Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          WyZmaQ4WeZ25Ta3wYgxmoIF1Ar92gB9OwbsHJSykuN0=
Subject key identifier:   44:0A:51:0C:49:6C:9C:6B:35:E5:1D:A9:B2:6C:DB:70:FF:9E:9C:9E
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       1A6920C7BCABB9836F9F1C935ED32DCAB86FF04B
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Wed 17 Sep 2025 17:47:08 +0000
ROA not before:           Wed 17 Sep 2025 17:42:08 +0000
ROA not after:            Wed 16 Sep 2026 17:47:08 +0000
asID:                     22927
IP address blocks:        2800:a00:d480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:69:20:c7:bc:ab:b9:83:6f:9f:1c:93:5e:d3:2d:ca:b8:6f:f0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Sep 17 17:42:08 2025 GMT
            Not After : Sep 16 17:47:08 2026 GMT
        Subject: CN=440A510C496C9C6B35E51DA9B26CDB70FF9E9C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:39:be:96:5f:25:57:41:95:6d:72:44:1c:
                    a5:49:72:58:24:4b:ab:7a:b4:68:5c:9e:5a:1f:45:
                    a9:d8:13:8e:0f:65:62:73:5c:cb:50:c5:3a:41:e6:
                    5d:2a:d3:77:7f:9f:a7:ea:bb:c2:82:2a:40:8b:64:
                    bd:d9:c6:4c:83:58:71:f9:7e:dd:5e:31:2a:93:7f:
                    24:fc:7d:27:7a:e9:93:b5:3a:27:33:1d:98:68:f8:
                    9e:32:0a:57:d5:ab:4e:a2:6b:2a:99:2a:d1:22:6c:
                    e7:fa:c7:6b:91:9e:23:99:a2:36:a0:83:5b:dc:bf:
                    4e:99:36:2b:7a:ed:ae:fc:4c:71:38:32:4b:5b:8b:
                    00:e6:b4:e8:f5:05:80:e5:1a:90:2d:89:3e:c1:ac:
                    bc:22:6b:d9:f0:80:44:65:7e:ae:2d:fe:3e:8c:3f:
                    1a:5a:fd:4e:81:86:e6:4f:39:de:60:cc:77:6a:ca:
                    76:26:17:d2:36:a8:51:64:7d:4c:5b:26:aa:03:81:
                    36:76:1d:89:f0:76:3d:a5:2c:9a:4f:e4:81:33:ef:
                    e6:a9:3f:b1:eb:02:6d:3a:fd:fa:e9:68:31:1e:bb:
                    c3:e0:25:37:5c:8b:78:78:eb:3c:ff:f9:b4:cd:d5:
                    8e:94:14:e6:1f:00:0c:3d:70:30:a2:40:92:e7:0f:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0A:51:0C:49:6C:9C:6B:35:E5:1D:A9:B2:6C:DB:70:FF:9E:9C:9E
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643438303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:d480::/41

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:9a:5f:e9:d0:6c:f8:2a:e5:67:37:f4:d0:68:b2:dc:c9:
         0d:cf:b4:dc:fe:bb:7d:2a:aa:36:d0:79:e8:39:9d:34:db:32:
         dc:73:0a:ae:77:e0:7f:80:91:8a:07:49:69:88:1d:f7:06:65:
         8a:a6:38:ce:4c:e7:ad:7c:3b:32:62:69:d3:51:29:6d:92:00:
         fa:db:5a:9e:63:82:93:c3:83:22:3a:10:9c:9f:9c:3b:9b:9d:
         f6:da:2b:97:84:c5:69:03:02:a0:eb:ad:28:12:bd:25:33:98:
         bb:07:1b:85:8a:b0:b9:6b:ce:3d:b3:0a:1c:6c:ef:02:4e:ce:
         19:44:6a:ae:46:52:bf:cb:1b:d8:aa:ea:a3:82:9c:99:d7:81:
         07:1a:d7:21:7b:9b:52:1b:dc:8e:b1:b1:4d:5f:30:ae:98:21:
         7e:7d:26:bd:4d:b7:31:d2:98:34:ee:96:5d:0b:72:39:3d:09:
         3d:a8:b1:73:33:6d:8b:2c:1a:76:7f:db:81:af:cc:6f:1b:8d:
         86:2e:c4:6b:f0:db:44:55:4c:5d:52:08:13:63:a9:85:47:59:
         c4:39:e4:63:5c:31:0f:8f:73:e8:bf:2f:e5:7a:b2:a4:36:02:
         84:fc:fa:ee:0e:0a:61:93:90:b2:a5:fa:ce:4b:cb:2c:2f:e6:
         b1:4d:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:39 2025 by rpki-client