Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a383330303a3a2f34382d3438203d3e203238353436.roa
File:                     323830363a3332323a383330303a3a2f34382d3438203d3e203238353436.roa (raw, json)
Hash identifier:          yHoE29EaupgBk0ZGw5EJJjAv0jVhg0jA+SSbfoa3S6Y=
Subject key identifier:   F2:1A:8D:EA:EB:F5:05:76:67:4F:36:EF:F0:2D:C4:9F:61:FD:97:B3
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       36DA22AAF0F634B05655B20FDF43D72FB98FEB03
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a383330303a3a2f34382d3438203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:03 +0000
ROA not before:           Sat 26 Sep 2026 00:55:03 +0000
ROA not after:            Sat 25 Sep 2027 01:00:03 +0000
asID:                     28546
IP address blocks:        2806:322:8300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:da:22:aa:f0:f6:34:b0:56:55:b2:0f:df:43:d7:2f:b9:8f:eb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:03 2026 GMT
            Not After : Sep 25 01:00:03 2027 GMT
        Subject: CN=F21A8DEAEBF50576674F36EFF02DC49F61FD97B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:8b:0c:8c:3d:3f:0c:a8:04:57:0f:fe:6f:
                    8b:aa:ed:c6:06:29:d7:2c:e8:b6:8f:57:e0:b2:ac:
                    70:01:a9:63:c3:61:9d:9a:d4:60:10:15:e2:4e:d2:
                    69:85:39:e2:07:ef:ce:cf:2e:7e:22:d0:4c:24:6b:
                    37:23:43:e8:19:ab:dc:dd:07:40:da:2f:b6:35:9e:
                    c5:1f:31:be:af:2c:a2:c0:bf:fc:d9:6b:48:21:d5:
                    5f:7d:20:3d:16:02:cf:1b:09:6e:78:0a:78:81:ce:
                    19:cc:a4:0c:1b:8f:17:fc:07:8f:da:2a:bc:a8:09:
                    35:61:ae:1c:8d:2f:01:6e:30:ff:19:a7:ed:04:19:
                    9b:4b:6f:3b:87:4b:ee:6b:8a:fe:98:3a:58:d2:07:
                    74:7e:fa:16:aa:19:1d:a6:09:7b:a5:62:a6:c4:a9:
                    1e:1a:32:70:c5:01:75:f7:fd:5e:c0:34:f6:30:a7:
                    0d:2c:5c:51:63:62:8e:6e:1a:4f:78:1c:0b:1b:ba:
                    40:20:24:f3:5d:86:c3:ca:7a:ed:f5:da:e9:c5:18:
                    11:69:90:63:f7:16:c0:87:89:c2:8b:58:ab:74:44:
                    63:f0:10:51:cc:27:12:a9:ee:22:5b:17:d1:e9:e2:
                    03:dc:e8:38:91:3c:d4:fe:15:59:0b:81:f8:70:86:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:8D:EA:EB:F5:05:76:67:4F:36:EF:F0:2D:C4:9F:61:FD:97:B3
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a383330303a3a2f34382d3438203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:322:8300::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:38:87:65:62:49:f6:53:48:0b:71:75:cf:e9:0d:91:81:
         ae:9e:68:f8:0b:44:af:48:8b:3f:97:66:27:d8:63:e8:38:7f:
         ea:ec:73:f8:e2:95:6d:7a:9e:a0:e7:53:64:e6:a1:1e:00:bc:
         89:7c:6c:63:75:e5:8b:c9:b4:97:76:c9:ba:ea:80:0d:ae:17:
         a9:c3:4b:f2:9b:df:77:21:97:76:3b:a9:c4:e4:c2:13:6d:80:
         b9:3c:3e:9c:2f:22:a7:1e:30:4f:c0:2f:e6:5b:b7:b5:1e:1a:
         ef:09:5c:ce:4a:fd:c8:77:c5:62:46:3d:01:4f:96:98:03:72:
         b1:9f:10:a4:ce:31:9b:02:04:ed:59:6b:41:db:ee:15:03:39:
         79:43:f5:c5:28:24:f8:51:da:c5:32:8a:19:c0:ba:02:2c:1e:
         bd:c5:9c:98:ef:40:81:47:66:ae:3d:eb:3a:75:dd:6c:08:db:
         11:ee:9a:e2:52:ea:b5:97:a5:8b:01:74:52:bd:11:e5:bd:ec:
         46:cd:dc:92:14:e9:d8:56:aa:b1:78:57:f1:1d:ae:e8:b5:30:
         29:94:09:93:b8:ff:23:6a:b6:47:2e:3f:f0:f6:1e:c4:0f:6e:
         ec:f4:ea:f5:a5:84:7f:62:a1:e9:18:a5:f7:72:47:ff:d8:42:
         58:bd:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:07:02 2026 by rpki-client