Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/323830313a3161323a633a3a2f34382d3438203d3e2030.roa
File:                     323830313a3161323a633a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          2zi52/PJD9ts9vwoDIcf3qTnSOu5yLKml9I6SmPuaa8=
Subject key identifier:   66:D5:FE:DC:69:E3:FC:B8:0C:2F:80:0A:BF:64:16:9C:F1:1A:00:A9
Certificate issuer:       /CN=FA1140C02A7FAB6F57B2625AF34919FA84C782A0
Certificate serial:       28B38EC68EC917B1014C588F213D31605EEBC89C
Authority key identifier: FA:11:40:C0:2A:7F:AB:6F:57:B2:62:5A:F3:49:19:FA:84:C7:82:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/323830313a3161323a633a3a2f34382d3438203d3e2030.roa
Signing time:             Thu 02 Jul 2026 15:50:37 +0000
ROA not before:           Thu 02 Jul 2026 15:45:37 +0000
ROA not after:            Thu 01 Jul 2027 15:50:37 +0000
asID:                     0
IP address blocks:        2801:1a2:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:8e:c6:8e:c9:17:b1:01:4c:58:8f:21:3d:31:60:5e:eb:c8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1140C02A7FAB6F57B2625AF34919FA84C782A0
        Validity
            Not Before: Jul  2 15:45:37 2026 GMT
            Not After : Jul  1 15:50:37 2027 GMT
        Subject: CN=66D5FEDC69E3FCB80C2F800ABF64169CF11A00A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:cb:d1:31:90:a4:41:91:68:d5:41:ff:b3:
                    a3:1a:3b:42:34:a8:b8:2e:d8:b8:7a:46:3e:60:6f:
                    99:b9:4f:44:87:4d:ad:fc:f7:1b:cb:39:a2:d3:1b:
                    d1:af:c6:2e:83:c8:af:a7:b7:f1:8d:45:92:b4:12:
                    d7:4a:6c:0a:a2:07:20:5e:9f:80:4c:4d:45:d4:73:
                    ab:c0:6b:52:89:d7:2a:dc:97:ca:73:62:5b:64:4b:
                    12:fb:1d:80:f5:e5:4a:26:c9:22:ca:f3:8f:5c:8d:
                    8e:ed:e4:7a:60:36:ae:8a:3c:43:40:3f:d8:3b:3d:
                    b2:13:46:77:da:c5:da:82:b1:bc:9b:8e:54:71:84:
                    4a:9a:21:3c:f6:60:7f:04:48:f2:2e:b1:86:02:bf:
                    91:ae:e1:65:d3:9c:09:35:24:74:d7:ab:5d:32:7d:
                    9f:1f:2d:19:21:66:6f:8d:41:d9:4d:28:13:52:3b:
                    62:a8:25:b5:52:38:df:22:ad:3e:5a:89:04:00:b8:
                    fb:9b:f6:8d:0a:6a:c6:02:7e:4d:19:70:7e:f0:19:
                    10:b2:bd:3f:0a:43:0d:d2:22:57:36:1d:3c:23:ec:
                    16:57:39:dc:79:da:6a:1b:2e:27:4a:ea:43:0a:e3:
                    84:2e:fb:68:73:c7:f3:90:01:e2:51:d8:28:5e:45:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:FE:DC:69:E3:FC:B8:0C:2F:80:0A:BF:64:16:9C:F1:1A:00:A9
            X509v3 Authority Key Identifier:
                keyid:FA:11:40:C0:2A:7F:AB:6F:57:B2:62:5A:F3:49:19:FA:84:C7:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/323830313a3161323a633a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a2:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:8b:20:57:2f:72:fd:55:5c:fa:22:bd:56:2d:e4:bb:54:
         0c:3e:df:2e:c2:71:03:6f:6f:02:41:30:43:f3:07:24:c6:7e:
         55:8e:be:7a:6f:12:2f:85:d0:df:8c:86:2d:98:3b:0b:80:2f:
         03:9e:4c:93:e4:cf:50:49:bf:30:0b:86:43:5f:ac:b2:19:f9:
         43:69:79:f0:b0:fc:43:19:72:d0:09:15:fd:e0:1a:4c:6d:2b:
         6e:a4:e6:e3:10:57:0c:52:de:f1:21:f1:22:f3:31:b1:44:54:
         66:3a:e1:ee:41:b8:92:5c:3e:6f:e6:a4:06:c5:da:6b:c6:d9:
         c9:1f:5d:e9:90:ff:5f:6d:1c:16:27:13:ea:5c:62:ea:3d:7a:
         ac:5b:32:1e:e2:4e:d0:7f:cc:19:63:a1:dd:7b:92:18:4e:9a:
         f3:39:d2:2a:14:24:47:9e:35:f9:ab:c8:71:b5:f8:24:f0:97:
         ae:f6:9f:b6:2f:57:4b:9b:d3:35:51:f8:a1:5e:4d:7f:93:05:
         34:14:a5:35:8d:18:72:52:f1:ed:f2:f3:8f:86:f3:e8:01:28:
         b5:80:e7:4a:e1:44:52:9c:fb:b4:a2:41:fb:c7:6f:eb:4e:43:
         42:b2:7c:90:da:f3:09:c8:c8:e0:bc:5f:28:e4:82:57:32:c0:
         2e:6e:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:46:14 2026 by rpki-client