Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a383730313a3a2f34382d3438203d3e203238353436.roa
File:                     323830363a3332323a383730313a3a2f34382d3438203d3e203238353436.roa (raw, json)
Hash identifier:          KEo2MUgplzW15fFJODtDx4DXBFjbIqfv+VevoXxQZf4=
Subject key identifier:   2C:6B:BC:2B:10:9B:F5:0A:AE:AA:15:E4:6C:2D:F3:F7:D6:28:A6:81
Certificate issuer:       /CN=1304DD2FE71402233748074E72F35131F305B65B
Certificate serial:       50F1E764DA161BACAE149D907AD9CA6893190B71
Authority key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a383730313a3a2f34382d3438203d3e203238353436.roa
Signing time:             Sat 26 Sep 2026 01:00:05 +0000
ROA not before:           Sat 26 Sep 2026 00:55:05 +0000
ROA not after:            Sat 25 Sep 2027 01:00:05 +0000
asID:                     28546
IP address blocks:        2806:322:8701::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f1:e7:64:da:16:1b:ac:ae:14:9d:90:7a:d9:ca:68:93:19:0b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1304DD2FE71402233748074E72F35131F305B65B
        Validity
            Not Before: Sep 26 00:55:05 2026 GMT
            Not After : Sep 25 01:00:05 2027 GMT
        Subject: CN=2C6BBC2B109BF50AAEAA15E46C2DF3F7D628A681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:18:bc:95:b4:2d:96:43:28:e4:ef:78:ff:
                    bc:67:51:0a:29:f1:df:73:7f:c9:65:af:9d:bc:4e:
                    67:fa:80:ef:85:60:b8:4e:a4:33:d8:1c:62:2f:fb:
                    bb:4c:d7:77:58:9d:bd:68:e0:1b:e0:53:c6:91:0d:
                    c6:1e:31:25:38:b0:f6:d0:33:58:b2:77:45:ce:c8:
                    81:cc:81:07:7c:e7:d0:64:d1:1a:4d:c2:83:38:fe:
                    c3:93:39:f4:e3:6e:d5:a1:69:29:9d:4a:4d:f6:c4:
                    49:cf:95:e5:64:03:c4:42:3a:34:65:3f:54:48:ad:
                    3a:a2:d2:07:6e:93:b0:cb:44:2c:f3:45:a2:56:35:
                    6b:0f:66:ea:fa:8e:5e:ea:d9:4c:15:54:09:4b:04:
                    73:e1:c6:ef:01:ab:8b:15:82:75:82:95:d6:a6:02:
                    a5:10:44:bd:20:be:67:0a:ca:9b:9b:2f:fc:4c:a6:
                    03:ad:b8:2a:fc:2c:1a:98:c7:ea:c4:5c:61:c5:34:
                    11:39:b9:8b:d9:31:2e:25:e7:cb:91:5b:1e:f8:aa:
                    ef:ba:2f:d9:27:3e:7f:08:28:0b:d7:41:c2:ba:17:
                    3b:7c:f5:ac:cc:ab:6d:4f:5d:d2:0e:12:e0:9d:d9:
                    72:5e:a8:7f:68:d0:aa:0c:23:dd:2d:23:43:a9:24:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6B:BC:2B:10:9B:F5:0A:AE:AA:15:E4:6C:2D:F3:F7:D6:28:A6:81
            X509v3 Authority Key Identifier:
                keyid:13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/323830363a3332323a383730313a3a2f34382d3438203d3e203238353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:322:8701::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:95:05:b1:e5:c8:2f:e7:cf:b0:94:db:33:ad:dc:48:e9:
         c4:10:f0:e2:01:23:9a:99:06:c7:80:7b:e7:f5:22:53:56:e3:
         f3:bc:79:f7:08:78:7d:5d:a8:32:34:66:1e:e5:ea:80:6b:97:
         95:e3:5c:9b:bd:b5:57:1c:c3:24:c9:cb:b8:6e:da:74:d3:a4:
         cf:89:ee:f6:ba:24:55:59:52:f6:bf:6f:d9:98:63:aa:23:9c:
         56:af:9d:86:cc:18:a4:bc:0a:0e:c0:eb:fd:2e:6e:bc:f5:52:
         a9:37:c6:67:5a:f8:63:60:b3:2a:f5:9d:7d:95:ad:8d:3f:33:
         5b:1c:d8:45:df:27:9d:80:54:de:24:8a:c0:d8:0a:cc:eb:6e:
         a6:95:16:dd:c8:7e:a1:53:f7:45:c9:85:5f:49:c3:a3:3d:03:
         ef:ef:71:b2:a6:4c:e6:1a:8d:cd:3f:d3:2a:64:86:7e:c4:9b:
         6d:e2:a4:7b:f5:a4:dc:6e:bd:87:78:d2:34:e5:8a:6f:b0:49:
         91:88:39:ad:3f:4f:20:29:c1:f4:9f:e1:88:b6:0e:0b:2c:73:
         dd:b9:81:18:ea:20:da:26:42:78:0e:8a:8b:93:28:ea:93:33:
         2c:5b:c4:96:f5:1b:ed:cc:94:9c:88:9f:5e:cf:4a:19:26:20:
         b5:cb:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:50 2026 by rpki-client