Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a343830343a3a2f34382d3438203d3e203238353436.roa
File:                     323830363a3332323a343830343a3a2f34382d3438203d3e203238353436.roa (raw, json)
Hash identifier:          4ls9W/5kKrg/8KCLg+3KT9L2QkFUIOwetN30cTjbi9k=
Subject key identifier:   E0:D8:45:59:F0:EB:B4:C0:01:22:92:34:A1:D7:2D:BD:5A:74:2E:C6
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       2DE8FF39BC45062D525B792175D8829A028E8557
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a343830343a3a2f34382d3438203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:03 +0000
ROA not before:           Sat 26 Sep 2026 00:55:03 +0000
ROA not after:            Sat 25 Sep 2027 01:00:03 +0000
asID:                     28546
IP address blocks:        2806:322:4804::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e8:ff:39:bc:45:06:2d:52:5b:79:21:75:d8:82:9a:02:8e:85:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:03 2026 GMT
            Not After : Sep 25 01:00:03 2027 GMT
        Subject: CN=E0D84559F0EBB4C001229234A1D72DBD5A742EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:2d:be:9a:84:85:28:ec:db:62:f8:d5:6a:
                    f6:48:e0:c2:0e:14:8c:ea:08:2b:81:fa:07:69:40:
                    f5:35:09:5c:70:5a:da:28:e1:29:7e:e2:29:78:d1:
                    c7:d1:d7:64:3b:9b:bb:8e:01:24:dc:02:98:a6:03:
                    36:9a:85:fe:b4:b9:ba:97:01:db:fc:19:2d:ad:22:
                    8f:a5:f9:60:7d:9d:c5:a8:61:bd:f0:ab:82:d3:d6:
                    7f:9c:39:1d:f0:a3:4a:8b:e7:f0:e8:37:eb:fd:9a:
                    7b:9e:4e:a7:5c:2f:37:3f:9e:71:d9:81:7d:c8:fd:
                    e0:ed:c6:01:88:8c:be:0d:87:22:52:e1:7e:03:88:
                    68:73:5d:1e:1f:5e:b7:2b:68:4a:04:bd:37:85:6e:
                    57:59:74:f1:2b:67:d6:84:e0:7a:43:94:a1:a4:46:
                    01:c0:c0:a4:7c:37:34:78:23:f5:df:fb:33:f2:c1:
                    e5:3c:8e:82:d4:fa:f1:85:5e:26:87:97:f2:d2:ec:
                    05:8c:db:cd:45:5f:a3:f8:8f:cb:0f:41:19:c1:bd:
                    12:61:13:03:22:b0:de:cd:62:62:65:85:c0:4f:e9:
                    a0:41:36:42:d0:fe:1e:d0:8a:46:9e:58:f0:da:2e:
                    b6:c9:3e:b2:90:44:55:b1:2f:09:a6:91:bb:74:96:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:45:59:F0:EB:B4:C0:01:22:92:34:A1:D7:2D:BD:5A:74:2E:C6
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a343830343a3a2f34382d3438203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:322:4804::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:96:89:e6:f6:83:39:25:6a:7e:36:97:b1:1e:8d:e8:75:5a:
         da:56:ec:43:36:36:40:80:3a:fc:94:80:92:3e:cb:7b:ca:75:
         99:9b:0b:ea:ab:a3:dd:2e:c3:8d:1e:7a:df:87:c2:95:8a:45:
         4b:a3:f7:cc:36:e1:70:39:f4:fb:a1:13:68:4f:c6:a1:2d:da:
         84:af:75:8b:87:9c:6d:b1:b8:81:bf:82:da:69:ee:97:59:a8:
         bf:70:4b:3e:aa:7f:c4:22:b1:70:17:c7:f7:b6:ac:52:c4:28:
         75:9c:85:41:08:a6:c1:69:1c:85:f0:7f:07:98:23:82:ed:d0:
         7f:33:27:c8:35:0b:bc:e9:7b:b5:85:14:34:fc:03:95:89:33:
         c2:ee:90:4e:75:e6:99:15:a3:2a:f7:2e:68:2b:ba:b3:2b:e5:
         bd:60:9d:39:c9:96:da:73:47:d4:87:5a:95:45:93:a5:91:eb:
         f6:0f:e3:05:71:a3:04:3a:1e:0d:f9:38:66:f6:ff:5d:1f:62:
         f6:2d:16:b0:f5:f0:2a:c7:4d:f5:cd:53:45:24:b4:ca:7a:74:
         e0:4d:b7:84:09:f7:96:c0:25:5b:bb:76:a2:2f:76:d4:10:7d:
         d9:36:98:b4:fe:19:c1:e3:d1:88:fc:3c:00:16:a2:d2:80:15:
         e2:92:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:57:40 2026 by rpki-client