Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/323830363a3430343a3a2f33322d3438203d3e20323730323231.roa
File:                     323830363a3430343a3a2f33322d3438203d3e20323730323231.roa (raw, json)
Hash identifier:          MfWEaJC8zJvG0pibbyROR4+xAu/tstOCtmjgq04T+wQ=
Subject key identifier:   91:58:EF:B2:1E:AB:61:D8:5F:C8:4E:85:44:97:26:66:05:85:71:7A
Certificate issuer:       /CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232
Certificate serial:       7408FD33AC863D9C70BA0914104606267C087C17
Authority key identifier: 88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/323830363a3430343a3a2f33322d3438203d3e20323730323231.roa
Signing time:             Thu 25 Sep 2025 14:40:00 +0000
ROA not before:           Thu 25 Sep 2025 14:35:00 +0000
ROA not after:            Thu 24 Sep 2026 14:40:00 +0000
asID:                     270221
IP address blocks:        2806:404::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.crl
                          rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:08:fd:33:ac:86:3d:9c:70:ba:09:14:10:46:06:26:7c:08:7c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232
        Validity
            Not Before: Sep 25 14:35:00 2025 GMT
            Not After : Sep 24 14:40:00 2026 GMT
        Subject: CN=9158EFB21EAB61D85FC84E85449726660585717A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:5d:29:2d:4b:26:47:23:af:9a:ef:ec:1c:
                    2b:71:ae:74:40:60:36:71:17:49:c5:11:48:05:bf:
                    54:db:96:1f:73:1f:f3:f8:77:36:a5:65:a9:ff:d7:
                    32:2a:32:4a:22:b2:d2:ac:1f:cf:c0:ab:7d:a4:48:
                    65:ff:f6:45:b2:4f:4b:c7:48:a8:a7:ba:1d:90:f0:
                    0c:49:24:da:9a:55:e9:91:d3:bd:47:fc:c9:44:ea:
                    c6:cb:de:f7:f9:f3:7a:52:d3:31:96:95:69:71:85:
                    04:31:61:c8:2d:b1:ea:04:65:c0:84:08:87:b5:e1:
                    ca:78:78:3d:c8:88:51:40:34:e6:2f:8e:a4:87:d0:
                    be:5a:5c:32:80:c0:f3:36:65:ce:73:03:1b:43:0c:
                    27:75:38:c3:44:85:8a:fb:83:9d:19:23:44:21:1f:
                    ea:c0:03:45:c5:eb:9f:14:83:77:14:6e:10:a6:7f:
                    35:e7:a6:68:6e:eb:a4:26:de:bc:57:32:db:73:ee:
                    f5:d8:41:c6:7f:c2:9e:c5:d0:2b:d1:a9:54:04:5f:
                    cf:1a:4d:9b:69:5b:8e:c0:39:53:aa:08:1b:72:40:
                    4f:1d:54:c7:65:96:ba:07:52:c2:7c:0b:af:be:dc:
                    db:75:a2:09:53:44:b2:68:2a:db:7c:ab:64:e9:79:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:58:EF:B2:1E:AB:61:D8:5F:C8:4E:85:44:97:26:66:05:85:71:7A
            X509v3 Authority Key Identifier:
                keyid:88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/323830363a3430343a3a2f33322d3438203d3e20323730323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:404::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a4:bc:03:c1:b0:72:87:28:5c:5d:18:8f:79:7e:4f:5f:b8:
         d0:36:32:95:5a:3a:ca:52:43:24:3d:83:16:7c:7c:45:be:da:
         a7:86:a8:8b:69:29:fe:2d:d5:6c:0f:22:e7:83:97:a4:47:b8:
         fc:d6:fe:3c:e5:6d:02:3b:8b:af:aa:61:77:ae:6e:12:cd:fb:
         03:b8:7a:90:31:d0:fb:5d:d9:1b:dc:2e:0f:59:f1:53:54:b8:
         c9:74:12:dd:96:21:74:f0:5f:29:a0:c8:34:c4:0a:36:ee:bf:
         a6:99:e5:ab:27:41:bb:73:3d:05:08:91:6a:bf:ea:33:73:99:
         55:13:b2:e9:b3:9b:cf:a8:74:22:c7:da:00:ad:91:97:3c:d9:
         cf:e3:df:90:99:83:21:7b:6b:9f:e5:0c:08:ba:01:18:ba:b2:
         67:06:58:07:d9:0a:b4:68:3c:e3:9e:ea:2e:52:03:0c:1e:cb:
         88:03:42:d6:9d:fa:ce:c0:6f:5d:5e:fd:1c:e8:5e:14:d8:6c:
         d7:9e:c6:3a:4f:6b:7d:46:e3:f2:1f:62:f5:af:d4:db:e5:c6:
         30:50:bc:54:a1:c2:ea:0d:66:68:be:1a:56:f0:02:ac:6c:85:
         b9:74:3c:e5:95:c6:7f:99:6c:9b:0a:5c:95:19:56:e8:0a:81:
         3f:39:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:06 2025 by rpki-client