Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/323830313a3132363a3a2f34342d3434203d3e20323632353839.roa
File:                     323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (raw, json)
Hash identifier:          Z9kwP0FwpAseO/dcyQPuo+zaM5tKIh6jbqLWg2y6Gmo=
Subject key identifier:   24:27:0A:9D:69:F9:FE:D8:71:A3:FB:A6:C4:68:42:B0:5C:D6:CB:E4
Certificate issuer:       /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Certificate serial:       124D04BDAB26A9CE84A4A4665D0011AB391E98E9
Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/323830313a3132363a3a2f34342d3434203d3e20323632353839.roa
Signing time:             Fri 19 Sep 2025 21:47:37 +0000
ROA not before:           Fri 19 Sep 2025 21:42:37 +0000
ROA not after:            Fri 18 Sep 2026 21:47:37 +0000
asID:                     262589
IP address blocks:        2801:126::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 23:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4d:04:bd:ab:26:a9:ce:84:a4:a4:66:5d:00:11:ab:39:1e:98:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
        Validity
            Not Before: Sep 19 21:42:37 2025 GMT
            Not After : Sep 18 21:47:37 2026 GMT
        Subject: CN=24270A9D69F9FED871A3FBA6C46842B05CD6CBE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:93:93:19:66:4c:1e:eb:60:57:50:4d:cf:
                    7f:c7:2b:9d:13:18:e0:83:a2:8f:f2:c9:04:44:d2:
                    24:70:3f:88:be:b3:47:6e:74:64:32:5e:a4:bd:4d:
                    cc:cc:28:c4:3e:06:2f:57:fb:d5:f3:2f:18:56:33:
                    69:30:6f:5d:2e:5d:bb:24:25:15:01:b6:55:91:8f:
                    d3:17:48:c6:08:f8:84:a2:28:3d:94:29:09:0f:b3:
                    e2:1c:9d:0f:7d:80:21:98:4e:a5:e5:6a:d3:71:52:
                    8a:b5:5e:96:a3:6d:76:dc:db:e9:26:68:dc:39:54:
                    80:a1:33:67:92:8c:14:3a:85:44:f0:f0:68:21:45:
                    90:11:20:af:6b:d9:04:ea:d8:af:54:d3:ac:e4:6d:
                    e0:95:39:37:4d:c6:c8:ca:49:a4:ab:6f:d9:19:44:
                    9c:2f:6a:06:b8:c3:30:dc:43:20:a7:22:f2:a1:af:
                    5b:e6:61:96:75:4f:f7:32:ae:ac:82:af:48:d9:67:
                    29:b4:c0:53:33:b4:72:90:e0:ed:c3:0b:ae:79:8f:
                    1a:a7:ab:c9:6e:87:29:44:b7:35:40:24:3e:86:b4:
                    eb:8c:ce:b9:24:de:55:37:89:c8:86:44:05:a7:63:
                    46:8b:09:e3:ac:2c:8c:59:c5:3e:a2:3a:bb:58:1c:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:0A:9D:69:F9:FE:D8:71:A3:FB:A6:C4:68:42:B0:5C:D6:CB:E4
            X509v3 Authority Key Identifier:
                keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/323830313a3132363a3a2f34342d3434203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:126::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:77:fc:0a:41:c3:69:01:7f:9a:2c:69:d6:aa:57:e5:cc:98:
         8e:3f:11:f8:3a:d8:6f:c2:04:45:6e:38:8e:00:19:25:b7:be:
         23:ab:05:81:b5:c7:17:3a:7b:65:d0:11:0d:c8:ec:49:4b:bb:
         ba:07:04:ff:60:53:75:6b:e6:72:3b:d7:32:07:ff:4c:68:80:
         fd:e7:9d:50:c1:73:ba:44:41:75:9c:94:ad:a8:8c:0a:11:63:
         e1:64:18:60:f8:c0:73:69:b5:0e:45:4f:09:36:a5:a2:dc:c7:
         7d:71:54:e0:32:56:65:81:05:be:25:8e:48:a9:24:f0:ee:46:
         2d:e1:1d:22:a9:28:72:53:bd:c2:d8:42:3b:94:60:f3:9d:0e:
         82:e6:17:a2:10:ae:71:9d:e9:c5:f2:62:61:29:51:37:45:75:
         c4:e5:60:12:38:18:15:ed:01:5b:17:b5:1f:b5:e6:97:fe:bd:
         2f:d4:84:58:20:5d:b3:f1:df:83:f0:48:8c:7d:2a:55:a8:45:
         50:f1:58:20:8c:37:f3:f8:74:09:42:b3:f5:a1:d6:3d:43:25:
         e0:58:d3:49:93:38:d5:ef:62:21:f2:58:39:ac:e0:73:be:77:
         f8:fa:ab:2a:8a:95:0f:3c:02:91:8c:24:d3:85:7a:29:1c:68:
         98:bd:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:08:12 2025 by rpki-client