Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa
File:                     323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa (raw, json)
Hash identifier:          5YRVRP8dLVzotfXBdMirSc0fI1XJri7r46ksKeuFrMU=
Subject key identifier:   91:37:4B:5E:62:BB:2A:70:1E:6B:0C:CA:78:FF:B3:4F:8E:86:51:3B
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       3F22F469C83C5D687E441F831F332F558C1E3743
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa
Signing time:             Fri 11 Sep 2026 03:34:56 +0000
ROA not before:           Fri 11 Sep 2026 03:29:56 +0000
ROA not after:            Fri 10 Sep 2027 03:34:56 +0000
asID:                     52268
IP address blocks:        2800:a80:8010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:f4:69:c8:3c:5d:68:7e:44:1f:83:1f:33:2f:55:8c:1e:37:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Sep 11 03:29:56 2026 GMT
            Not After : Sep 10 03:34:56 2027 GMT
        Subject: CN=91374B5E62BB2A701E6B0CCA78FFB34F8E86513B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:a4:ff:fc:83:28:e9:4e:a5:3a:5e:b7:94:
                    01:24:b9:5c:76:91:b1:ae:08:2e:85:29:7c:b2:c3:
                    f3:2e:10:c1:9f:aa:1b:d0:8c:4a:aa:fd:f3:ff:a4:
                    c9:a5:57:f0:48:b3:9f:34:36:e8:dc:a1:50:af:53:
                    ce:2f:18:fe:62:19:da:16:27:27:45:07:73:69:d0:
                    74:54:be:5f:c8:4f:b9:78:d2:f6:25:49:31:fb:8a:
                    dd:01:f2:9d:5b:9d:38:43:ee:f6:ee:8d:55:4f:5b:
                    18:65:c7:2c:86:96:c2:df:6f:9d:a2:39:ad:e9:29:
                    38:ac:31:0a:aa:49:30:b0:2c:d8:e8:ab:eb:c6:eb:
                    b0:e6:24:68:15:5d:9f:ec:b0:f2:ce:f5:07:a5:85:
                    89:28:c4:19:0c:9f:96:43:9d:ed:92:4d:d7:0a:58:
                    b2:1b:85:2d:6f:79:b8:fb:5d:6e:05:08:ab:4d:23:
                    34:32:cd:58:cd:3d:e6:aa:0a:d3:00:ac:c0:ed:69:
                    f2:46:60:d7:f0:dc:47:de:bf:b5:cb:13:44:a9:1b:
                    e8:5c:0f:10:99:f4:69:3b:88:79:a2:92:ab:33:68:
                    e7:91:09:b8:88:d3:e5:32:31:02:bf:c0:bc:37:13:
                    82:0b:f5:1b:52:54:25:2d:bb:2e:a5:f6:f3:a8:f7:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:4B:5E:62:BB:2A:70:1E:6B:0C:CA:78:FF:B3:4F:8E:86:51:3B
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/323830303a6138303a383031303a3a2f34342d3434203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a80:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:53:bf:b3:bd:9e:53:63:ec:ce:bc:f3:d5:ae:3e:e4:e4:
         c1:d3:b1:94:c1:b7:fa:43:84:ee:bf:3d:7b:f2:75:2b:84:d7:
         9b:8d:5b:4e:6b:1e:16:57:d6:ee:cd:f4:c5:c8:4b:5c:75:3e:
         47:ac:6c:9b:65:1b:a5:32:4e:d0:3e:a9:20:86:a0:db:93:ff:
         6d:dc:d5:60:79:03:90:1d:8f:46:1d:4d:26:e1:fa:eb:f6:7f:
         0f:71:f6:11:a8:24:65:b2:68:63:aa:6f:cd:82:a8:ae:51:9b:
         63:2c:e3:47:2f:0f:3f:6a:dc:48:78:d1:ff:3a:f4:42:23:d7:
         2e:49:01:a5:84:fd:b4:f3:0e:2c:58:19:7a:a8:2e:2c:03:9d:
         e8:f5:76:63:c3:bf:f7:42:10:f5:95:c6:1a:39:31:51:ae:1d:
         df:df:a2:32:2c:94:bb:40:c7:30:42:1d:45:cb:1f:bc:55:54:
         52:3a:7f:ff:8f:80:42:3b:06:d4:d7:57:05:af:99:5e:8e:0e:
         77:10:cf:ac:f4:4e:8d:e4:eb:7b:03:d9:4a:18:62:f0:99:a4:
         e3:8f:8c:d5:b6:dc:10:fa:9e:25:05:4e:21:b3:14:7f:34:17:
         a4:7d:a1:4d:bc:21:98:72:1e:0b:86:36:39:84:76:b0:75:97:
         dd:cf:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:52:05 2026 by rpki-client