Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/323830363a3431643a3a2f33322d3438203d3e20323732333831.roa
File:                     323830363a3431643a3a2f33322d3438203d3e20323732333831.roa (raw, json)
Hash identifier:          rWllQtfCqwxLlsyyxEQfA55+zs76N8Uep+90Ix+IaAg=
Subject key identifier:   08:2B:70:FF:C1:D6:D5:B9:22:DE:2E:7F:7D:12:B8:58:30:7B:D6:8F
Certificate issuer:       /CN=710BAA23497F47E0CB6599D321F91913EB0F4013
Certificate serial:       68985014893C1853B918BD0CF5E454D10EC2A8B8
Authority key identifier: 71:0B:AA:23:49:7F:47:E0:CB:65:99:D3:21:F9:19:13:EB:0F:40:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/710BAA23497F47E0CB6599D321F91913EB0F4013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/323830363a3431643a3a2f33322d3438203d3e20323732333831.roa
Signing time:             Sun 04 Oct 2026 18:38:46 +0000
ROA not before:           Sun 04 Oct 2026 18:33:46 +0000
ROA not after:            Sun 03 Oct 2027 18:38:46 +0000
asID:                     272381
IP address blocks:        2806:41d::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/710BAA23497F47E0CB6599D321F91913EB0F4013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/710BAA23497F47E0CB6599D321F91913EB0F4013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/710BAA23497F47E0CB6599D321F91913EB0F4013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:98:50:14:89:3c:18:53:b9:18:bd:0c:f5:e4:54:d1:0e:c2:a8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710BAA23497F47E0CB6599D321F91913EB0F4013
        Validity
            Not Before: Oct  4 18:33:46 2026 GMT
            Not After : Oct  3 18:38:46 2027 GMT
        Subject: CN=082B70FFC1D6D5B922DE2E7F7D12B858307BD68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:27:27:b4:00:a4:82:a3:57:dc:06:ee:07:
                    0e:f1:67:fe:4d:30:6c:44:ac:e0:ad:6e:15:66:ea:
                    d7:9f:8a:a8:c6:9f:2d:3e:db:48:25:b0:69:ec:e9:
                    5a:12:1f:63:27:68:c4:fd:dc:ab:13:1a:98:c6:dc:
                    2b:8d:89:ad:ff:cc:92:f0:b9:6b:ce:54:5e:78:d1:
                    77:aa:e4:a3:95:38:f2:23:79:1d:cf:91:db:43:dd:
                    13:86:42:fe:4d:4f:42:ed:ef:57:e3:4f:f4:5a:a0:
                    6f:3a:b1:7e:4e:20:85:61:76:73:e8:0d:aa:d3:5e:
                    1f:73:67:cf:e8:09:c2:98:37:5a:94:dd:f2:34:60:
                    0a:94:e1:87:3c:ef:de:af:bd:d8:39:6e:41:fa:ad:
                    ee:5b:0b:97:45:35:d3:3c:63:5a:90:67:15:de:eb:
                    b8:97:6d:9d:2f:1e:7c:d3:7a:0b:81:cc:87:41:d8:
                    ba:3a:62:7e:14:38:ff:e3:71:cb:1a:c4:7f:74:00:
                    52:b5:ca:0d:13:f5:ef:ef:7e:cd:f9:a1:d1:4d:8e:
                    e2:a8:43:eb:4f:6f:29:20:f4:dc:31:57:d3:b5:d3:
                    c7:0d:67:33:7a:03:23:61:5f:b8:84:2e:f4:6b:fb:
                    b7:5d:99:3f:9d:7e:f3:ba:1d:a6:f1:8b:1c:0f:ee:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2B:70:FF:C1:D6:D5:B9:22:DE:2E:7F:7D:12:B8:58:30:7B:D6:8F
            X509v3 Authority Key Identifier:
                keyid:71:0B:AA:23:49:7F:47:E0:CB:65:99:D3:21:F9:19:13:EB:0F:40:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/710BAA23497F47E0CB6599D321F91913EB0F4013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/710BAA23497F47E0CB6599D321F91913EB0F4013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/323830363a3431643a3a2f33322d3438203d3e20323732333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:41d::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:33:58:f8:5d:66:02:46:2b:e1:1a:20:3f:90:a9:b5:e8:19:
         ec:be:84:ee:97:eb:42:59:aa:af:8d:b9:3e:b8:c8:57:72:65:
         3f:0b:fc:07:b6:b9:22:4d:5b:1a:eb:7d:9e:95:57:f9:ae:8f:
         b4:48:31:e3:17:c0:35:e7:ff:30:a3:9d:82:76:bf:ce:fe:fe:
         34:1a:7d:d4:3a:a4:78:aa:2a:8d:e0:f1:5f:e5:29:b4:eb:c7:
         17:50:42:29:cb:cb:fb:0e:e1:62:4b:e2:c5:07:30:99:f3:40:
         50:fb:e8:ed:7a:58:c4:ee:20:22:14:a1:12:03:ff:41:f0:72:
         ff:4d:63:9f:08:3a:bc:58:69:ba:48:89:4a:b2:3e:c7:18:74:
         21:d4:77:9c:ec:04:7c:08:9e:11:4d:54:16:96:15:b1:f4:6c:
         f1:00:bb:1e:39:2a:11:ec:79:57:93:de:b8:1f:44:77:92:f2:
         7b:6a:01:76:e0:11:42:9a:c6:0c:c3:02:96:d3:ca:d6:fb:14:
         5c:4c:83:17:b3:28:bc:2a:bd:0f:bc:01:7d:ed:98:2f:86:6f:
         f5:6f:3a:71:c0:04:ab:51:d0:0f:08:e5:f9:76:33:c2:96:41:
         9b:43:d7:da:c2:f1:c9:05:8b:f0:f0:e4:1f:d4:cc:98:84:fa:
         b2:25:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:50:40 2026 by rpki-client