Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a313a3a2f34382d3438203d3e203134323332.roa
File:                     323830303a3262303a313a3a2f34382d3438203d3e203134323332.roa (raw, json)
Hash identifier:          JRVEpNxaezzo3LGvp1+iemezF9QGGPk5dYNTRbFbCq4=
Subject key identifier:   B9:1A:B5:EE:8E:04:7B:FC:F9:37:48:6A:08:9B:93:4D:1E:F3:60:9B
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       431CD71DEA7BA65882128697759FF3DF331E8D41
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a313a3a2f34382d3438203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:06 +0000
ROA not before:           Fri 16 Oct 2026 15:55:06 +0000
ROA not after:            Fri 15 Oct 2027 16:00:06 +0000
asID:                     14232
IP address blocks:        2800:2b0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1c:d7:1d:ea:7b:a6:58:82:12:86:97:75:9f:f3:df:33:1e:8d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:06 2026 GMT
            Not After : Oct 15 16:00:06 2027 GMT
        Subject: CN=B91AB5EE8E047BFCF937486A089B934D1EF3609B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:5a:4b:37:6b:55:08:fd:47:fa:6a:b1:92:
                    60:97:0a:fc:bd:c9:7e:b5:54:db:51:2d:6a:4d:36:
                    ce:d1:c0:c6:b7:ef:b3:54:f5:a8:4b:4d:1d:56:2f:
                    fc:82:35:e6:e0:1e:ce:d8:4b:1b:10:96:44:c3:5b:
                    a1:3a:2a:18:a5:8d:81:c6:cb:37:5a:35:ce:28:2b:
                    6c:0d:26:0b:f8:24:ad:28:81:00:e5:c6:2d:31:34:
                    f2:19:2d:e6:1e:85:11:26:62:d5:c8:3f:94:3d:d2:
                    ae:07:12:ff:86:02:d8:bd:e0:de:5a:bf:1c:5d:7d:
                    a7:e9:99:77:81:47:fc:03:86:d5:3b:81:99:6f:79:
                    81:78:d0:6f:26:44:ff:91:45:c7:74:6f:03:ce:4c:
                    a8:ef:da:5b:df:1d:04:72:d4:fa:64:61:a7:ab:1f:
                    23:42:7b:78:6d:fd:10:28:6a:b4:1c:d5:05:ef:23:
                    66:0d:02:4e:56:4e:b0:87:16:32:04:b2:8c:76:ac:
                    7e:09:8a:62:19:1d:8b:37:3d:28:f4:a2:8a:ff:38:
                    50:92:72:40:77:a3:fa:7e:e8:46:5b:30:9b:92:98:
                    cb:dc:1c:01:e3:65:8a:61:1c:3e:b0:5f:83:16:6f:
                    50:bc:fd:0b:21:25:e2:31:00:83:91:e0:9c:0a:94:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:B5:EE:8E:04:7B:FC:F9:37:48:6A:08:9B:93:4D:1E:F3:60:9B
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a313a3a2f34382d3438203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:ea:14:3e:a7:f7:f9:0d:e5:ff:97:34:65:a8:63:3b:0b:
         e9:7a:14:06:dc:60:3b:e9:16:73:f6:db:88:98:6e:35:71:a8:
         da:29:a3:0b:3b:19:49:80:15:2e:f5:a0:9c:cf:68:e3:1f:06:
         ef:26:b4:d6:9b:6b:16:0c:28:ec:59:89:d6:a2:9c:a6:22:d1:
         1e:02:77:a4:a8:91:9c:ab:97:26:77:5f:66:3f:12:c4:67:a7:
         31:38:be:b6:97:ac:a2:f5:68:e9:56:2c:48:5c:ca:36:f2:df:
         81:38:a5:ac:ef:39:48:e6:fb:2e:f4:c4:71:48:96:17:90:c4:
         6d:d5:cf:4e:e7:97:9b:de:97:db:a3:43:e5:15:74:3c:66:e1:
         2d:8c:b5:28:c8:53:0e:b1:bc:ef:5f:e9:38:b7:c1:8a:4f:fe:
         a4:fa:d5:ed:d9:4a:6c:ad:ea:af:17:5e:d0:e0:a5:aa:41:e2:
         a7:1c:44:62:cd:c8:c0:cd:6c:ed:5f:af:b1:20:31:7b:96:af:
         62:15:d1:dc:60:c2:0d:7a:ed:4a:db:0a:b8:0b:33:c1:5f:59:
         93:02:d4:4b:7e:0c:da:f2:58:63:ca:3f:7e:70:6f:a2:c6:65:
         05:bc:df:1c:6d:36:93:07:64:2a:04:8d:1e:a6:16:2f:c1:d1:
         e6:ee:ab:e1
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUQxzXHep7pliCEoaXdZ/z3zMejUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNjEwMTYxNTU1MDZaFw0yNzEwMTUxNjAwMDZaMDMxMTAvBgNV
BAMTKEI5MUFCNUVFOEUwNDdCRkNGOTM3NDg2QTA4OUI5MzREMUVGMzYwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk1pLN2tVCP1H+mqxkmCXCvy9
yX61VNtRLWpNNs7RwMa377NU9ahLTR1WL/yCNebgHs7YSxsQlkTDW6E6KhiljYHG
yzdaNc4oK2wNJgv4JK0ogQDlxi0xNPIZLeYehREmYtXIP5Q90q4HEv+GAti94N5a
vxxdfafpmXeBR/wDhtU7gZlveYF40G8mRP+RRcd0bwPOTKjv2lvfHQRy1PpkYaer
HyNCe3ht/RAoarQc1QXvI2YNAk5WTrCHFjIEsox2rH4JimIZHYs3PSj0oor/OFCS
ckB3o/p+6EZbMJuSmMvcHAHjZYphHD6wX4MWb1C8/QshJeIxAIOR4JwKlHbRAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUuRq17o4Ee/z5N0hqCJuTTR7zYJswHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMyMzgzMDMwM2EzMjYyMzAzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgAArAA
ATANBgkqhkiG9w0BAQsFAAOCAQEAWq/qFD6n9/kN5f+XNGWoYzsL6XoUBtxgO+kW
c/bbiJhuNXGo2imjCzsZSYAVLvWgnM9o4x8G7ya01ptrFgwo7FmJ1qKcpiLRHgJ3
pKiRnKuXJndfZj8SxGenMTi+tpesovVo6VYsSFzKNvLfgTilrO85SOb7LvTEcUiW
F5DEbdXPTueXm96X26ND5RV0PGbhLYy1KMhTDrG871/pOLfBik/+pPrV7dlKbK3q
rxde0OClqkHipxxEYs3IwM1s7V+vsSAxe5avYhXR3GDCDXrtStsKuAszwV9ZkwLU
S34M2vJYY8o/fnBvosZlBbzfHG02kwdkKgSNHqYWL8HR5u6r4Q==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:47:34 2026 by rpki-client