Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343032303a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343032303a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          AY8SjIuRBUgb+ZzAFZSR8S99wE7dpla/FWrytSc2qY4=
Subject key identifier:   7A:78:3B:E9:7B:C4:71:8C:DB:E8:E9:B3:8B:48:27:38:BC:4B:73:E4
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       5CACB99CD876CC02966D213BF9B46B089DB0721E
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343032303a3a2f34382d3438203d3e2033353733.roa
Signing time:             Tue 13 Oct 2026 17:55:00 +0000
ROA not before:           Tue 13 Oct 2026 17:50:00 +0000
ROA not after:            Tue 12 Oct 2027 17:55:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Nov 2026 00:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ac:b9:9c:d8:76:cc:02:96:6d:21:3b:f9:b4:6b:08:9d:b0:72:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Oct 13 17:50:00 2026 GMT
            Not After : Oct 12 17:55:00 2027 GMT
        Subject: CN=7A783BE97BC4718CDBE8E9B38B482738BC4B73E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:d6:6a:47:66:0d:60:eb:d9:86:01:8f:6a:
                    24:51:5b:96:88:ae:76:f0:e3:f5:46:48:8f:a7:27:
                    65:33:87:c7:fa:53:eb:9f:8b:71:49:b8:18:1d:25:
                    e0:06:d1:f0:7a:a3:61:a7:60:da:3a:e6:db:ef:ec:
                    dc:07:01:3a:f5:25:2d:8e:e9:c3:50:69:dd:7d:f5:
                    db:50:dd:3c:80:00:f0:13:dd:33:3d:95:63:bc:05:
                    03:de:c6:ba:1c:eb:28:28:5d:23:58:1e:e1:02:48:
                    54:35:89:e4:a4:67:dc:32:59:e6:06:6d:69:78:34:
                    cd:7f:81:c6:4a:87:03:e1:22:d9:5b:7a:ae:d5:f3:
                    d8:89:b2:43:13:d5:cf:cc:a6:8c:be:65:07:3f:9b:
                    d9:96:f2:1d:e0:60:b6:b1:ea:90:78:53:26:6b:31:
                    1d:98:7c:9c:19:c8:ff:f3:21:8a:23:1a:56:b5:a4:
                    9a:6f:2b:8f:b3:6e:f7:1a:a5:ab:1e:d4:39:e5:65:
                    aa:20:50:a7:b8:dd:71:ff:6b:62:b6:c2:77:d9:41:
                    44:58:e6:f1:a0:75:49:0f:4b:a0:b7:7d:54:d4:0c:
                    07:3c:a4:de:1e:f2:47:6a:b6:eb:a8:22:d4:74:5d:
                    fe:fa:46:ca:09:52:6f:e2:2f:58:1e:85:ed:24:32:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:3B:E9:7B:C4:71:8C:DB:E8:E9:B3:8B:48:27:38:BC:4B:73:E4
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343032303a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:e9:89:10:dd:a7:97:4b:db:1a:eb:bd:6a:9d:f4:7e:f2:08:
         44:cc:66:ac:60:31:02:3b:02:10:52:15:8c:7b:7a:9e:34:53:
         ea:96:0b:eb:d4:b9:80:08:5c:c5:54:57:65:3d:e3:b4:46:32:
         ff:fd:43:1d:39:ff:78:e4:88:cb:58:3f:0c:1b:98:88:cf:f2:
         e4:cb:31:89:61:77:db:6b:65:39:0b:18:64:f9:bc:cd:84:6e:
         e2:9f:c0:e4:73:de:3b:6a:06:03:32:01:eb:06:be:a4:aa:d2:
         fb:f4:06:e0:4f:7a:67:a7:c1:91:44:0c:f7:2b:da:75:47:9d:
         fc:1f:6b:1e:91:e0:59:96:14:0c:25:95:fc:95:fe:98:ad:35:
         d9:c4:12:84:0e:23:68:5f:c1:60:42:25:c4:0f:d6:a8:47:37:
         5e:94:b8:7c:c4:fe:48:7b:51:da:60:6f:28:f5:67:73:a9:97:
         6d:d0:3f:0f:35:47:7c:8d:b9:82:33:ce:be:be:a8:23:e4:cc:
         1c:3b:4e:e9:a7:2f:62:d4:f5:1e:9e:bd:c9:d6:d3:47:3e:19:
         cd:e7:12:e0:07:9d:95:8a:ac:7b:db:03:11:7a:3f:45:47:cf:
         b2:37:6a:58:1f:6a:0c:3c:0f:a9:36:5a:0b:ea:58:1e:c1:9c:
         55:b9:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:39:07 2026 by rpki-client