Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/323830303a3136303a3a2f33322d3438203d3e203134323539.roa
File:                     323830303a3136303a3a2f33322d3438203d3e203134323539.roa (raw, json)
Hash identifier:          5xl/iSzk3x1S53Y+6+PGdjb3HzIYuuHzscQV7Ukga7c=
Subject key identifier:   87:5E:5E:C0:51:0B:38:20:72:A8:33:DC:BB:31:BA:FD:AB:2B:74:14
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       4D6986E81EFE7E751C368AEF13E88A9D909AD855
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/323830303a3136303a3a2f33322d3438203d3e203134323539.roa
Signing time:             Tue 13 Oct 2026 12:00:00 +0000
ROA not before:           Tue 13 Oct 2026 11:55:00 +0000
ROA not after:            Tue 12 Oct 2027 12:00:00 +0000
asID:                     14259
IP address blocks:        2800:160::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:86:e8:1e:fe:7e:75:1c:36:8a:ef:13:e8:8a:9d:90:9a:d8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Oct 13 11:55:00 2026 GMT
            Not After : Oct 12 12:00:00 2027 GMT
        Subject: CN=875E5EC0510B382072A833DCBB31BAFDAB2B7414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:11:87:9b:95:94:75:18:28:69:a5:4b:40:
                    b5:18:9a:97:3e:e1:d3:56:b9:2f:bd:ac:f2:4b:dc:
                    dc:2d:bb:12:96:d1:8e:97:61:18:87:84:81:60:18:
                    c3:cf:ce:c8:29:3c:bf:8c:f7:b1:a8:f9:99:cb:c6:
                    4f:6b:62:b7:ae:9e:1a:6e:0b:53:90:bb:ec:a0:60:
                    2c:a3:c0:e1:0b:02:3c:aa:f8:d4:2f:56:83:78:8e:
                    73:e3:84:a4:99:35:4d:16:5c:26:8b:b4:87:8e:f0:
                    a8:6f:ca:26:d9:ed:00:c1:38:3a:f3:81:85:6c:dc:
                    2a:bc:22:c5:b6:a5:4a:d3:d1:db:aa:9b:7b:85:b2:
                    c3:b3:c8:fc:80:ca:38:d6:b5:ad:88:20:a5:53:8d:
                    5f:19:3e:6a:91:1d:5b:bb:99:39:52:78:1b:c8:66:
                    93:87:88:37:fe:80:18:cd:a3:43:5b:10:eb:c8:28:
                    21:39:dd:e1:a5:8b:d2:8f:2b:5d:1d:81:5b:a5:07:
                    91:ea:42:a7:7f:24:ab:31:d1:b5:f3:14:1a:b6:8c:
                    2f:bc:11:8d:35:83:48:cc:96:d6:96:d2:d3:9a:4b:
                    8a:1a:e8:d8:af:9f:82:9c:b4:82:fe:66:ec:81:59:
                    e1:05:ef:16:6a:69:78:a8:a5:67:27:48:5b:a8:b1:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5E:5E:C0:51:0B:38:20:72:A8:33:DC:BB:31:BA:FD:AB:2B:74:14
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/323830303a3136303a3a2f33322d3438203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:160::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:55:85:cb:01:23:79:ba:e0:c6:6d:c4:89:bc:4c:58:87:7c:
         01:d7:a1:7d:e0:ca:03:d9:51:32:44:63:82:b9:84:e4:ba:dd:
         3c:12:8a:6b:db:30:e9:e1:4c:b7:a9:ec:a4:57:46:32:81:0c:
         43:55:a0:2a:88:91:a0:0a:15:a5:54:16:83:5f:91:ff:06:81:
         e3:c6:ea:9f:dc:e6:c6:7d:3b:3c:e6:5b:22:6f:47:3e:ad:40:
         83:90:ea:d3:c2:5d:78:9c:38:46:53:48:6a:ee:b8:76:c6:b2:
         e1:d0:a7:1c:3b:90:d6:a7:10:74:02:14:05:f3:97:83:d7:12:
         91:ac:de:48:7c:fe:36:67:d6:52:3e:30:d9:5f:3d:80:d8:65:
         c5:d7:cb:2c:9d:1d:3b:14:c7:c9:2a:58:8b:34:49:41:2f:50:
         d8:d8:39:8b:b0:63:30:ad:63:bd:f7:5d:6b:96:3a:51:36:3a:
         f6:82:18:b3:86:36:82:56:53:60:1e:84:bc:b3:35:67:43:c2:
         37:c2:8b:26:2a:4a:41:be:22:32:aa:2b:21:38:ba:79:7f:dc:
         8f:af:fa:80:f2:96:57:08:26:20:ee:76:31:fb:2a:2d:36:26:
         70:90:45:7a:4b:2c:b6:34:65:ce:d6:c9:4f:4f:c3:06:fe:b3:
         ba:87:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:35:35 2026 by rpki-client