Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          RSF6ebaYEgk///kcI/IlE12nWnbC1pQuRBrR3jEfrv8=
Subject key identifier:   BE:37:EB:77:53:DD:6B:64:53:0B:61:4B:BB:13:59:FF:DB:78:41:38
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       786F1A848BAAAFD946B8AB1E7F5A75FDA5A6ECA8
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 12:41:54 +0000
ROA not before:           Mon 19 Oct 2026 12:36:54 +0000
ROA not after:            Mon 18 Oct 2027 12:41:54 +0000
asID:                     262249
IP address blocks:        2801:140:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6f:1a:84:8b:aa:af:d9:46:b8:ab:1e:7f:5a:75:fd:a5:a6:ec:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 12:36:54 2026 GMT
            Not After : Oct 18 12:41:54 2027 GMT
        Subject: CN=BE37EB7753DD6B64530B614BBB1359FFDB784138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:73:9a:94:bf:69:30:b3:9a:9d:fb:ad:a5:
                    57:ba:06:05:b3:64:35:7d:63:38:28:b5:82:75:31:
                    37:c1:89:b4:cd:4c:89:74:53:97:a9:4b:f2:a7:85:
                    e4:6c:c3:ad:e7:28:5a:67:7a:27:d6:b3:2e:2e:2c:
                    63:fa:37:28:38:c0:9f:3d:22:f3:e9:51:60:f3:09:
                    62:1d:dc:84:31:69:06:e7:73:1e:fa:cc:74:0c:1d:
                    e8:0a:72:03:c7:69:aa:00:45:7f:c3:d6:56:28:cb:
                    06:e1:84:84:29:37:23:a4:be:c5:77:02:9c:8a:68:
                    69:10:a6:1c:6a:7b:16:40:e5:ff:27:9d:3c:99:86:
                    51:e1:c3:50:b8:fe:4d:dc:eb:f0:a2:5e:19:c6:92:
                    2f:f0:26:17:db:53:4b:7b:ba:fb:33:6e:04:75:6a:
                    ee:92:12:1e:37:47:43:ce:d2:46:a7:d7:8d:66:06:
                    03:15:95:75:44:40:14:10:77:6e:08:46:08:55:f8:
                    f8:d4:eb:6c:a7:8f:de:cf:72:61:cb:a1:04:95:77:
                    f0:18:b8:ee:38:5d:a1:0c:ea:3d:9c:c3:c4:96:47:
                    22:d9:a1:a1:63:29:e7:6e:db:c9:a9:63:f4:ca:26:
                    12:92:05:78:df:6d:7d:75:aa:8a:92:49:ca:00:c5:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:EB:77:53:DD:6B:64:53:0B:61:4B:BB:13:59:FF:DB:78:41:38
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a323a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:f8:2c:59:9e:4b:8f:29:b9:6b:9c:93:e9:e6:e9:ca:3f:1b:
         6f:e6:23:f9:23:ce:a6:7f:56:96:c7:3b:0a:93:9a:c6:f2:61:
         ee:8c:1e:d4:47:ff:f7:61:61:27:2e:c4:4c:6f:a1:46:df:e6:
         28:82:92:ba:bb:92:12:02:63:a3:75:ac:f1:a8:ea:70:1b:0d:
         c2:d6:de:04:68:13:69:00:74:d7:66:6f:90:46:c1:a9:c4:af:
         52:95:e0:62:e8:8d:a7:2c:6a:66:33:aa:3a:27:15:2e:08:e6:
         18:7d:45:11:75:80:61:39:93:a8:31:42:39:79:5e:b5:37:b4:
         f4:f2:a9:41:1e:5c:a7:30:2a:bf:3f:63:eb:02:c5:10:07:b8:
         7b:3f:e3:60:47:73:27:c8:b0:5e:44:75:38:22:27:50:ff:2b:
         d4:87:68:f3:59:8c:d5:5e:d7:b5:80:d8:75:a4:b8:21:ed:ae:
         41:c4:1e:5e:56:1e:02:69:85:6d:d7:4e:bf:e6:cd:fc:cd:2f:
         4d:3f:3b:75:6e:eb:6b:95:dd:a9:5b:7d:eb:8b:dc:11:71:a4:
         0f:a2:f7:31:f9:16:56:63:f1:60:02:11:34:43:02:46:80:b7:
         21:df:44:75:fe:12:09:93:9d:9f:60:a9:2d:37:a7:f2:d2:ae:
         5f:28:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:15:37 2026 by rpki-client