Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343031363a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343031363a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          ZYEORogXZb3tGMyRYW3XV8xJMs6QfJqIYMf76bkxwCM=
Subject key identifier:   46:E8:C7:3F:76:BB:7D:85:F5:36:5B:8E:EC:1D:F7:D4:54:4E:BA:8A
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       6AF972E969D3E6EF16492B0263EB6F707C269B81
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343031363a3a2f34372d3437203d3e2033353733.roa
Signing time:             Wed 14 Oct 2026 09:00:00 +0000
ROA not before:           Wed 14 Oct 2026 08:55:00 +0000
ROA not after:            Wed 13 Oct 2027 09:00:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:4016::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Nov 2026 08:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f9:72:e9:69:d3:e6:ef:16:49:2b:02:63:eb:6f:70:7c:26:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Oct 14 08:55:00 2026 GMT
            Not After : Oct 13 09:00:00 2027 GMT
        Subject: CN=46E8C73F76BB7D85F5365B8EEC1DF7D4544EBA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:ba:ac:3c:f3:c1:f2:89:59:13:d3:c0:60:
                    3c:f6:e7:2a:e5:43:1a:ff:94:c2:6d:19:f4:f6:5a:
                    48:2e:51:a0:52:9e:9b:72:8d:3d:2b:f6:38:cb:74:
                    0b:91:a1:18:03:18:57:76:aa:72:f8:6b:42:97:23:
                    4e:07:de:33:f2:a5:82:3f:81:82:04:13:f3:08:58:
                    d0:22:da:6c:fb:8a:65:3d:e7:25:34:f1:6f:ed:07:
                    da:71:44:2a:7f:ec:fa:fd:c4:11:c7:03:c4:f7:9f:
                    68:d1:41:e6:3c:4a:b2:eb:f9:08:7f:37:c4:27:c7:
                    4f:92:69:43:e4:95:9e:e0:97:1c:5e:f8:64:ba:6f:
                    9b:57:9d:22:8f:0b:41:f3:c2:e2:65:5a:f3:1b:13:
                    1b:81:16:8e:34:9e:4a:21:5b:87:0c:6c:03:d5:ca:
                    9c:8b:0d:cc:0d:73:25:fb:95:b7:8d:4c:fc:73:61:
                    88:16:a3:4e:02:db:5c:7b:d1:f7:bf:e2:fe:3c:55:
                    6c:a7:0a:b7:0a:14:b0:5a:4b:b4:eb:71:49:58:f1:
                    f8:52:62:ba:c3:07:2d:44:fb:d6:e9:c1:77:24:43:
                    e1:0e:3f:ee:20:f4:49:04:94:9d:a7:16:23:ae:62:
                    03:29:06:2f:0d:47:c8:a0:42:5c:8b:c2:2c:bf:24:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:C7:3F:76:BB:7D:85:F5:36:5B:8E:EC:1D:F7:D4:54:4E:BA:8A
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343031363a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4016::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:79:07:bb:c8:07:7a:7b:e5:87:01:4e:52:a2:3c:10:70:7a:
         66:d0:04:6a:b0:3c:39:d9:36:ef:c5:fd:0a:b4:b7:e7:7c:f2:
         a5:8f:51:01:d9:5e:ed:2d:28:bd:d5:ef:6d:20:53:5b:b0:49:
         26:ce:3b:22:5e:ef:98:f4:2c:60:df:7a:7a:85:69:16:f0:b4:
         e3:59:1b:e6:9c:f1:f2:fe:97:b6:5e:16:dc:a0:ce:f9:cd:91:
         be:80:cc:39:73:55:e8:98:25:e7:cc:60:72:4d:a6:50:2d:70:
         53:e9:02:12:d5:5b:fa:f1:72:0b:8e:a9:10:6d:07:27:6f:90:
         d4:d5:a9:a2:31:b3:51:b8:88:af:6a:33:cc:71:7e:a4:18:0b:
         df:89:14:f6:ce:07:17:17:2a:c1:88:46:55:f2:36:10:67:21:
         aa:94:da:0e:97:63:6d:59:68:1d:54:f2:55:e0:65:fc:19:52:
         d2:b0:77:2d:80:bc:d1:87:e1:5b:65:ca:bf:41:01:3f:22:6d:
         fb:7a:bf:f8:b0:7f:fd:bd:46:f4:6a:be:31:36:54:6f:39:a7:
         61:09:98:99:22:54:b0:b6:ed:b4:8e:c7:62:3f:a3:2d:59:7a:
         2d:4c:48:56:c4:8a:61:ce:12:95:ad:44:65:c6:b4:57:bf:2f:
         4c:fc:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:03:54 2026 by rpki-client