Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/323830363a3230353a3a2f33322d3438203d3e20323632393434.roa
File:                     323830363a3230353a3a2f33322d3438203d3e20323632393434.roa (raw, json)
Hash identifier:          6q9Mwpjl4UUNkEa4hxswAKJPZgP9eWQLpRbXP4x90eE=
Subject key identifier:   B5:FE:52:47:87:E9:54:7E:54:BD:0A:C2:B1:99:1C:8D:E9:AA:20:DB
Certificate issuer:       /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial:       3A23529CAA360CD53998A82DA490244CBA9BAC78
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/323830363a3230353a3a2f33322d3438203d3e20323632393434.roa
Signing time:             Thu 24 Sep 2026 16:36:36 +0000
ROA not before:           Thu 24 Sep 2026 16:31:36 +0000
ROA not after:            Thu 23 Sep 2027 16:36:36 +0000
asID:                     262944
IP address blocks:        2806:205::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 23:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:23:52:9c:aa:36:0c:d5:39:98:a8:2d:a4:90:24:4c:ba:9b:ac:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
        Validity
            Not Before: Sep 24 16:31:36 2026 GMT
            Not After : Sep 23 16:36:36 2027 GMT
        Subject: CN=B5FE524787E9547E54BD0AC2B1991C8DE9AA20DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:19:22:cd:b0:f7:2f:88:09:8b:f0:17:6e:
                    87:76:89:17:61:80:53:9f:96:c0:8a:f4:f0:f8:be:
                    b5:be:fe:34:b7:40:ce:27:24:52:f0:da:8b:d5:c2:
                    b3:36:61:aa:a2:fb:fd:5c:d3:61:ae:f2:36:9c:b9:
                    25:4b:7e:fb:c8:85:66:9d:7e:21:cb:16:90:e2:f5:
                    26:3c:52:fd:d1:d5:0c:d2:fe:29:cb:69:4a:7f:7a:
                    87:06:b3:bc:4d:25:86:6c:82:e8:7a:ad:eb:e2:a9:
                    1e:4e:d9:b9:b7:e4:67:33:02:76:13:6f:0d:03:96:
                    3a:58:73:b8:af:f5:4a:8e:a9:54:52:81:7d:c4:0d:
                    ca:88:c2:26:c1:02:a1:7f:70:d2:74:27:0e:f8:60:
                    18:62:35:5b:0c:56:43:0f:56:d7:d9:fd:a0:50:48:
                    27:74:49:18:a4:01:47:a8:1e:ca:dd:be:61:71:da:
                    6a:22:42:25:26:f4:7c:2a:a4:4f:5b:4c:1f:e7:1d:
                    22:6b:60:fa:61:7d:5a:4e:c5:7f:4e:a3:7e:01:03:
                    11:0f:4e:02:84:44:87:93:d5:06:d8:54:f5:0c:51:
                    bc:65:aa:91:d2:6b:d8:4f:20:ce:d6:82:86:31:c0:
                    86:16:37:99:2a:29:0e:e7:0a:2a:a4:bb:36:94:d3:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FE:52:47:87:E9:54:7E:54:BD:0A:C2:B1:99:1C:8D:E9:AA:20:DB
            X509v3 Authority Key Identifier:
                keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/323830363a3230353a3a2f33322d3438203d3e20323632393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:205::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:88:e5:38:60:c7:24:c8:a9:f9:e5:ae:12:2a:39:cc:d4:86:
         4f:14:69:38:1a:48:7e:25:39:dd:75:76:b3:4c:b9:2e:94:fc:
         29:da:a8:a8:dd:af:ee:4c:a9:81:97:3e:ce:f9:ad:a2:d2:b3:
         c2:f1:1c:df:e4:f3:c6:e0:52:a4:6d:c7:e5:0f:f0:d0:38:f3:
         82:5a:e0:00:95:c7:51:f6:de:b4:3e:e4:9d:9a:d7:df:0d:bf:
         35:79:9a:b9:30:41:ae:6e:2f:27:0b:2c:2a:1e:b9:12:ff:0f:
         d1:51:b4:c0:1d:79:75:6d:d9:ab:b8:85:85:04:b5:ab:8f:44:
         34:c4:3b:f1:ff:e2:1c:ec:db:a0:59:55:58:cb:99:da:6c:45:
         d1:b7:80:da:80:64:ce:29:63:9e:7b:1a:79:5c:ba:04:b1:10:
         dc:fa:51:54:60:f1:8b:94:03:b7:af:4a:10:60:0f:a7:63:2b:
         4f:f5:f0:d2:35:ab:1e:68:df:83:25:bb:cb:ce:0e:10:9f:7c:
         dc:cf:23:09:f5:cb:bc:21:99:5e:d0:f8:60:59:49:35:84:8c:
         eb:01:cd:62:a4:9a:20:02:a9:23:d8:24:40:4b:fe:b3:42:44:
         86:88:0d:60:a1:b7:9c:37:db:4c:77:bd:0e:78:8c:e8:ae:7c:
         54:53:b7:86
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUOiNSnKo2DNU5mKgtpJAkTLqbrHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhBNkZEQUUzMjVBMzM1QTJDQzg5QThEMkZDQjJGOTg4
QjhBMkNGNzAeFw0yNjA5MjQxNjMxMzZaFw0yNzA5MjMxNjM2MzZaMDMxMTAvBgNV
BAMTKEI1RkU1MjQ3ODdFOTU0N0U1NEJEMEFDMkIxOTkxQzhERTlBQTIwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzRkizbD3L4gJi/AXbod2iRdh
gFOflsCK9PD4vrW+/jS3QM4nJFLw2ovVwrM2Yaqi+/1c02Gu8jacuSVLfvvIhWad
fiHLFpDi9SY8Uv3R1QzS/inLaUp/eocGs7xNJYZsguh6reviqR5O2bm35GczAnYT
bw0DljpYc7iv9UqOqVRSgX3EDcqIwibBAqF/cNJ0Jw74YBhiNVsMVkMPVtfZ/aBQ
SCd0SRikAUeoHsrdvmFx2moiQiUm9HwqpE9bTB/nHSJrYPphfVpOxX9Oo34BAxEP
TgKERIeT1QbYVPUMUbxlqpHSa9hPIM7WgoYxwIYWN5kqKQ7nCiqkuzaU0/h/AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUtf5SR4fpVH5UvQrCsZkcjemqINswHwYDVR0j
BBgwFoAUeKb9rjJaM1osyJqNL8svmIuKLPcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODFBODlCMDczMUYwQUU3RjBDRDM1NDRFRUZCQzQ3NTlD
M0RGMzMyNkU2QkU5QUVCRjZEQkExRDQ1MEMxREEyLzAvNzhBNkZEQUUzMjVBMzM1
QTJDQzg5QThEMkZDQjJGOTg4QjhBMkNGNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OEE2RkRBRTMyNUEzMzVBMkND
ODlBOEQyRkNCMkY5ODhCOEEyQ0Y3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgxQTg5QjA3MzFGMEFFN0YwQ0QzNTQ0RUVGQkM0NzU5QzNERjMzMjZF
NkJFOUFFQkY2REJBMUQ0NTBDMURBMi8wLzMyMzgzMDM2M2EzMjMwMzUzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzIzOTM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgIFMA0G
CSqGSIb3DQEBCwUAA4IBAQARiOU4YMckyKn55a4SKjnM1IZPFGk4Gkh+JTnddXaz
TLkulPwp2qio3a/uTKmBlz7O+a2i0rPC8Rzf5PPG4FKkbcflD/DQOPOCWuAAlcdR
9t60PuSdmtffDb81eZq5MEGubi8nCywqHrkS/w/RUbTAHXl1bdmruIWFBLWrj0Q0
xDvx/+Ic7NugWVVYy5nabEXRt4DagGTOKWOeexp5XLoEsRDc+lFUYPGLlAO3r0oQ
YA+nYytP9fDSNaseaN+DJbvLzg4Qn3zczyMJ9cu8IZle0PhgWUk1hIzrAc1ipJog
Aqkj2CRAS/6zQkSGiA1gobecN9tMd70OeIzornxUU7eG
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:00:06 2026 by rpki-client