Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C93F3780F04B0D94E7836A32D6F6AA087D35F21555C852A81BF79FD83F9058CB/0/323830313a31343a3430303a3a2f34382d3438203d3e20323734303936.roa
File:                     323830313a31343a3430303a3a2f34382d3438203d3e20323734303936.roa (raw, json)
Hash identifier:          fbxeiqg2rlLvRyz8xDCZkEcR9CB7WnQDEPPpR3NW2GM=
Subject key identifier:   38:F6:12:8F:9D:3E:6E:5B:F4:A4:A0:83:70:CB:01:21:26:B4:CC:61
Certificate issuer:       /CN=0E64239F31AD22466DB84932FFCD8612CE6094CB
Certificate serial:       4BA68D48A4729E0E85A97E9914A715DFEFC6200F
Authority key identifier: 0E:64:23:9F:31:AD:22:46:6D:B8:49:32:FF:CD:86:12:CE:60:94:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E64239F31AD22466DB84932FFCD8612CE6094CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93F3780F04B0D94E7836A32D6F6AA087D35F21555C852A81BF79FD83F9058CB/0/323830313a31343a3430303a3a2f34382d3438203d3e20323734303936.roa
Signing time:             Wed 14 Oct 2026 15:40:20 +0000
ROA not before:           Wed 14 Oct 2026 15:35:20 +0000
ROA not after:            Wed 13 Oct 2027 15:40:20 +0000
asID:                     274096
IP address blocks:        2801:14:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93F3780F04B0D94E7836A32D6F6AA087D35F21555C852A81BF79FD83F9058CB/0/0E64239F31AD22466DB84932FFCD8612CE6094CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93F3780F04B0D94E7836A32D6F6AA087D35F21555C852A81BF79FD83F9058CB/0/0E64239F31AD22466DB84932FFCD8612CE6094CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E64239F31AD22466DB84932FFCD8612CE6094CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 16:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a6:8d:48:a4:72:9e:0e:85:a9:7e:99:14:a7:15:df:ef:c6:20:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E64239F31AD22466DB84932FFCD8612CE6094CB
        Validity
            Not Before: Oct 14 15:35:20 2026 GMT
            Not After : Oct 13 15:40:20 2027 GMT
        Subject: CN=38F6128F9D3E6E5BF4A4A08370CB012126B4CC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:ab:d7:8d:6a:13:6b:41:0d:85:a5:24:90:
                    81:c3:b5:36:6f:72:12:02:43:57:3e:24:58:e4:8e:
                    9c:db:2f:42:6f:f4:60:7a:02:96:95:7d:31:36:0d:
                    75:63:56:23:45:f9:1c:1c:66:a1:76:49:e9:6c:b1:
                    f8:9e:37:71:b7:fa:ba:d4:4d:9f:36:43:ec:44:59:
                    c6:39:51:7d:d9:10:64:4e:d4:31:cf:91:10:f1:ec:
                    80:c6:bf:f1:00:a4:56:fb:4a:97:11:2e:b1:c9:0a:
                    c1:86:43:18:58:6f:8e:38:15:2d:1e:76:dc:e8:7b:
                    e3:b7:de:44:53:98:dd:e0:d3:66:8a:89:a0:4e:db:
                    21:29:e1:24:2b:7d:17:13:87:9c:c8:52:c6:2a:65:
                    4a:b9:c4:d2:a0:71:69:15:f1:e2:f9:82:73:9b:cd:
                    9f:9b:85:e8:72:64:38:fe:a0:7b:9e:03:e9:64:37:
                    4f:3a:b5:5a:e5:da:3e:53:b6:3f:dc:72:9d:9f:52:
                    4f:78:e2:e6:51:25:0d:e9:ef:02:54:0c:9a:fd:57:
                    e9:c9:1d:14:7b:ff:90:e0:ed:fc:c6:93:5a:cb:8c:
                    f2:ae:a6:9c:65:94:71:a8:38:19:ea:9b:b8:70:d2:
                    8b:78:a7:26:2a:bd:5a:39:87:9a:a4:c2:fc:01:00:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:12:8F:9D:3E:6E:5B:F4:A4:A0:83:70:CB:01:21:26:B4:CC:61
            X509v3 Authority Key Identifier:
                keyid:0E:64:23:9F:31:AD:22:46:6D:B8:49:32:FF:CD:86:12:CE:60:94:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93F3780F04B0D94E7836A32D6F6AA087D35F21555C852A81BF79FD83F9058CB/0/0E64239F31AD22466DB84932FFCD8612CE6094CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E64239F31AD22466DB84932FFCD8612CE6094CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93F3780F04B0D94E7836A32D6F6AA087D35F21555C852A81BF79FD83F9058CB/0/323830313a31343a3430303a3a2f34382d3438203d3e20323734303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:78:b5:61:30:07:02:91:20:b6:b3:12:51:37:4d:55:a8:
         1e:f3:f0:4e:36:5d:c5:73:9d:72:6b:4e:53:e4:2c:a1:9c:62:
         9c:ac:0c:aa:d1:7e:f5:e6:40:94:19:41:d1:f2:9e:89:7d:6e:
         c8:01:d9:38:45:10:22:bb:30:be:14:93:74:56:06:a0:ea:0f:
         bd:ff:f6:54:16:f3:d4:18:17:46:5e:f1:7b:17:3a:df:48:3d:
         73:4e:d0:c9:7c:92:c0:46:9b:01:f9:aa:b5:52:81:8e:3b:9d:
         5b:32:40:c2:ba:67:b2:8d:a0:95:01:44:b3:6a:d5:1c:2b:18:
         7b:a0:9a:9d:c0:71:cd:60:11:30:4a:33:51:f5:2d:1f:3e:85:
         99:12:7d:1f:43:71:39:2f:2b:e4:87:83:32:1b:3b:0e:81:b7:
         4a:43:3e:ce:5a:75:8d:a0:a6:dd:9c:61:ac:fb:93:84:dc:74:
         48:41:16:ad:c0:87:e1:c4:2b:17:f8:07:c1:2e:0a:0b:6f:e7:
         86:7d:fa:f0:ae:b6:1d:6a:44:ea:1b:c0:91:69:cf:ce:52:35:
         5e:35:09:13:ed:e1:88:f0:57:a7:fb:ad:d0:37:bc:67:f1:66:
         b6:a3:f7:7f:ba:27:a9:25:77:d7:61:1d:b8:b7:c4:8f:68:24:
         ec:4d:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:35:44 2026 by rpki-client