Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313230303a3a2f34382d3438203d3e203238353436.roa
File:                     323830363a3332323a313230303a3a2f34382d3438203d3e203238353436.roa (raw, json)
Hash identifier:          PqqhHO6kXlYyWXeuj2JFbdk7I801Cma2zT6+31WY4S8=
Subject key identifier:   8C:07:2F:7D:23:C6:A0:55:67:17:9B:B4:8D:16:76:D7:49:E6:B1:9A
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       25179C65E37B49B2DC8F623D89C2B0F08403B622
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313230303a3a2f34382d3438203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:06 +0000
ROA not before:           Sat 26 Sep 2026 00:55:06 +0000
ROA not after:            Sat 25 Sep 2027 01:00:06 +0000
asID:                     28546
IP address blocks:        2806:322:1200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:17:9c:65:e3:7b:49:b2:dc:8f:62:3d:89:c2:b0:f0:84:03:b6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:06 2026 GMT
            Not After : Sep 25 01:00:06 2027 GMT
        Subject: CN=8C072F7D23C6A05567179BB48D1676D749E6B19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:d0:4d:1e:ff:0e:2f:9b:d6:fe:cd:74:a6:
                    dc:60:d5:c2:52:99:d4:6e:37:29:70:e6:2b:a3:79:
                    da:2a:7a:e7:c5:b4:ac:87:95:3d:33:5a:a7:c6:c8:
                    9b:83:d3:e2:59:31:21:b7:52:5d:22:ff:34:ab:4c:
                    cb:ff:03:f9:76:00:85:15:2f:32:48:13:2d:c5:fc:
                    35:5a:31:3a:a9:34:60:69:a7:7f:12:31:40:1a:34:
                    bf:04:f6:3d:f9:cc:19:f5:15:5c:01:1d:e5:1e:a8:
                    1b:57:15:e1:54:62:ca:ec:25:9c:9c:b3:04:7c:fb:
                    9e:d5:e1:07:9e:68:01:50:da:b2:cc:28:d8:71:a7:
                    9b:88:18:98:ad:ed:5a:a8:4b:5a:23:22:81:dc:68:
                    9c:e7:24:93:20:53:ae:5d:ba:e8:26:55:8d:2a:71:
                    35:a6:6b:23:99:32:eb:29:dd:4d:0b:c0:d2:19:2b:
                    5d:4f:bd:b1:1a:97:14:14:a3:36:15:80:00:1b:f7:
                    32:af:0b:42:5b:22:ab:1c:8c:16:04:51:09:93:35:
                    70:02:55:52:1e:06:66:fc:44:0e:fd:ef:85:cf:21:
                    c6:48:d3:43:59:da:ec:0c:a8:ae:03:c5:b6:5e:30:
                    a5:f2:d2:cf:66:9e:ac:d6:a0:80:2e:d7:df:20:f8:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:2F:7D:23:C6:A0:55:67:17:9B:B4:8D:16:76:D7:49:E6:B1:9A
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a313230303a3a2f34382d3438203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:322:1200::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:78:58:21:48:6d:55:48:f3:2e:4c:a6:cd:f3:91:98:a4:a8:
         6d:b2:17:fd:8a:fc:15:04:37:8a:71:d0:a3:44:9b:35:ad:ea:
         75:40:9e:de:cf:64:99:a9:06:d4:2e:63:34:f2:31:28:37:1c:
         03:db:da:5d:ec:19:50:92:9f:38:2b:1c:f5:fe:92:0b:a4:75:
         30:ad:41:f5:2b:df:f9:d0:70:14:70:d8:12:96:7e:c6:bb:3f:
         7d:1a:74:14:62:de:14:ea:33:e0:61:e3:8b:1c:c3:ed:c4:b1:
         e4:83:a3:04:54:a6:83:8e:ce:e6:a5:a6:b1:d3:5f:5e:7d:34:
         52:88:33:51:76:db:03:79:a6:32:16:55:a8:4a:cb:d8:3d:98:
         19:6e:2d:0e:21:c0:03:27:c6:70:40:79:55:37:00:b3:70:5d:
         80:dd:20:0f:09:12:5c:3f:95:47:84:3e:84:8c:52:20:67:6a:
         25:e3:77:cc:4e:d7:ac:e0:f2:8d:1d:bf:c7:d5:51:3f:3c:ab:
         33:2c:0a:2a:a3:4b:9c:61:be:8d:0a:98:aa:fd:77:fb:2d:c3:
         13:ce:1d:53:ee:a1:42:5a:5f:a3:ff:db:14:31:19:b8:66:87:
         3b:b6:b5:67:15:09:48:2d:31:82:b5:06:11:0c:b4:81:24:6b:
         9c:4b:09:f4
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUJRecZeN7SbLcj2I9icKw8IQDtiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNEREMkZFNzE0MDIyMzM3NDgwNzRFNzJGMzUxMzFG
MzA1QjY1QjAeFw0yNjA5MjYwMDU1MDZaFw0yNzA5MjUwMTAwMDZaMDMxMTAvBgNV
BAMTKDhDMDcyRjdEMjNDNkEwNTU2NzE3OUJCNDhEMTY3NkQ3NDlFNkIxOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuytBNHv8OL5vW/s10ptxg1cJS
mdRuNylw5iujedoqeufFtKyHlT0zWqfGyJuD0+JZMSG3Ul0i/zSrTMv/A/l2AIUV
LzJIEy3F/DVaMTqpNGBpp38SMUAaNL8E9j35zBn1FVwBHeUeqBtXFeFUYsrsJZyc
swR8+57V4QeeaAFQ2rLMKNhxp5uIGJit7VqoS1ojIoHcaJznJJMgU65duugmVY0q
cTWmayOZMusp3U0LwNIZK11PvbEalxQUozYVgAAb9zKvC0JbIqscjBYEUQmTNXAC
VVIeBmb8RA7974XPIcZI00NZ2uwMqK4DxbZeMKXy0s9mnqzWoIAu198g+BApAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUjAcvfSPGoFVnF5u0jRZ210nmsZowHwYDVR0j
BBgwFoAUEwTdL+cUAiM3SAdOcvNRMfMFtlswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODk5NkNEMjY1QkEzNDIwQjJDQjIwM0Y1NTQzNTI2RUM5
RTVBREIzRTMzRDk5REE4REVCMzFEQTIzMjIzRUVCLzAvMTMwNEREMkZFNzE0MDIy
MzM3NDgwNzRFNzJGMzUxMzFGMzA1QjY1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzA0REQyRkU3MTQwMjIzMzc0
ODA3NEU3MkYzNTEzMUYzMDVCNjVCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg5OTZDRDI2NUJBMzQyMEIyQ0IyMDNGNTU0MzUyNkVDOUU1QURCM0Uz
M0Q5OURBOERFQjMxREEyMzIyM0VFQi8wLzMyMzgzMDM2M2EzMzMyMzIzYTMxMzIz
MDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzODM1MzQzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgGAyISADANBgkqhkiG9w0BAQsFAAOCAQEAJ3hYIUhtVUjzLkymzfORmKSobbIX
/Yr8FQQ3inHQo0SbNa3qdUCe3s9kmakG1C5jNPIxKDccA9vaXewZUJKfOCsc9f6S
C6R1MK1B9Svf+dBwFHDYEpZ+xrs/fRp0FGLeFOoz4GHjixzD7cSx5IOjBFSmg47O
5qWmsdNfXn00UogzUXbbA3mmMhZVqErL2D2YGW4tDiHAAyfGcEB5VTcAs3BdgN0g
DwkSXD+VR4Q+hIxSIGdqJeN3zE7XrODyjR2/x9VRPzyrMywKKqNLnGG+jQqYqv13
+y3DE84dU+6hQlpfo//bFDEZuGaHO7a1ZxUJSC0xgrUGEQy0gSRrnEsJ9A==
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:47 2026 by rpki-client