Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3FB651ECC6F60641239A877C00E1A72B3FF221B08CA206EA5AA6A78E64383ABB/0/323830313a31333a623830303a3a2f34382d3438203d3e20323639383232.roa
File:                     323830313a31333a623830303a3a2f34382d3438203d3e20323639383232.roa (raw, json)
Hash identifier:          b5H6/++QBPZTER+QZ9I1bNN2N0BhyhIFER70IUbeWsY=
Subject key identifier:   12:1C:B9:45:D5:5D:DE:0D:5E:83:05:1B:9A:98:BD:8A:0B:1C:88:A0
Certificate issuer:       /CN=419650C49B06A10691E02B373F570E84292698CE
Certificate serial:       2435D12B3E71AA27B34512E167CDB47F7DDDB1A3
Authority key identifier: 41:96:50:C4:9B:06:A1:06:91:E0:2B:37:3F:57:0E:84:29:26:98:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/419650C49B06A10691E02B373F570E84292698CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FB651ECC6F60641239A877C00E1A72B3FF221B08CA206EA5AA6A78E64383ABB/0/323830313a31333a623830303a3a2f34382d3438203d3e20323639383232.roa
Signing time:             Thu 15 Oct 2026 17:40:38 +0000
ROA not before:           Thu 15 Oct 2026 17:35:38 +0000
ROA not after:            Thu 14 Oct 2027 17:40:38 +0000
asID:                     269822
IP address blocks:        2801:13:b800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FB651ECC6F60641239A877C00E1A72B3FF221B08CA206EA5AA6A78E64383ABB/0/419650C49B06A10691E02B373F570E84292698CE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FB651ECC6F60641239A877C00E1A72B3FF221B08CA206EA5AA6A78E64383ABB/0/419650C49B06A10691E02B373F570E84292698CE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/419650C49B06A10691E02B373F570E84292698CE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:35:d1:2b:3e:71:aa:27:b3:45:12:e1:67:cd:b4:7f:7d:dd:b1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419650C49B06A10691E02B373F570E84292698CE
        Validity
            Not Before: Oct 15 17:35:38 2026 GMT
            Not After : Oct 14 17:40:38 2027 GMT
        Subject: CN=121CB945D55DDE0D5E83051B9A98BD8A0B1C88A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:f0:ca:0a:45:28:06:b0:04:21:69:96:d2:
                    70:c0:fe:90:e0:86:dd:ce:12:d9:3c:03:9f:85:c0:
                    60:e7:3a:81:6d:f0:36:6c:b8:76:ba:40:ad:36:5b:
                    77:77:10:b0:2d:4c:62:fd:f0:3f:0f:fe:8f:9a:23:
                    96:50:92:7c:67:1a:cd:c3:1a:63:c2:bb:e4:8e:75:
                    67:9b:2b:db:5d:38:4d:18:6f:69:a8:e6:45:01:c6:
                    07:31:79:27:c1:11:2c:e5:aa:7e:96:92:b3:6e:ca:
                    c0:78:81:8f:a1:7a:f1:93:06:aa:3c:33:f1:64:8c:
                    2f:47:0a:be:2b:6d:12:23:09:14:1c:71:9d:76:8c:
                    e9:9d:c7:55:10:d6:99:98:12:c5:f8:d5:10:39:25:
                    f9:cd:1d:7b:d2:05:b3:dc:f1:69:30:72:a4:6b:27:
                    60:5e:7c:2f:fb:0e:de:ab:ec:85:93:51:3a:bd:5a:
                    19:77:d3:57:4c:5d:03:4e:98:5a:51:f1:8b:66:b4:
                    0c:ee:d6:b8:b4:e5:1e:7d:af:5e:1f:68:72:b6:f6:
                    ff:cb:cd:59:0f:bf:ad:24:86:d2:29:dc:80:65:3f:
                    e8:85:5d:65:12:7a:32:8f:06:5e:c9:29:ce:5c:a9:
                    c9:ac:1a:c8:a7:c8:7e:8d:df:ab:18:9d:38:a5:97:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1C:B9:45:D5:5D:DE:0D:5E:83:05:1B:9A:98:BD:8A:0B:1C:88:A0
            X509v3 Authority Key Identifier:
                keyid:41:96:50:C4:9B:06:A1:06:91:E0:2B:37:3F:57:0E:84:29:26:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FB651ECC6F60641239A877C00E1A72B3FF221B08CA206EA5AA6A78E64383ABB/0/419650C49B06A10691E02B373F570E84292698CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/419650C49B06A10691E02B373F570E84292698CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB651ECC6F60641239A877C00E1A72B3FF221B08CA206EA5AA6A78E64383ABB/0/323830313a31333a623830303a3a2f34382d3438203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:40:36:b5:d1:01:86:25:f9:95:1a:c0:47:06:5b:61:f7:
         37:e0:50:5e:9a:ae:67:15:b6:e5:3e:c7:34:cc:19:2d:85:ad:
         2c:0e:c3:e6:a9:62:66:ac:65:44:36:d2:58:a7:41:c3:28:49:
         a3:7c:79:44:6e:43:55:f0:fe:5d:fe:d3:44:83:95:17:3f:90:
         9f:e3:64:e9:b2:f0:de:20:72:a4:61:1d:74:fe:c0:94:c6:4b:
         77:ab:da:2f:7b:21:e7:e1:e1:fa:bf:2d:fd:0d:fc:fe:b1:a1:
         0a:eb:07:79:88:f3:00:ca:8b:c8:2f:18:bc:cd:f4:6a:26:cc:
         56:f8:1a:fd:6d:33:17:2b:2a:39:7a:31:25:20:f5:f3:3e:6f:
         56:b3:8a:15:9c:5e:30:80:f1:1b:90:2e:0f:9c:fb:08:39:8b:
         47:01:5f:e9:f4:e1:83:a0:2b:25:01:51:05:ca:0d:07:7f:d6:
         fb:ec:63:2b:0b:a3:1b:23:86:6e:3c:55:06:4b:00:9d:9c:d0:
         4a:26:c6:e5:ae:fb:69:dc:ed:a9:a8:76:09:43:68:12:6c:ac:
         33:42:a0:05:09:ec:74:32:d8:ba:fb:09:a8:c4:91:f0:33:03:
         e0:51:eb:5b:b6:f8:3f:c5:c5:2e:7c:54:31:14:3c:b4:d5:99:
         ea:ec:1a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:51:45 2026 by rpki-client