Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/323830363a3231303a3a2f33322d3332203d3e203238343636.roa
File:                     323830363a3231303a3a2f33322d3332203d3e203238343636.roa (raw, json)
Hash identifier:          JYVMJP6tPHhScNXXXh8iGPFGfHzHdn1Mp4esNPXrWoU=
Subject key identifier:   EA:CB:32:C6:DB:4E:BD:7D:63:3A:24:47:31:28:01:CE:24:59:5A:4F
Certificate issuer:       /CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Certificate serial:       3852B3E3DAE2179DCEE60BD471B2C839419F99B5
Authority key identifier: DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/323830363a3231303a3a2f33322d3332203d3e203238343636.roa
Signing time:             Fri 10 Jul 2026 21:30:00 +0000
ROA not before:           Fri 10 Jul 2026 21:25:00 +0000
ROA not after:            Fri 09 Jul 2027 21:30:00 +0000
asID:                     28466
IP address blocks:        2806:210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:52:b3:e3:da:e2:17:9d:ce:e6:0b:d4:71:b2:c8:39:41:9f:99:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
        Validity
            Not Before: Jul 10 21:25:00 2026 GMT
            Not After : Jul  9 21:30:00 2027 GMT
        Subject: CN=EACB32C6DB4EBD7D633A2447312801CE24595A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:77:12:62:89:63:0a:47:9e:fe:c9:93:26:15:
                    ea:d4:21:7f:97:79:f5:dd:00:0c:32:d4:2a:20:32:
                    8e:83:49:fc:18:a2:9d:27:2d:f2:06:b9:78:97:f1:
                    98:11:e3:d2:a4:93:54:e0:c3:38:34:eb:b8:ba:e4:
                    dd:d4:48:2a:ca:66:fb:45:33:1e:7d:a2:b7:6c:d1:
                    bb:1c:7d:bb:93:83:d4:62:17:01:da:bb:14:18:4b:
                    be:52:f3:d8:8e:e7:f5:d0:b4:42:e3:90:ba:7b:ea:
                    0d:45:b4:07:d4:40:a8:dc:b7:74:5d:75:0d:15:80:
                    a2:31:c9:69:1c:4a:4e:22:50:d0:7c:03:a7:ec:60:
                    5b:98:61:fe:fc:7f:2b:fc:95:d3:e8:28:13:c0:cb:
                    4b:ff:e3:28:22:96:04:4b:92:47:83:22:2c:bb:68:
                    37:9b:bb:57:6b:bc:17:49:de:9f:d2:1a:a6:3a:09:
                    86:7d:50:31:39:9b:dc:e2:c6:39:0e:b3:f3:c9:9c:
                    95:23:e5:ba:3d:3f:9c:e2:04:1a:04:d6:16:14:cf:
                    e4:9f:f5:c6:5a:eb:a2:2a:12:3d:2c:2d:e7:fc:56:
                    04:3e:17:c9:a0:1e:0c:f4:96:c9:29:ce:ee:66:dc:
                    60:f7:de:bb:41:3e:61:8f:b8:4d:ff:11:f3:f2:1f:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:32:C6:DB:4E:BD:7D:63:3A:24:47:31:28:01:CE:24:59:5A:4F
            X509v3 Authority Key Identifier:
                keyid:DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/323830363a3231303a3a2f33322d3332203d3e203238343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:210::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:08:d3:01:32:ad:7c:03:10:e4:0d:58:47:89:5d:4b:c5:aa:
         50:0e:e3:97:6d:b7:4e:4c:be:d0:7f:dc:09:d5:22:89:e6:98:
         29:1d:8d:23:21:1e:85:00:69:c9:dc:e4:cf:9a:09:34:0c:7c:
         55:11:e7:98:ad:86:94:5d:33:20:77:f9:ef:30:59:e2:eb:e3:
         9b:ed:b6:62:ec:c0:c0:4b:c6:7e:82:27:aa:b0:32:31:29:94:
         1a:64:35:27:06:e1:4c:34:bd:c1:94:8b:26:de:02:18:b9:40:
         58:9b:30:dc:20:15:d8:53:b3:2d:9e:fd:69:e9:25:85:e9:cd:
         a3:d9:70:2e:66:8b:ec:67:04:c2:84:c2:b0:a8:3d:c9:47:e3:
         b1:69:24:15:d3:cd:2f:fa:02:ad:a5:26:03:50:16:c6:f4:e0:
         76:19:20:0e:3d:31:25:ff:34:f6:a6:b1:78:15:d3:f1:ef:5a:
         a8:95:57:34:e8:eb:cc:ad:38:1d:2b:da:2b:fa:0e:ec:04:bf:
         79:b7:db:ba:69:68:00:54:cb:27:16:54:5b:46:b6:df:2e:3e:
         1f:17:48:27:46:5c:51:5b:ee:7e:87:88:34:fc:04:9c:a4:08:
         4b:a1:03:6f:db:b3:b1:b3:18:08:b4:3d:e7:b4:d4:08:e5:86:
         b4:1f:a9:de
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUOFKz49riF53O5gvUcbLIOUGfmbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3QkY4Q0Y4ODkyNkIxNjkwMzUwQ0ExNDc3QzM0MzFF
N0E2Q0M3RTAeFw0yNjA3MTAyMTI1MDBaFw0yNzA3MDkyMTMwMDBaMDMxMTAvBgNV
BAMTKEVBQ0IzMkM2REI0RUJEN0Q2MzNBMjQ0NzMxMjgwMUNFMjQ1OTVBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHdxJiiWMKR57+yZMmFerUIX+X
efXdAAwy1CogMo6DSfwYop0nLfIGuXiX8ZgR49Kkk1Tgwzg067i65N3USCrKZvtF
Mx59ords0bscfbuTg9RiFwHauxQYS75S89iO5/XQtELjkLp76g1FtAfUQKjct3Rd
dQ0VgKIxyWkcSk4iUNB8A6fsYFuYYf78fyv8ldPoKBPAy0v/4ygilgRLkkeDIiy7
aDebu1drvBdJ3p/SGqY6CYZ9UDE5m9zixjkOs/PJnJUj5bo9P5ziBBoE1hYUz+Sf
9cZa66IqEj0sLef8VgQ+F8mgHgz0lskpzu5m3GD33rtBPmGPuE3/EfPyH5n5AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU6ssyxttOvX1jOiRHMSgBziRZWk8wHwYDVR0j
BBgwFoAU33v4z4iSaxaQNQyhR3w0MeemzH4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTI1RDJDNUE3MDEyMTE2MDMyQUE0RUE5MEJBRTY2QUI1
RkNENTAwQTlBMkYxNkUyQUJCQzI4MzEwNDlBMUU5LzAvREY3QkY4Q0Y4ODkyNkIx
NjkwMzUwQ0ExNDc3QzM0MzFFN0E2Q0M3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjdCRjhDRjg4OTI2QjE2OTAz
NTBDQTE0NzdDMzQzMUU3QTZDQzdFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkyNUQyQzVBNzAxMjExNjAzMkFBNEVBOTBCQUU2NkFCNUZDRDUwMEE5
QTJGMTZFMkFCQkMyODMxMDQ5QTFFOS8wLzMyMzgzMDM2M2EzMjMxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM4MzQzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYCEDANBgkq
hkiG9w0BAQsFAAOCAQEAUgjTATKtfAMQ5A1YR4ldS8WqUA7jl223Tky+0H/cCdUi
ieaYKR2NIyEehQBpydzkz5oJNAx8VRHnmK2GlF0zIHf57zBZ4uvjm+22YuzAwEvG
foInqrAyMSmUGmQ1JwbhTDS9wZSLJt4CGLlAWJsw3CAV2FOzLZ79aeklhenNo9lw
LmaL7GcEwoTCsKg9yUfjsWkkFdPNL/oCraUmA1AWxvTgdhkgDj0xJf809qaxeBXT
8e9aqJVXNOjrzK04HSvaK/oO7AS/ebfbumloAFTLJxZUW0a23y4+HxdIJ0ZcUVvu
foeINPwEnKQIS6EDb9uzsbMYCLQ957TUCOWGtB+p3g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:16 2026 by rpki-client