Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/323830313a3132363a3a2f34342d3434203d3e20323632353839.roa
File:                     323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (raw, json)
Hash identifier:          2gWF59Wvy07OOXzScQYgkND9sXbj4I+T9igAkpCJGPk=
Subject key identifier:   35:B2:15:32:CB:27:DE:40:0B:A2:98:55:CE:62:C7:8B:13:E9:DD:AF
Certificate issuer:       /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Certificate serial:       138089944976781AC4229E90C4D3E1B3211669B9
Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/323830313a3132363a3a2f34342d3434203d3e20323632353839.roa
Signing time:             Fri 21 Aug 2026 22:26:21 +0000
ROA not before:           Fri 21 Aug 2026 22:21:21 +0000
ROA not after:            Fri 20 Aug 2027 22:26:21 +0000
asID:                     262589
IP address blocks:        2801:126::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:80:89:94:49:76:78:1a:c4:22:9e:90:c4:d3:e1:b3:21:16:69:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
        Validity
            Not Before: Aug 21 22:21:21 2026 GMT
            Not After : Aug 20 22:26:21 2027 GMT
        Subject: CN=35B21532CB27DE400BA29855CE62C78B13E9DDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:68:8b:d0:09:d9:56:74:33:0e:f5:ab:11:35:
                    3d:7e:7c:b4:38:70:c1:c0:cd:e2:e5:84:5d:ec:ac:
                    c2:a6:b5:31:1f:29:b1:f3:7b:4b:43:a2:da:b2:25:
                    2d:ef:23:da:16:79:50:90:de:dd:64:7f:d7:50:df:
                    78:cc:06:ed:5d:9a:fc:ee:4d:b7:09:d1:51:7d:30:
                    4f:80:ce:50:8f:c5:61:73:34:47:c7:53:05:a0:d1:
                    19:1d:19:a4:fd:26:a1:4b:e9:a7:70:7e:89:d9:0b:
                    4b:17:e2:c8:43:27:ee:65:2a:f7:1f:c0:2e:98:2a:
                    89:ef:02:2a:03:bc:37:82:70:71:80:22:72:8a:56:
                    f0:66:5b:7e:63:a1:b9:19:f0:7b:6f:c0:01:b6:d7:
                    49:7b:46:c6:21:f7:2e:d4:fc:b7:8f:5c:dc:ee:6f:
                    c6:7a:8e:bb:7f:82:d8:48:a1:d4:c0:98:2a:08:70:
                    b0:ed:4b:5b:dc:88:43:da:e3:53:6f:29:2f:19:73:
                    dd:83:31:ac:da:46:02:30:6a:c1:a4:78:d8:2c:cd:
                    51:fe:13:8b:ba:51:2b:70:ef:55:37:80:1a:39:6a:
                    33:fd:23:04:cf:9c:72:5d:65:33:94:ec:dc:a8:e0:
                    23:fb:45:cc:5d:3f:39:09:4a:ec:c6:1c:9b:0d:59:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B2:15:32:CB:27:DE:40:0B:A2:98:55:CE:62:C7:8B:13:E9:DD:AF
            X509v3 Authority Key Identifier:
                keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/323830313a3132363a3a2f34342d3434203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:126::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:ea:c1:fc:7a:e1:3d:f6:d4:21:21:c6:4c:d2:1c:65:ca:
         d9:63:77:59:37:44:95:99:25:ef:fc:c1:9b:0f:b0:04:76:89:
         be:3b:f5:62:c9:9f:2f:4f:48:83:35:1f:4d:9c:75:b8:22:36:
         4d:9f:62:75:09:58:5a:d4:97:e8:b2:c4:7e:0c:dd:18:71:21:
         6f:3e:87:59:85:df:90:dc:fc:c8:ec:aa:4c:fc:dd:a8:5c:f9:
         9c:14:26:3d:e5:8b:e5:bd:e7:94:85:d5:38:46:06:2c:c7:b9:
         6f:8f:9c:b5:93:6c:3a:05:17:fe:f8:ea:39:b5:53:0c:09:95:
         ea:e3:fe:6f:63:cd:d6:72:16:08:b4:8c:91:95:86:8b:48:d5:
         7b:7c:0a:96:e4:8f:8d:a4:1b:b3:93:ea:c1:60:5a:1f:00:f4:
         47:f2:39:e4:83:35:d6:26:bc:0d:4d:dd:f5:32:4e:ac:f9:24:
         d1:19:cf:8e:10:99:2b:50:91:7b:d8:1b:e2:57:47:8e:75:11:
         0c:1f:47:21:9b:1a:87:29:86:8f:a1:fa:8e:b2:2e:66:3f:1e:
         e5:2d:dd:53:66:37:e2:f6:18:5a:ad:4c:d7:b0:90:d4:51:34:
         01:fd:94:cc:27:73:3a:29:3c:91:bd:a3:a6:03:1b:9e:2c:d2:
         dc:61:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:47:03 2026 by rpki-client