Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3334203d3e203134323332.roa
File:                     323830303a3262303a343030303a3a2f33342d3334203d3e203134323332.roa (raw, json)
Hash identifier:          f0pBGT6aBGsOKUNogAXvlhDX1xdtknIdpbMZmQBe/VY=
Subject key identifier:   AA:DE:67:B9:72:D4:D1:11:A0:0E:3B:2D:F5:82:71:18:53:F7:D3:E3
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       2B6C064E6EC7AC4E12A4B711AC646F4F5591A59F
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3334203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:04 +0000
ROA not before:           Fri 16 Oct 2026 15:55:04 +0000
ROA not after:            Fri 15 Oct 2027 16:00:04 +0000
asID:                     14232
IP address blocks:        2800:2b0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 00:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6c:06:4e:6e:c7:ac:4e:12:a4:b7:11:ac:64:6f:4f:55:91:a5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:04 2026 GMT
            Not After : Oct 15 16:00:04 2027 GMT
        Subject: CN=AADE67B972D4D111A00E3B2DF582711853F7D3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:d5:f7:4a:b1:d1:e0:08:2c:b5:e7:32:36:
                    a5:54:9c:de:d7:68:df:3b:14:fb:a7:a6:d6:3c:5b:
                    79:da:ff:34:4a:8f:4b:7c:f0:86:1b:ae:4c:4f:e3:
                    7e:73:ed:da:88:6d:d4:58:b6:47:d2:52:54:37:6a:
                    08:b3:3f:fa:0c:66:d2:19:7a:0a:fb:ef:8f:42:66:
                    f0:d5:f3:2f:9d:86:ca:47:5b:24:af:36:a4:3f:75:
                    f4:89:41:bf:5b:ba:33:5d:04:3e:05:96:16:c6:d1:
                    37:50:fd:65:03:dd:a4:b4:f5:38:40:f7:75:f8:96:
                    20:50:0f:e8:04:10:32:69:f4:70:87:d8:4e:1c:c2:
                    53:28:59:32:cf:6d:16:c2:e5:e5:45:49:53:25:22:
                    44:d7:68:65:c9:1f:e0:90:2b:ff:b5:26:9b:38:cb:
                    c3:01:1d:3a:ee:e0:82:56:03:06:25:42:85:fa:97:
                    68:1f:6f:14:a7:6b:20:5f:07:e1:48:83:2a:f6:72:
                    81:7a:66:c4:8f:aa:22:1e:de:3a:57:e7:5d:f9:21:
                    4e:c5:e7:b4:e4:24:66:09:14:27:67:f5:eb:e6:78:
                    29:5e:16:0f:52:36:51:3e:05:9f:2c:72:b7:d2:11:
                    2a:61:6f:fe:3e:eb:0b:0f:5a:21:a5:b9:dc:c2:fb:
                    3c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DE:67:B9:72:D4:D1:11:A0:0E:3B:2D:F5:82:71:18:53:F7:D3:E3
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a343030303a3a2f33342d3334203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:de:66:cc:db:67:b8:1d:51:ad:3b:d8:97:71:0e:ca:08:71:
         ea:41:eb:ff:15:3c:4e:a3:7e:b1:22:4c:38:88:f1:66:dc:69:
         95:f8:8d:11:eb:dd:73:96:5d:6b:f8:6e:8b:5f:11:10:bb:a1:
         a6:aa:e2:63:fa:c6:6b:6f:a9:8d:81:a3:4e:5e:db:8d:bd:17:
         e5:3e:45:98:23:10:b4:3a:60:17:6c:89:83:36:95:56:87:83:
         fe:8a:7a:62:ec:53:3a:1d:bb:0b:0c:95:e7:f3:85:e2:25:2b:
         27:2d:7a:0c:a0:31:ff:37:0e:55:14:5f:9f:63:88:7f:cb:b0:
         76:8b:2e:27:ba:ea:3b:69:36:2c:a0:11:2a:99:65:53:31:fe:
         e9:6b:bb:a8:96:e2:4f:26:1d:41:eb:62:37:9f:a1:44:ae:8b:
         4e:09:5c:9f:f4:96:2e:9a:0b:4a:7b:f9:38:5e:16:e4:43:9a:
         a1:45:aa:70:69:f8:92:1e:17:c1:b6:12:d5:8d:f0:f9:2e:75:
         03:80:ac:bc:90:a7:80:f7:09:fc:b6:d7:86:db:63:00:45:8f:
         ea:09:1a:ca:f5:3f:b0:d3:58:24:92:45:2e:58:e8:a7:d7:05:
         64:0e:46:b8:d8:c4:d9:e0:da:da:bd:f5:1a:7d:79:bd:9a:6f:
         52:f8:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:55:46 2026 by rpki-client