Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165313a3130303a3a2f34302d3438203d3e20323733393933.roa
File:                     323830303a3165313a3130303a3a2f34302d3438203d3e20323733393933.roa (raw, json)
Hash identifier:          mp2NjNbyBzdb9FAn0yY7+mOQu/QyjroKP/AGNMFkTx8=
Subject key identifier:   72:42:E8:65:1F:7C:CC:A4:08:48:E3:81:D9:F9:A7:6A:83:A9:29:41
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       7DC7E97AEE4E4E01E58B2D55B495256188C233A2
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165313a3130303a3a2f34302d3438203d3e20323733393933.roa
Signing time:             Fri 02 Oct 2026 14:37:46 +0000
ROA not before:           Fri 02 Oct 2026 14:32:46 +0000
ROA not after:            Fri 01 Oct 2027 14:37:46 +0000
asID:                     273993
IP address blocks:        2800:1e1:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 21:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c7:e9:7a:ee:4e:4e:01:e5:8b:2d:55:b4:95:25:61:88:c2:33:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Oct  2 14:32:46 2026 GMT
            Not After : Oct  1 14:37:46 2027 GMT
        Subject: CN=7242E8651F7CCCA40848E381D9F9A76A83A92941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f6:fb:37:ce:1f:83:2f:90:e3:9b:ea:e7:10:
                    5e:77:56:06:67:d7:d6:14:7f:b4:ef:d2:95:0f:1f:
                    4f:79:64:98:af:19:c3:01:54:16:11:fb:e6:db:87:
                    00:92:f1:f7:e7:08:98:20:83:25:8f:c1:ac:f3:39:
                    70:bf:ef:8a:1e:e0:6a:ea:eb:4d:22:fe:e1:e3:58:
                    3e:07:11:44:e6:b2:88:b1:15:f1:be:55:02:22:57:
                    71:1a:34:68:a6:d1:99:f2:a3:7a:36:e1:df:18:fd:
                    c1:bb:06:91:12:12:a1:65:8a:29:40:af:16:1c:fa:
                    0e:ff:1e:b4:7c:cf:34:ca:1f:a0:a3:5e:6e:fe:2d:
                    66:a8:55:20:6b:70:4b:54:1b:9c:1b:e1:05:49:8c:
                    71:99:e1:3b:fd:d0:c4:17:0d:bd:10:3f:63:a8:65:
                    2e:c5:32:7c:45:6d:02:0d:de:a3:b6:2b:fd:3c:ca:
                    6f:73:c6:62:34:95:11:3a:25:a8:a0:9e:de:27:cc:
                    a2:70:ac:d3:a1:3d:ec:88:31:b4:5c:2c:32:49:45:
                    f3:8d:4f:f1:64:93:a7:b7:00:f7:ad:ec:28:91:c1:
                    56:ce:8e:de:13:d4:05:a0:33:39:b5:d8:c1:8c:ec:
                    6a:ae:82:39:fb:93:d5:f8:4d:99:bb:17:26:03:1b:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:42:E8:65:1F:7C:CC:A4:08:48:E3:81:D9:F9:A7:6A:83:A9:29:41
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165313a3130303a3a2f34302d3438203d3e20323733393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1e1:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:d6:74:b9:23:3c:be:4b:95:25:a3:16:46:4c:14:4a:c1:ed:
         6e:c4:c6:f3:c8:34:f4:f8:24:3c:a6:82:71:3b:dc:eb:73:fb:
         a6:c4:89:fd:dd:3a:4a:8a:ee:7b:1b:3d:d0:8b:5c:1e:d8:00:
         71:4f:fd:a5:56:c8:92:db:3a:7a:37:ec:db:6b:fe:3b:b4:e7:
         75:3f:4d:d2:3e:36:a5:91:70:15:6a:ed:bd:49:17:2c:b7:5d:
         2a:1f:43:cc:c8:b3:1d:cd:ea:39:d4:4f:fd:fe:f5:92:4f:d1:
         8e:b1:58:c0:f5:db:1a:f4:8b:5c:ba:da:99:e0:e0:79:b4:39:
         cd:94:ec:5b:93:77:8c:bc:22:ab:2e:bc:5c:64:6d:5c:7f:9c:
         2a:4a:58:89:33:7f:03:91:3a:06:f9:ac:4f:0f:20:86:a1:06:
         1b:61:69:9c:bc:05:e1:0e:2c:ed:3a:db:5e:39:08:ab:c8:60:
         d9:81:6d:6d:e3:39:9f:3c:57:36:94:fd:48:28:8b:aa:4a:67:
         5a:62:11:5f:f2:99:7a:db:0e:f5:49:b2:90:91:62:01:b8:0c:
         e6:90:f7:63:03:85:77:f1:44:b0:a5:9d:9e:f7:26:04:8c:f3:
         3f:c0:6e:33:4e:15:ea:37:09:8a:5e:33:92:49:15:35:c5:ca:
         d3:3a:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:25:52 2026 by rpki-client