Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a31303a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3635303a31303a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          ykAH3jEUO8XUjpiHTKyS9ThPmC+Dj2RhW8nSXzcXYFY=
Subject key identifier:   EF:F6:5E:4B:90:BE:82:02:FB:09:00:A0:7E:C9:11:44:8A:0D:3F:63
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       46636BD0744FF61BFB448AEF0ADB572056860075
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a31303a3a2f34382d3438203d3e203138363738.roa
Signing time:             Wed 08 Jul 2026 16:51:29 +0000
ROA not before:           Wed 08 Jul 2026 16:46:29 +0000
ROA not after:            Wed 07 Jul 2027 16:51:29 +0000
asID:                     18678
IP address blocks:        2800:650:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:63:6b:d0:74:4f:f6:1b:fb:44:8a:ef:0a:db:57:20:56:86:00:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul  8 16:46:29 2026 GMT
            Not After : Jul  7 16:51:29 2027 GMT
        Subject: CN=EFF65E4B90BE8202FB0900A07EC911448A0D3F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:fd:dd:bc:44:4b:5f:47:ec:20:8c:14:2a:
                    82:c5:45:78:fc:cc:0c:3a:79:c7:51:06:33:eb:bc:
                    1d:15:e6:c7:80:22:81:39:c7:0b:09:2c:e0:9c:20:
                    40:13:08:46:6c:bc:f1:0b:65:d5:37:3c:16:c6:d5:
                    2b:35:42:55:a4:d8:df:73:10:54:88:cf:eb:aa:45:
                    6a:1e:5d:8e:c5:14:0d:24:e4:73:a4:19:a8:9e:15:
                    66:e7:d0:b4:39:b4:f2:34:81:10:84:ca:b2:ff:c4:
                    a3:cd:0f:f4:24:0f:44:d4:ad:20:4a:2c:22:7f:11:
                    53:c4:66:cc:d0:ee:2f:ef:8c:73:56:ea:19:91:11:
                    69:9e:5c:3e:2c:1e:e0:93:8a:95:ba:17:c5:10:4b:
                    ae:ad:ee:92:69:2c:27:8e:d8:47:1d:56:cf:7f:66:
                    f6:9c:c7:a2:36:0b:36:82:ea:0b:05:05:23:77:71:
                    18:79:fb:cf:d6:b0:ed:0c:8a:88:23:65:4e:0d:56:
                    0f:a1:9f:73:aa:64:6e:a4:d4:c3:0d:97:a7:d7:54:
                    ae:ae:24:ed:5c:1e:b9:b9:85:1b:9a:45:53:fb:8b:
                    3c:bd:d9:6c:ed:02:3f:e2:35:ac:39:df:21:5f:44:
                    88:4e:7c:96:9d:00:ac:b0:00:bc:37:aa:28:8f:60:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F6:5E:4B:90:BE:82:02:FB:09:00:A0:7E:C9:11:44:8A:0D:3F:63
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a31303a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:93:8e:73:e0:04:af:13:d2:53:04:e9:76:bd:0a:9a:74:d0:
         4c:4f:c1:59:c1:32:92:bf:ec:be:9a:de:9c:6d:9c:5a:4e:15:
         53:20:c3:27:be:57:a1:95:8c:cf:69:94:f5:c9:c7:58:63:59:
         29:f0:e2:4d:03:79:48:98:aa:bd:81:53:1e:6e:84:90:70:af:
         6a:1a:18:9f:7e:93:30:d6:01:ac:80:d8:c4:02:e7:d6:05:0d:
         91:c1:9d:61:2f:d0:a8:b4:8a:1f:dd:57:e1:81:98:d6:13:68:
         ab:a7:95:47:4d:6a:81:a3:45:18:86:6c:a4:88:38:08:87:90:
         31:8f:de:09:2b:0b:cb:43:6b:7b:91:31:82:5e:2a:61:1c:c4:
         ca:00:35:e5:80:0f:2d:83:fb:e9:09:aa:5a:b7:23:f3:e0:18:
         6a:f3:1d:7f:9f:89:a6:10:d7:44:fa:c2:3a:1b:60:ee:95:2e:
         18:a0:2d:4e:d3:69:12:55:65:a5:b6:53:93:5a:a8:98:10:20:
         a6:3d:6b:bf:7a:a6:d5:b7:63:b4:0c:2a:15:7f:7e:c4:e0:0b:
         04:88:0f:a6:2e:2e:36:ee:e2:4e:2b:0f:c7:a3:dc:09:86:cc:
         ad:ea:f5:d9:e7:eb:68:cc:3e:51:4d:3b:48:a7:dc:47:f3:d3:
         64:af:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:35:58 2026 by rpki-client