:62:10:9f:53:9f:83:4a:a4:
                    c0:5a:07:83:a0:11:e6:e7:40:51:18:01:33:0e:36:
                    f1:a6:a1:6e:a1:45:eb:b0:0c:7c:c4:c7:0c:a9:64:
                    12:2c:63:34:f6:cb:6a:77:7d:24:1a:d5:17:f0:d2:
                    4a:30:8f:ce:a6:35:bf:17:4f:1c:07:b7:18:29:ea:
                    d5:bb:b1:60:9a:49:42:d6:a1:88:86:52:cb:94:3d:
                    1b:1b:22:3e:f3:df:fb:48:29:03:2b:3e:77:6e:1d:
                    b0:36:87:4d:e5:b8:da:7d:a1:20:18:5e:c5:71:2e:
                    74:f7:46:99:32:73:99:78:20:4c:3b:b2:99:40:d3:
                    76:6b:76:82:4b:01:f1:7e:b1:b5:3c:00:02:45:52:
                    51:3f:95:e7:86:43:e6:6d:4c:26:ab:8c:39:b7:0b:
                    93:87:dd:7f:48:7d:3e:5d:64:2a:47:79:33:4a:89:
                    13:99:d4:9b:60:39:ce:6c:71:13:7b:e1:af:b0:95:
                    64:89:df:5d:ec:e9:99:28:ff:fc:2a:74:28:aa:1f:
                    d5:ba:84:3d:68:4b:d3:d7:55:7b:ee:c4:52:29:33:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:43:A1:8B:3D:8B:F1:49:91:80:A5:EC:04:26:7D:76:7A:9F:8B
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313034303a3a2f34382d3438203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:322:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:7e:ba:37:1a:31:55:6a:2b:97:ad:a4:71:c3:31:d9:c2:42:
         7c:e2:12:da:35:20:f8:1f:90:33:4b:cc:72:82:8c:18:f8:84:
         40:2b:48:59:88:94:46:5e:36:c7:6f:93:82:95:7d:a4:cf:b8:
         82:b2:a6:3d:87:7f:97:14:2b:93:77:87:75:57:be:76:a4:df:
         26:f8:dc:13:49:7d:75:f9:93:0b:13:97:4a:fc:38:8c:18:19:
         d7:41:a2:cc:45:76:60:a5:1b:4c:e1:e5:94:f1:91:26:79:91:
         0a:b1:98:13:e3:60:9f:53:cb:a4:66:63:ae:e1:f8:ad:d5:d1:
         28:8f:4c:b5:ed:00:71:a0:3b:c9:d6:c0:82:23:49:71:cc:52:
         22:e3:96:bd:2c:e5:51:44:2c:44:e7:26:92:3b:72:bf:fc:cf:
         44:98:de:d9:65:fa:46:8b:93:ee:d6:87:f0:c3:17:4c:71:89:
         31:b9:af:ff:b7:17:e9:fe:4c:39:a4:52:24:b5:14:ce:0d:57:
         37:f1:ce:94:19:cf:77:88:fc:10:c5:e6:d1:25:df:55:3f:05:
         58:0b:30:34:95:66:d7:b5:ac:37:c0:92:fd:05:76:6c:4a:1d:
         fc:3e:af:41:89:e4:c0:0c:ed:33:ee:ad:ab:f4:7a:9f:fd:21:
         a7:4e:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:45:16 2026 by rpki-client