Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a383030303a3a2f33342d3334203d3e203134323332.roa
File:                     323830303a3262303a383030303a3a2f33342d3334203d3e203134323332.roa (raw, json)
Hash identifier:          nrHCoU44qtW8zkFPYmLntcwXLETA2uN+T7ajp747Nos=
Subject key identifier:   57:C3:42:8E:57:4D:64:D6:83:6E:9C:E4:35:65:D7:B4:E5:80:D1:D7
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       4EBBF0DD64A700438A20FF49FCEFAB9943E6D72C
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a383030303a3a2f33342d3334203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:01 +0000
ROA not before:           Fri 16 Oct 2026 15:55:01 +0000
ROA not after:            Fri 15 Oct 2027 16:00:01 +0000
asID:                     14232
IP address blocks:        2800:2b0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bb:f0:dd:64:a7:00:43:8a:20:ff:49:fc:ef:ab:99:43:e6:d7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:01 2026 GMT
            Not After : Oct 15 16:00:01 2027 GMT
        Subject: CN=57C3428E574D64D6836E9CE43565D7B4E580D1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:5e:40:03:0e:b2:61:e2:74:35:88:c5:56:
                    c3:5d:25:9e:c9:fd:79:50:4f:d2:f0:9e:8e:17:19:
                    0d:28:2d:16:cf:36:1d:89:0a:b0:90:33:cb:9c:92:
                    28:cc:3c:a3:74:dc:02:e9:98:2c:74:68:9a:50:25:
                    70:87:5b:21:bd:0e:d7:36:20:e1:5a:32:31:25:8c:
                    96:ed:4e:43:e7:7c:f3:8e:da:76:4f:08:1a:7d:82:
                    25:b0:a2:ae:8d:67:8a:4f:90:50:d4:d3:59:b0:5d:
                    30:1f:47:a9:cf:95:85:b2:2f:c4:69:a0:4f:fa:04:
                    29:56:25:22:10:76:30:a8:7d:06:a2:44:b5:83:63:
                    72:66:d4:2f:18:83:29:70:c7:ca:f3:19:9d:ab:ea:
                    06:d7:cc:9e:0d:19:b1:e7:d9:f9:ca:4a:ff:8f:95:
                    cf:54:56:83:14:14:dc:e4:b5:c8:f1:da:83:e4:16:
                    5b:c9:b3:93:2d:7b:e4:e1:e7:47:bf:f7:b7:3f:15:
                    f2:73:0d:79:fa:67:e7:80:19:40:ff:4c:c5:5d:d3:
                    4b:85:b3:18:3f:b5:a1:4c:db:0c:93:2c:34:b2:87:
                    4c:52:bc:41:45:e9:54:41:20:a8:d5:a0:0e:44:e0:
                    44:0d:9f:ce:ea:5e:ba:9b:58:43:ea:50:dd:d9:3f:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C3:42:8E:57:4D:64:D6:83:6E:9C:E4:35:65:D7:B4:E5:80:D1:D7
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a383030303a3a2f33342d3334203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:36:e6:8c:8a:0c:98:10:3f:f9:e7:d2:76:3e:d4:4b:c7:
         4d:4d:74:c9:28:2b:53:31:94:dd:1b:66:da:44:af:81:33:5b:
         de:63:c0:9a:12:c4:ce:e7:55:7e:3e:e0:f1:0c:2c:c3:f4:11:
         81:5d:b2:b7:a7:e2:0d:22:0b:1e:b2:4f:52:96:e1:2b:44:82:
         42:ee:1e:e6:c3:cb:73:c5:89:1e:9f:59:36:05:c3:a0:17:a9:
         1c:72:d3:b4:8c:c5:57:9b:72:19:68:44:61:b9:f3:d9:b3:a9:
         fb:77:93:9f:b1:b9:e5:66:47:b2:9a:a7:64:c3:08:a4:08:c1:
         32:61:24:2b:db:76:6c:18:77:f7:19:41:c3:72:36:08:14:d4:
         ad:c1:46:b2:d4:e0:bc:dc:7e:4d:42:a7:b1:c6:5c:83:de:ca:
         e5:c4:01:ef:05:f7:c9:a8:22:d2:12:b2:03:89:9d:c6:9a:ba:
         7d:c0:75:5e:7b:69:81:36:f5:39:1f:b7:a5:64:82:3b:0e:11:
         9e:4a:1e:bd:9a:4f:71:35:8e:2b:57:86:ac:57:f7:f5:8d:29:
         a2:cf:a5:94:a0:9a:6e:3f:87:e5:d5:01:bd:fd:88:ce:68:74:
         81:8e:c6:a3:7c:7e:fc:10:10:b1:04:fd:93:4e:02:68:61:03:
         36:6e:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:20:24 2026 by rpki-client