Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          vJJBy9B+Dh5bFxK+q097pyU3/568B8dnPKRvVs57thg=
Subject key identifier:   2C:02:F1:0B:74:E1:10:81:83:EB:47:26:23:50:85:73:B4:7B:15:43
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       0460074C45502DA80A09DF7536123B8E592CA06E
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Fri 16 Oct 2026 14:40:45 +0000
ROA not before:           Fri 16 Oct 2026 14:35:45 +0000
ROA not after:            Fri 15 Oct 2027 14:40:45 +0000
asID:                     262249
IP address blocks:        2801:140:b149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:60:07:4c:45:50:2d:a8:0a:09:df:75:36:12:3b:8e:59:2c:a0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 16 14:35:45 2026 GMT
            Not After : Oct 15 14:40:45 2027 GMT
        Subject: CN=2C02F10B74E1108183EB472623508573B47B1543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:6f:df:fc:c3:32:ab:b3:df:5c:ec:d3:8f:
                    25:fd:94:81:2d:34:91:1a:2f:2a:de:e3:50:dd:49:
                    b9:33:c3:ec:e0:03:58:20:41:a5:4d:30:45:c0:ba:
                    c9:42:ba:63:3c:1b:5f:70:dc:ac:07:37:6e:e1:1e:
                    8a:7a:74:7c:e3:d9:92:cd:4a:ca:b4:11:a8:7b:2b:
                    98:97:b6:ef:0e:b3:f0:ee:cf:4d:c2:76:38:86:bd:
                    9c:9a:c8:10:fb:87:ab:27:fa:52:53:9e:4e:bf:9f:
                    87:cf:25:21:07:83:94:26:e3:0d:fb:e1:2a:00:b5:
                    fe:86:31:4f:26:34:98:b7:98:c6:16:f9:a7:15:8a:
                    0f:fe:b6:f8:fc:f8:84:e1:71:40:67:a3:e5:dc:b1:
                    e5:91:6c:3f:2f:cd:57:0d:98:78:81:44:b8:be:58:
                    02:d9:f0:4e:01:e5:a9:36:90:d1:b1:fe:cd:6e:b4:
                    25:c7:82:37:21:c4:06:c0:7b:0c:8d:1b:0f:b6:96:
                    4c:c9:f6:48:94:4a:b6:e0:c9:43:e9:69:53:02:e6:
                    a8:ec:64:6c:dd:46:30:d1:e5:3d:43:c7:76:89:a2:
                    22:14:c1:a4:56:7d:80:10:97:98:5f:4e:60:b1:f2:
                    bf:5f:39:cf:58:72:2e:39:e6:c0:2c:14:10:74:52:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:02:F1:0B:74:E1:10:81:83:EB:47:26:23:50:85:73:B4:7B:15:43
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a623134393a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:b149::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:76:6c:d6:ad:ba:a1:bd:42:1b:f6:34:37:e4:9c:e6:28:90:
         33:5e:35:c6:7b:8f:a3:a0:dd:e4:9e:3d:aa:48:70:d5:5c:e2:
         64:b9:f9:56:63:55:de:98:db:dc:6a:57:d7:16:15:c4:ce:d0:
         fd:e0:8e:ae:00:56:56:ed:80:4b:d5:8e:7c:e8:8b:9e:9d:dd:
         6a:07:a5:7d:29:d0:e8:e3:cc:93:fa:54:39:29:e3:f9:22:d5:
         e9:1c:86:77:33:7a:b9:c5:f3:ff:95:ca:30:a6:92:93:bf:78:
         99:6c:1d:08:00:70:64:91:1a:f9:fd:31:0c:b6:2d:e2:87:21:
         f6:3e:32:44:15:4d:8f:90:f4:9c:7e:ef:4c:26:56:cf:94:6d:
         12:51:95:48:63:ed:ce:df:3a:e0:32:3f:c1:c3:29:0d:3e:cb:
         fc:31:8d:48:61:1b:b9:c0:74:fa:3e:79:1c:40:1a:ff:ab:50:
         11:5e:57:df:96:ef:b4:8b:da:3e:01:2f:2f:1b:9d:52:af:7c:
         1e:2e:3c:7d:ae:a1:ac:81:ad:5c:62:28:6d:7f:57:44:cc:71:
         d7:b4:55:ba:ab:12:bc:f5:40:cb:07:33:35:63:8a:61:50:8a:
         d1:8b:9d:96:c7:3b:6a:44:5c:f6:07:3b:93:fa:42:4b:1c:c8:
         22:b8:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:33:19 2026 by rpki-client