Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/323830303a3936303a3a2f33322d3332203d3e203237373638.roa
File:                     323830303a3936303a3a2f33322d3332203d3e203237373638.roa (raw, json)
Hash identifier:          jKkiJOGgvBi1RHdZpk6GZHm+Wv9oez/9o0g7yqg6i2k=
Subject key identifier:   D9:9F:76:4B:DB:92:53:80:FB:1C:F5:F9:A7:57:90:23:C5:92:2B:78
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       6696B77CEE6710674F84F73E85BF880B2FD56BA9
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/323830303a3936303a3a2f33322d3332203d3e203237373638.roa
Signing time:             Sun 11 Oct 2026 01:39:56 +0000
ROA not before:           Sun 11 Oct 2026 01:34:56 +0000
ROA not after:            Sun 10 Oct 2027 01:39:56 +0000
asID:                     27768
IP address blocks:        2800:960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 11:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:96:b7:7c:ee:67:10:67:4f:84:f7:3e:85:bf:88:0b:2f:d5:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Oct 11 01:34:56 2026 GMT
            Not After : Oct 10 01:39:56 2027 GMT
        Subject: CN=D99F764BDB925380FB1CF5F9A7579023C5922B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:99:87:99:ff:23:f5:ab:aa:4b:74:96:28:
                    a7:50:0f:96:4b:ce:7c:5d:b9:74:da:cf:13:67:84:
                    c0:6c:5e:27:69:2e:89:22:a0:73:3d:d6:3c:91:40:
                    ca:ce:3a:ef:bb:09:5e:32:e0:77:96:5f:51:df:c9:
                    e9:e9:b9:47:53:5e:02:ed:cf:bb:4a:a8:1c:1a:7d:
                    ca:34:3d:8f:74:ca:72:50:4a:ef:41:08:c1:1f:d5:
                    ba:cf:06:b9:f2:43:6f:49:26:d1:e1:b9:87:09:81:
                    4b:c2:6a:46:c0:2f:0d:e2:28:41:dd:c0:46:39:dc:
                    bb:60:eb:81:4c:c1:58:0f:67:5e:ab:47:17:19:cf:
                    d6:0a:c9:25:f8:d6:b4:03:db:96:9e:76:22:54:30:
                    8f:85:25:39:66:5f:6a:7e:8f:cd:ff:3d:be:6c:d5:
                    6f:de:39:38:cf:10:49:ce:87:45:ae:e0:2c:6c:45:
                    68:5e:a6:25:98:57:aa:22:89:d4:38:82:ed:e3:a9:
                    64:39:e9:b4:24:d8:cc:d4:4f:22:96:75:a8:d9:aa:
                    c6:3c:03:05:28:4e:f4:59:61:77:2b:a9:9a:03:69:
                    86:e7:1c:cf:13:e0:cb:b8:3d:c6:ad:c6:e1:fc:dd:
                    82:02:64:92:2a:28:96:1b:0b:7a:90:2d:29:e1:fe:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:76:4B:DB:92:53:80:FB:1C:F5:F9:A7:57:90:23:C5:92:2B:78
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/323830303a3936303a3a2f33322d3332203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:960::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:9e:14:5c:16:19:72:1d:7f:bc:7d:d8:98:2c:5c:51:bf:f8:
         bf:f1:c4:df:b9:86:f7:61:49:73:05:9c:17:9c:c8:0e:ce:5b:
         11:9d:2d:bc:cd:52:72:8c:f4:c6:ac:02:e0:a4:81:b3:99:90:
         b2:26:bd:90:8b:3e:9e:bf:87:25:7b:d0:d5:31:1a:26:67:7f:
         0a:53:96:14:7c:10:80:ac:5f:1e:9c:7a:aa:4a:06:89:de:9e:
         7f:a8:59:81:99:b5:46:db:80:f5:7e:43:4c:cb:b5:5e:f1:4b:
         10:78:ac:77:16:6f:59:e1:77:6c:7f:38:30:6a:91:e5:5e:ea:
         cc:9c:75:eb:4c:05:be:4b:12:c9:af:54:26:88:4c:0b:da:3f:
         d0:b8:18:39:6d:36:77:78:d5:ba:12:b7:ac:a8:d4:f0:b4:39:
         26:19:03:0d:70:04:a6:c3:8d:05:7f:e1:a4:ab:bc:36:16:a9:
         1d:37:52:f2:fc:7a:b0:20:2d:51:96:6e:0d:1e:77:b4:50:31:
         58:ba:8a:56:d2:e7:f6:23:b5:af:c4:68:c8:81:9d:8d:01:63:
         74:3e:e3:ac:e2:c2:01:d6:08:06:fd:69:3d:78:fa:08:1c:f1:
         55:8e:9c:9c:cc:7a:f9:33:d5:66:b1:21:06:fa:52:2f:a4:79:
         a8:a4:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:53:44 2026 by rpki-client