Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2C7D1A30CFDB67944E31F5E3B506FB6EC9D7D157C262F944C55886B2D347F2F/0/323830313a31643a383430303a3a2f34382d3438203d3e20323734393836.roa
File:                     323830313a31643a383430303a3a2f34382d3438203d3e20323734393836.roa (raw, json)
Hash identifier:          OgjmBN9D89sX41XWAhx/62PzwQAdVBGwVScFOl0h0I4=
Subject key identifier:   CB:B5:75:AD:61:D8:9E:6E:E0:CC:90:14:D5:F5:CB:4A:A5:3A:E9:79
Certificate issuer:       /CN=69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44
Certificate serial:       40BE067D1C1920AF1A397EC69233AE4A03999342
Authority key identifier: 69:FE:45:9F:28:D9:EC:EE:3D:82:AE:E5:2A:65:E3:EF:64:F0:6C:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2C7D1A30CFDB67944E31F5E3B506FB6EC9D7D157C262F944C55886B2D347F2F/0/323830313a31643a383430303a3a2f34382d3438203d3e20323734393836.roa
Signing time:             Tue 14 Jul 2026 08:35:00 +0000
ROA not before:           Tue 14 Jul 2026 08:30:00 +0000
ROA not after:            Tue 13 Jul 2027 08:35:00 +0000
asID:                     274986
IP address blocks:        2801:1d:8400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2C7D1A30CFDB67944E31F5E3B506FB6EC9D7D157C262F944C55886B2D347F2F/0/69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2C7D1A30CFDB67944E31F5E3B506FB6EC9D7D157C262F944C55886B2D347F2F/0/69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 14:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:be:06:7d:1c:19:20:af:1a:39:7e:c6:92:33:ae:4a:03:99:93:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44
        Validity
            Not Before: Jul 14 08:30:00 2026 GMT
            Not After : Jul 13 08:35:00 2027 GMT
        Subject: CN=CBB575AD61D89E6EE0CC9014D5F5CB4AA53AE979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:5a:1b:3d:a6:e7:dc:4f:66:1b:fd:5d:e3:
                    25:05:29:57:3d:48:46:15:d6:01:52:85:4a:f9:a8:
                    68:26:19:56:c4:e0:18:0d:f1:93:29:87:b9:e6:83:
                    52:78:39:82:fc:81:a8:ce:d0:11:44:50:0b:b4:b4:
                    8d:ec:5e:5d:f3:9e:a0:8d:57:06:20:11:65:40:f1:
                    c3:70:3c:3d:ee:84:1a:fc:32:c5:6f:aa:e4:92:0e:
                    16:da:35:26:2f:4f:30:62:62:5d:7c:f5:0b:b7:c3:
                    42:31:e7:b4:5d:fe:0d:18:68:4f:ee:eb:1b:a4:94:
                    37:cd:c2:92:12:ff:99:3f:3f:57:d1:5d:ca:4d:9d:
                    49:bb:74:62:b2:09:d9:84:d9:7c:38:db:86:be:98:
                    45:83:6a:c3:0c:a8:74:4e:d8:81:85:ee:0e:c8:39:
                    1e:23:4c:96:9c:94:35:64:2b:34:52:01:02:a0:0c:
                    42:9b:9a:87:0a:04:39:cf:ca:da:c4:6d:97:51:95:
                    6d:1e:a6:02:4b:06:00:7f:ef:34:de:8e:64:79:d2:
                    1e:4c:f7:10:44:37:2f:b4:1f:8d:dd:da:51:3a:8b:
                    55:ae:be:7e:72:1e:3a:d9:fa:4c:49:ec:04:1b:83:
                    bc:81:9f:5a:f7:d9:5d:4f:d4:c5:ca:da:fc:e9:d0:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:75:AD:61:D8:9E:6E:E0:CC:90:14:D5:F5:CB:4A:A5:3A:E9:79
            X509v3 Authority Key Identifier:
                keyid:69:FE:45:9F:28:D9:EC:EE:3D:82:AE:E5:2A:65:E3:EF:64:F0:6C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2C7D1A30CFDB67944E31F5E3B506FB6EC9D7D157C262F944C55886B2D347F2F/0/69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FE459F28D9ECEE3D82AEE52A65E3EF64F06C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2C7D1A30CFDB67944E31F5E3B506FB6EC9D7D157C262F944C55886B2D347F2F/0/323830313a31643a383430303a3a2f34382d3438203d3e20323734393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8400::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:98:8d:06:85:db:c5:ef:8e:d5:0a:ac:d9:33:a7:66:60:
         8e:20:10:29:c9:96:54:da:b9:7c:01:93:95:bc:9d:50:30:0d:
         86:8a:dd:98:86:84:9a:64:59:47:d6:e6:4b:32:72:1f:fc:08:
         e5:d4:82:a2:e1:e6:eb:3d:08:f9:76:02:2d:9f:27:39:0a:ef:
         aa:d3:62:01:1f:74:54:ab:93:4a:b6:bd:03:14:c7:0d:24:af:
         ca:ac:03:ed:fd:97:4d:b7:5c:03:72:a5:bb:9c:28:9b:95:eb:
         4a:f4:db:83:dc:9e:c5:fb:35:48:2d:1b:82:14:63:3c:35:dc:
         98:4c:bc:e6:23:12:f6:86:ce:c8:e7:87:13:c8:da:3f:b1:6d:
         87:28:d9:2f:d7:26:ba:4c:6b:64:6a:2d:45:34:b5:a8:c0:6a:
         c8:a6:03:cd:4c:0e:80:c8:18:04:a1:d6:5f:3f:e8:70:a9:ba:
         eb:c4:05:00:6d:cb:df:3c:0c:65:d5:82:90:b7:3e:5b:b4:1e:
         2c:95:1e:b2:62:b5:be:2d:5d:19:d8:7e:c8:1d:ec:2a:2f:7e:
         41:8f:c9:8c:49:f6:64:90:1b:1f:59:a5:d0:e0:86:63:95:4c:
         56:89:e3:d9:c2:1e:c1:6a:bf:24:44:9d:27:a5:3d:1d:e6:29:
         9b:6e:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:20:25 2026 by rpki-client