Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/323830363a3262303a3a2f33322d3438203d3e203332303938.roa
File:                     323830363a3262303a3a2f33322d3438203d3e203332303938.roa (raw, json)
Hash identifier:          fKFFxcFzJ3lcZngWodWqSvcJLt0zLtZEC4QjuQsejKw=
Subject key identifier:   1D:B7:5C:F4:44:78:D5:28:3D:7E:3B:FE:AF:52:7D:8D:E3:82:4B:63
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       541A96521B4DA35993F8DC81600CB5508C582470
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/323830363a3262303a3a2f33322d3438203d3e203332303938.roa
Signing time:             Thu 24 Sep 2026 05:55:02 +0000
ROA not before:           Thu 24 Sep 2026 05:50:02 +0000
ROA not after:            Thu 23 Sep 2027 05:55:02 +0000
asID:                     32098
IP address blocks:        2806:2b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1a:96:52:1b:4d:a3:59:93:f8:dc:81:60:0c:b5:50:8c:58:24:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Sep 24 05:50:02 2026 GMT
            Not After : Sep 23 05:55:02 2027 GMT
        Subject: CN=1DB75CF44478D5283D7E3BFEAF527D8DE3824B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3e:57:d3:97:88:a4:99:89:92:34:47:39:51:
                    fd:92:a2:5a:7a:ed:cd:45:3e:02:3a:8d:fc:f4:5e:
                    75:95:bb:74:0d:05:5b:a7:e5:ff:ab:6e:a2:81:15:
                    77:56:e4:aa:62:f6:4b:59:97:80:59:79:4a:51:f8:
                    1b:af:e6:b8:76:75:9e:2e:6b:17:45:f7:17:28:6f:
                    56:8c:dc:f1:ef:75:1f:48:8f:c4:3a:0f:22:a3:0b:
                    e6:3c:69:b5:17:23:cb:84:8c:60:ff:06:cf:18:78:
                    f6:8c:57:3b:a9:8d:b1:54:eb:46:a8:f1:d4:3a:70:
                    7b:0d:fd:00:76:d3:75:7d:34:5a:e7:65:d9:69:c4:
                    6c:75:aa:6b:b1:e5:1f:1e:01:7a:ba:34:8e:e9:72:
                    44:e7:0c:64:fe:6d:88:bf:1d:3f:f7:f2:b1:d6:9c:
                    b7:12:96:fe:a5:88:52:60:fb:e8:a0:db:b3:da:a9:
                    dc:fd:00:c1:0b:6a:f0:39:62:a7:82:fd:a6:c7:5d:
                    de:8d:0a:d6:62:69:bd:87:64:9b:15:29:a3:94:18:
                    61:fc:ef:25:ad:29:75:9f:17:5f:5a:23:15:e6:e4:
                    1c:aa:e2:8d:c8:29:3c:42:3f:ba:f3:cc:62:fb:47:
                    26:b1:98:24:ad:e7:d9:e6:45:a0:fa:1a:44:ff:92:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B7:5C:F4:44:78:D5:28:3D:7E:3B:FE:AF:52:7D:8D:E3:82:4B:63
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/323830363a3262303a3a2f33322d3438203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:bd:d9:ef:51:3d:1d:17:04:71:c2:b8:e1:27:b7:ad:76:
         01:5e:3e:f4:ea:66:9a:33:5e:9e:37:ac:29:e8:64:c2:52:88:
         c4:40:c8:85:5f:e5:e3:84:35:36:42:2b:a7:fe:f0:48:53:f1:
         c8:58:24:75:f4:c0:1b:22:c6:72:e2:6b:7a:8a:51:31:1f:36:
         c9:9b:84:e4:5b:89:8a:49:78:a6:54:45:f1:87:d7:0e:bd:1f:
         8b:fe:38:03:75:f6:69:f5:3a:97:3e:5a:d5:82:7e:52:6e:e3:
         12:3c:14:f6:a7:90:5b:ad:80:68:15:ed:25:fe:07:c9:08:6d:
         0d:1a:ce:cb:03:13:0e:af:bf:31:c5:bd:b0:9b:ed:e3:05:20:
         be:c9:27:b2:34:5e:8b:76:c2:f9:d8:9f:2b:50:39:5b:76:59:
         62:82:3c:82:49:0f:78:91:d5:f4:9f:8a:41:4d:a4:d5:5c:ff:
         8e:93:43:0e:2b:27:8b:ef:19:2b:21:33:f0:44:fd:0d:49:4a:
         cf:4d:6b:81:bf:03:37:8a:29:40:f8:20:42:80:aa:09:f9:98:
         75:af:e8:a8:48:fa:b2:b5:2a:b0:57:0f:41:53:a1:f9:ac:f2:
         62:d8:a0:fb:fc:73:7b:53:ab:bb:5e:de:49:31:37:be:ad:b4:
         b0:d3:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:51:17 2026 by rpki-client