Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a333a3a2f34382d3438203d3e203134323332.roa
File:                     323830303a3262303a333a3a2f34382d3438203d3e203134323332.roa (raw, json)
Hash identifier:          TrCrB5RYAAnb6IDoyDUxc2A71Cb6O3xQ2pfbEdrLOKI=
Subject key identifier:   62:BE:98:CB:0E:B1:DC:12:54:DA:88:71:1B:D9:C1:C1:AD:32:31:59
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       2FDBD1CEE7B7CAEF995D54B6EC5C1A5B169201F6
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a333a3a2f34382d3438203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:08 +0000
ROA not before:           Fri 16 Oct 2026 15:55:08 +0000
ROA not after:            Fri 15 Oct 2027 16:00:08 +0000
asID:                     14232
IP address blocks:        2800:2b0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 18:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:db:d1:ce:e7:b7:ca:ef:99:5d:54:b6:ec:5c:1a:5b:16:92:01:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:08 2026 GMT
            Not After : Oct 15 16:00:08 2027 GMT
        Subject: CN=62BE98CB0EB1DC1254DA88711BD9C1C1AD323159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:82:ff:70:cb:1d:8f:36:89:e2:5a:7e:b6:
                    e7:dc:a5:2f:7b:6e:4e:09:81:94:f6:97:80:d7:f3:
                    bf:b5:a4:c2:ec:13:d8:29:d4:d2:cf:66:44:15:79:
                    8d:30:f2:35:c3:10:2e:92:63:38:db:aa:c0:ba:ab:
                    35:b9:2c:ed:a4:28:d4:28:ea:b0:8d:65:dd:f7:02:
                    c8:03:a9:df:39:0b:10:e3:4a:d9:99:7f:be:78:c6:
                    05:8a:74:bf:32:6a:7c:ed:7f:46:fe:53:5c:21:01:
                    10:a8:6f:66:03:15:48:99:34:7b:b0:fb:b9:5e:50:
                    77:1b:36:a4:f1:26:f5:d1:ab:af:24:34:b8:61:cd:
                    7e:cd:fa:a1:14:c1:14:99:bd:0a:b8:8f:1a:d5:3b:
                    6b:55:c9:78:3a:e0:c1:e6:6d:91:bc:85:d2:87:b4:
                    28:34:68:9b:ca:87:2c:9f:3a:f9:37:57:aa:e3:12:
                    3a:07:fe:c5:91:24:cf:0c:35:d5:7a:3c:91:db:d3:
                    32:ee:bd:42:1d:1e:97:e7:91:10:9c:c9:84:57:5d:
                    62:42:55:32:b2:d3:40:cd:17:3e:ca:d1:3c:df:67:
                    ce:33:4b:f6:fc:2d:88:d7:4a:ae:28:f0:15:03:fb:
                    fa:58:59:47:b1:b6:c3:bb:4d:d5:d7:8b:99:1b:f8:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BE:98:CB:0E:B1:DC:12:54:DA:88:71:1B:D9:C1:C1:AD:32:31:59
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a333a3a2f34382d3438203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:58:b6:2d:ac:a4:ab:cb:39:92:63:41:58:9c:a7:dd:b6:23:
         22:46:fe:1d:6c:5e:13:2d:b5:40:82:e9:c1:ab:6c:3a:ab:50:
         31:19:c0:52:7c:61:71:48:ef:82:69:41:b8:f5:6a:5a:f2:66:
         1f:0f:71:5a:7b:05:d3:44:95:9b:2e:00:1d:c0:f7:4e:d1:e7:
         36:de:8e:8b:ec:2d:61:48:d2:f6:a8:ab:91:b8:8d:56:f3:06:
         b8:55:e4:2e:f9:6f:e4:59:e7:67:5b:89:36:9b:3b:76:e1:31:
         e4:3a:a9:33:e0:1f:fa:cb:f3:c7:0a:a1:c0:d2:64:ca:61:7f:
         ba:28:c6:d3:da:55:eb:94:6f:7f:b8:cd:30:cf:6e:6b:aa:26:
         38:e3:08:63:e6:76:cb:f7:7d:a7:fe:b9:fc:27:59:0d:04:be:
         24:36:6f:7e:71:30:17:c6:6a:1b:26:03:66:b4:22:6f:b8:c6:
         cd:ab:31:34:d0:3f:33:0c:7a:9c:2d:3c:a6:f6:69:ab:d9:99:
         28:6f:d3:b3:ef:fc:ce:f9:6e:3f:a1:31:5f:aa:ee:82:d8:5b:
         94:e4:07:af:39:00:0c:48:59:4a:45:54:d3:5e:34:1d:0f:95:
         c4:cd:f0:d5:af:09:48:13:90:ab:b4:e6:c6:72:ca:43:b9:3c:
         e6:0c:1f:f4
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUL9vRzue3yu+ZXVS27FwaWxaSAfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNjEwMTYxNTU1MDhaFw0yNzEwMTUxNjAwMDhaMDMxMTAvBgNV
BAMTKDYyQkU5OENCMEVCMURDMTI1NERBODg3MTFCRDlDMUMxQUQzMjMxNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwIL/cMsdjzaJ4lp+tufcpS97
bk4JgZT2l4DX87+1pMLsE9gp1NLPZkQVeY0w8jXDEC6SYzjbqsC6qzW5LO2kKNQo
6rCNZd33AsgDqd85CxDjStmZf754xgWKdL8yanztf0b+U1whARCob2YDFUiZNHuw
+7leUHcbNqTxJvXRq68kNLhhzX7N+qEUwRSZvQq4jxrVO2tVyXg64MHmbZG8hdKH
tCg0aJvKhyyfOvk3V6rjEjoH/sWRJM8MNdV6PJHb0zLuvUIdHpfnkRCcyYRXXWJC
VTKy00DNFz7K0TzfZ84zS/b8LYjXSq4o8BUD+/pYWUextsO7TdXXi5kb+AwvAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUYr6Yyw6x3BJU2ohxG9nBwa0yMVkwHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMyMzgzMDMwM2EzMjYyMzAzYTMzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgAArAA
AzANBgkqhkiG9w0BAQsFAAOCAQEAeFi2Laykq8s5kmNBWJyn3bYjIkb+HWxeEy21
QILpwatsOqtQMRnAUnxhcUjvgmlBuPVqWvJmHw9xWnsF00SVmy4AHcD3TtHnNt6O
i+wtYUjS9qirkbiNVvMGuFXkLvlv5FnnZ1uJNps7duEx5DqpM+Af+svzxwqhwNJk
ymF/uijG09pV65Rvf7jNMM9ua6omOOMIY+Z2y/d9p/65/CdZDQS+JDZvfnEwF8Zq
GyYDZrQib7jGzasxNNA/Mwx6nC08pvZpq9mZKG/Ts+/8zvluP6ExX6rugthblOQH
rzkADEhZSkVU0140HQ+VxM3w1a8JSBOQq7TmxnLKQ7k85gwf9A==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:55:24 2026 by rpki-client