Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          KCKLOlmrq2lSLoX5fRCRdQNVx6X8bq8xlC6tKNXH/Is=
Subject key identifier:   23:A7:5E:91:F7:91:6A:10:C8:CC:D4:16:2A:B3:6C:27:D7:B1:42:2E
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       5D619FB572EF9F75369B3AEE702D8ACF96076BD0
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 12:41:52 +0000
ROA not before:           Mon 19 Oct 2026 12:36:52 +0000
ROA not after:            Mon 18 Oct 2027 12:41:52 +0000
asID:                     262249
IP address blocks:        2801:140:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:61:9f:b5:72:ef:9f:75:36:9b:3a:ee:70:2d:8a:cf:96:07:6b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 12:36:52 2026 GMT
            Not After : Oct 18 12:41:52 2027 GMT
        Subject: CN=23A75E91F7916A10C8CCD4162AB36C27D7B1422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e1:61:ce:3f:f0:85:76:99:e2:fc:a9:6d:c1:
                    f8:20:50:d3:d9:34:bd:7e:13:89:2c:65:fd:5b:02:
                    7b:df:7e:fe:f4:04:1d:0b:cd:51:86:37:7b:94:cf:
                    5e:a2:05:72:c4:e9:b6:64:5e:fb:b9:b9:96:fa:2a:
                    25:32:c2:aa:52:88:17:44:cf:d1:96:26:c8:8d:05:
                    11:82:7b:b4:05:c5:f5:e1:c4:cf:bc:af:dc:f6:70:
                    dd:fc:6f:d3:5e:55:35:e0:36:f8:a9:f6:d5:cc:d0:
                    56:54:fc:dc:47:32:27:56:cf:55:13:0b:0f:a3:08:
                    59:93:8e:28:c6:4a:0b:0d:3b:d8:73:51:bc:95:89:
                    57:4e:af:4c:b9:a0:18:fe:a2:56:7f:e0:9b:50:3f:
                    d9:15:e5:bd:1f:7b:f7:20:92:26:e3:ec:77:4e:ba:
                    ef:50:13:7e:fd:71:69:a5:96:d0:10:78:a9:d3:16:
                    8d:d7:24:95:55:14:16:79:76:45:0e:55:ab:01:3d:
                    f7:9f:a0:f7:cf:d6:5d:54:84:e0:9f:8c:c2:79:19:
                    9f:ea:45:f7:f7:60:46:36:07:f1:3e:24:a0:39:0c:
                    ee:b4:f5:2a:82:18:65:e4:0d:2d:97:70:80:1f:42:
                    62:a6:1b:00:21:d5:ed:e7:f1:b4:5c:a5:58:d1:6d:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A7:5E:91:F7:91:6A:10:C8:CC:D4:16:2A:B3:6C:27:D7:B1:42:2E
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:122::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:0d:95:6f:d6:dc:7f:b0:35:7c:29:d7:cd:57:a7:f1:53:
         65:66:dd:fa:48:6f:9e:5b:54:79:39:a6:dd:c9:5a:3d:46:5a:
         b2:96:3c:ef:35:1d:dc:f1:5d:00:4c:e6:53:c7:de:a6:f6:a8:
         51:6d:12:e2:9d:ea:01:f8:2c:f5:98:13:9e:c8:18:c1:83:d1:
         18:84:3a:5b:c8:ee:29:5f:d2:ad:9a:68:a8:62:c4:9f:cc:26:
         10:74:74:ea:64:87:f0:54:9d:6a:5a:6f:69:25:d4:57:47:10:
         9f:f3:d0:23:51:58:e5:03:68:7f:3e:92:4b:01:e8:3c:67:dc:
         8f:d7:69:61:fd:d6:81:8e:09:0c:31:e7:a6:0c:23:28:0f:78:
         b8:2d:b4:08:84:50:3d:80:4f:34:55:5a:39:99:ec:b5:34:fa:
         67:93:0f:b3:43:a5:30:98:df:d1:2c:3f:25:51:c4:89:cd:88:
         b6:a9:24:2c:72:eb:61:1e:50:88:01:f6:85:ea:8e:77:f8:e2:
         f5:66:9d:d2:bd:9b:c8:20:f5:ae:5d:a1:7e:03:d4:a3:67:54:
         9f:60:4f:38:e7:29:d8:6d:49:1d:de:bb:d7:85:01:20:74:06:
         6b:f9:ba:9e:f9:65:a7:eb:53:46:65:86:66:55:f7:e2:22:e2:
         1d:ee:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:05:58 2026 by rpki-client