Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a3a2f34382d3438203d3e203134323332.roa
File:                     323830303a3262303a3a2f34382d3438203d3e203134323332.roa (raw, json)
Hash identifier:          xVKAymHQtd3qAtmH3XLz7bipb3y+ADnQqVmkg48D1b8=
Subject key identifier:   8C:4B:86:0E:62:46:D9:03:49:35:B0:A6:32:FA:22:94:24:1A:D1:EC
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       212B49B83EFF4EB5B0C2EBE9B98339E972911B07
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a3a2f34382d3438203d3e203134323332.roa
Signing time:             Fri 16 Oct 2026 16:00:05 +0000
ROA not before:           Fri 16 Oct 2026 15:55:05 +0000
ROA not after:            Fri 15 Oct 2027 16:00:05 +0000
asID:                     14232
IP address blocks:        2800:2b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 18:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2b:49:b8:3e:ff:4e:b5:b0:c2:eb:e9:b9:83:39:e9:72:91:1b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Oct 16 15:55:05 2026 GMT
            Not After : Oct 15 16:00:05 2027 GMT
        Subject: CN=8C4B860E6246D9034935B0A632FA2294241AD1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:70:7e:86:15:9d:ab:18:76:cb:1b:c6:ff:1e:
                    13:e4:14:16:5d:fd:81:1f:5f:3a:d6:3b:09:1c:5d:
                    fc:75:51:9c:97:09:ea:84:ea:01:23:93:ba:89:a5:
                    78:6a:38:8a:dc:b8:be:9c:a9:af:9d:94:e9:29:51:
                    47:68:6b:5a:c0:0f:bb:2a:0c:56:6b:2f:bb:32:66:
                    10:06:a4:dd:8d:22:96:bc:39:26:11:56:fe:e0:10:
                    d4:18:a3:d5:fb:66:17:6b:07:06:e2:05:99:ce:04:
                    04:2f:d0:a6:09:76:28:c4:b9:cc:b5:06:e4:bd:5f:
                    4e:0a:f9:e5:db:40:53:24:2f:13:5a:10:aa:b5:67:
                    c3:00:18:8e:ac:ad:04:91:47:c6:1e:9c:a9:34:bf:
                    92:0b:10:48:02:c3:0a:00:be:3a:52:49:57:7d:42:
                    50:b5:39:8e:80:c9:a9:54:28:01:b9:f3:93:67:e2:
                    af:cd:f2:fb:6b:5e:69:7e:54:97:ec:d3:0b:63:17:
                    23:64:e9:47:04:9f:c2:f9:d9:f3:c2:c7:f8:69:9c:
                    93:6c:c2:48:e3:61:61:a0:fd:c4:39:0b:53:fc:dd:
                    d0:13:25:c0:52:d6:fc:08:7a:de:09:da:14:07:b8:
                    2a:ef:9b:e3:db:73:b2:73:c7:28:ef:dd:9a:f3:e8:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:86:0E:62:46:D9:03:49:35:B0:A6:32:FA:22:94:24:1A:D1:EC
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a3a2f34382d3438203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:0e:1d:19:0b:c0:bc:81:98:fa:e0:b1:9d:02:f7:49:4f:de:
         ab:84:11:7f:7d:73:69:e9:4d:af:80:37:28:28:66:29:d4:df:
         24:52:c8:6d:56:85:1a:8b:fd:73:2b:87:13:fd:b1:ca:72:13:
         c2:2e:5c:a9:d5:c0:fd:90:4e:60:5f:f4:a8:d0:3b:ba:e1:94:
         41:f8:36:32:55:b2:f4:71:d4:8d:bb:62:b8:b6:af:83:1d:43:
         7b:ef:c4:12:f5:88:7e:4c:a8:dd:6a:1a:ed:1c:8e:4f:0b:3d:
         b4:3c:91:1b:42:a6:fe:99:15:73:06:95:8c:5c:42:1e:6a:4a:
         b1:13:7c:01:65:a2:39:04:6a:e6:c0:65:a8:ce:d0:10:bf:c1:
         c6:6d:54:47:e5:d2:cc:d2:d5:9d:55:9a:b4:e8:a4:50:1c:dc:
         d4:2c:a2:35:28:d3:d7:f0:66:8d:d1:22:7d:16:b4:66:c6:27:
         6c:c1:d8:4d:e5:ce:3e:0e:0d:e6:18:4d:d0:46:6a:89:8a:36:
         bd:56:cf:08:9d:f8:21:6e:3a:85:43:e0:d6:45:a0:97:a9:df:
         ee:43:a2:b9:4f:f1:06:f0:2e:5f:25:5f:38:43:92:1a:c4:da:
         18:dc:c6:8c:72:26:7d:0b:db:fa:51:bd:07:68:f4:1e:de:b2:
         dc:69:18:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:57:56 2026 by rpki-client