Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/323830363a3362373a3a2f33322d3332203d3e20323730313135.roa
File:                     323830363a3362373a3a2f33322d3332203d3e20323730313135.roa (raw, json)
Hash identifier:          afdiTNG+fQQjCGgwAPJszEW/+lOaSLLJnNVc3NbEtW4=
Subject key identifier:   66:A8:67:52:41:D0:25:DD:D4:26:19:36:41:40:46:DD:11:AA:25:87
Certificate issuer:       /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
Certificate serial:       28646975BE98DF92036D642C981A4EADB3CA31D4
Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/323830363a3362373a3a2f33322d3332203d3e20323730313135.roa
Signing time:             Thu 30 Apr 2026 00:40:18 +0000
ROA not before:           Thu 30 Apr 2026 00:35:18 +0000
ROA not after:            Thu 29 Apr 2027 00:40:18 +0000
asID:                     270115
IP address blocks:        2806:3b7::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:64:69:75:be:98:df:92:03:6d:64:2c:98:1a:4e:ad:b3:ca:31:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
        Validity
            Not Before: Apr 30 00:35:18 2026 GMT
            Not After : Apr 29 00:40:18 2027 GMT
        Subject: CN=66A8675241D025DDD4261936414046DD11AA2587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:7d:01:1e:0f:d7:10:b8:0e:68:3e:e1:00:
                    40:d6:3e:08:c8:82:00:6d:e8:56:45:8a:62:e4:35:
                    5b:f3:54:70:1d:5a:0c:b0:6d:23:29:cc:f3:93:b3:
                    0e:9a:5f:b6:fa:16:fc:96:c3:ed:63:b0:5e:c6:4f:
                    28:39:4f:69:91:97:0e:33:d9:7c:9a:56:77:97:5a:
                    7e:b3:f0:cc:e1:73:b6:2d:0c:c2:63:42:be:2b:7f:
                    e6:70:0e:cb:61:23:a6:22:f9:34:eb:85:30:67:b6:
                    d4:8d:c4:2e:56:0a:6b:fd:b0:03:b8:89:ed:fa:8b:
                    f3:99:8e:27:77:34:19:55:65:48:59:d1:f6:ff:33:
                    8e:28:36:22:c6:cb:df:10:83:21:b8:a7:dd:6a:ae:
                    7a:19:33:b3:7a:da:93:7c:0e:d8:1d:e0:e4:cb:ef:
                    2f:e7:0c:c5:71:c7:4f:29:49:c6:c7:9f:55:40:33:
                    60:84:04:71:a8:d5:8b:40:09:22:61:34:dc:0b:75:
                    b3:c7:3b:20:2c:d4:de:1d:c2:c3:f0:11:09:32:9d:
                    e0:ec:32:b9:25:88:01:53:c5:63:6a:07:b9:e9:ea:
                    34:db:48:45:89:95:93:94:29:d9:1b:55:6e:0a:e1:
                    c6:13:17:5e:93:89:bc:46:3b:be:67:f1:14:93:d4:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A8:67:52:41:D0:25:DD:D4:26:19:36:41:40:46:DD:11:AA:25:87
            X509v3 Authority Key Identifier:
                keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/323830363a3362373a3a2f33322d3332203d3e20323730313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b7::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:d7:1d:c9:6f:4b:05:dc:b4:47:c7:8b:9c:eb:dd:63:61:
         9b:4c:08:1c:62:43:cb:c4:f8:0f:61:da:7d:24:a7:9f:09:a9:
         41:19:27:88:a0:88:38:aa:37:0a:97:15:1d:f2:32:ae:5d:4a:
         5f:b4:b4:00:d1:fa:8a:f1:7b:54:b7:30:dc:a7:cd:fd:a4:41:
         8d:ca:de:f7:0d:92:2a:aa:33:5c:58:fb:b1:57:32:27:c4:a2:
         8c:4e:50:64:8c:cd:f4:1f:c1:cd:16:3b:52:72:d5:75:34:dd:
         de:9d:67:b4:46:8a:9c:55:16:ef:d2:32:43:7b:d5:fa:13:ba:
         c1:6d:9c:3b:8c:72:62:7e:ca:a0:b2:16:98:4d:f4:f5:e1:ea:
         da:bd:fe:31:c8:df:d2:71:22:ce:98:a7:61:d3:54:32:33:c3:
         df:7d:db:81:ad:7d:dc:71:84:2d:6c:23:fe:42:23:0b:de:6a:
         6b:6d:fa:d9:14:27:99:ae:71:5b:d4:f2:76:4b:1d:ba:e6:57:
         48:b9:3f:66:f5:d4:ef:09:06:a2:8d:37:a6:30:00:46:ff:69:
         ba:03:76:69:71:e8:bc:70:40:0e:d2:5d:17:4b:23:85:80:3d:
         f2:83:de:35:4a:df:f0:ff:b8:5f:0d:9e:46:a5:74:07:68:36:
         ad:75:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:55:45 2026 by rpki-client