Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a383030303a3a2f33362d3336203d3e20323730323137.roa
File:                     323830363a3430303a383030303a3a2f33362d3336203d3e20323730323137.roa (raw, json)
Hash identifier:          fRt4eXlEKIcu8zwnkRsxRM2uB1e39wHQdGId0DWlN6U=
Subject key identifier:   4F:9E:58:75:A9:7C:EE:9F:47:E7:C7:E5:3B:CE:E1:BD:4F:56:FE:71
Certificate issuer:       /CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
Certificate serial:       3A6C21250418462AE898920B536341976A883AFA
Authority key identifier: D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a383030303a3a2f33362d3336203d3e20323730323137.roa
Signing time:             Thu 30 Apr 2026 18:25:01 +0000
ROA not before:           Thu 30 Apr 2026 18:20:01 +0000
ROA not after:            Thu 29 Apr 2027 18:25:01 +0000
asID:                     270217
IP address blocks:        2806:400:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 08:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6c:21:25:04:18:46:2a:e8:98:92:0b:53:63:41:97:6a:88:3a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
        Validity
            Not Before: Apr 30 18:20:01 2026 GMT
            Not After : Apr 29 18:25:01 2027 GMT
        Subject: CN=4F9E5875A97CEE9F47E7C7E53BCEE1BD4F56FE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:4f:0a:58:fc:22:a2:57:a1:df:7a:b7:e1:
                    5a:25:a7:99:e8:a7:48:a6:65:07:ab:67:42:3b:f9:
                    4b:7d:63:6a:55:07:58:49:33:89:2d:b3:75:c3:e4:
                    6b:a1:41:32:fb:dd:30:d2:a2:b3:13:4e:d6:c7:2e:
                    2f:9d:d7:3b:d5:25:b1:65:84:ad:b9:d0:98:40:c8:
                    49:e2:3e:22:6d:93:a0:f9:86:c0:52:66:c9:a0:41:
                    b0:4d:7c:ee:34:49:46:fa:f4:83:07:db:c4:c7:6a:
                    9e:71:30:7e:a1:3a:eb:6d:7a:a7:95:87:b1:e8:38:
                    68:34:2b:8b:c2:35:71:66:71:30:d4:b8:a6:7c:a4:
                    29:53:6d:8d:a3:7b:c3:bb:e8:32:68:58:c6:5c:39:
                    27:75:fa:41:db:09:b0:f5:ee:90:cf:06:a3:f8:5b:
                    17:cf:1a:89:13:e1:e8:6f:b7:c4:84:72:ce:c3:9d:
                    c8:22:23:3d:a3:dc:e2:8c:8e:43:62:9f:0f:ff:52:
                    95:f2:6b:85:09:e0:aa:aa:14:4a:d7:9a:dd:d6:ea:
                    e9:ff:8a:34:2a:e2:4d:ca:db:2e:73:dc:e7:74:2f:
                    fc:c0:5e:18:96:fe:cc:14:28:39:0b:6c:5a:21:4c:
                    48:22:64:c3:04:23:6d:4d:98:ae:66:fb:1c:2e:f4:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:58:75:A9:7C:EE:9F:47:E7:C7:E5:3B:CE:E1:BD:4F:56:FE:71
            X509v3 Authority Key Identifier:
                keyid:D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a383030303a3a2f33362d3336203d3e20323730323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:400:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:2e:54:83:e9:e4:a2:00:89:a6:c9:7b:6d:67:e4:9f:0e:
         c8:41:0a:69:a4:b3:e4:35:ba:3e:db:7d:42:ed:4d:a6:97:9d:
         da:75:de:3f:1f:dd:db:5c:cc:60:af:d1:5f:84:1e:be:c5:9f:
         86:e3:ae:0d:23:07:8f:9d:bd:a1:d1:a3:e3:2d:ec:93:76:42:
         68:42:1d:da:77:3c:02:0b:8c:12:45:16:07:b8:15:17:0e:5f:
         e5:69:bb:ed:09:ca:31:1d:b1:5c:0f:ac:82:ff:ae:66:fc:81:
         3d:5d:e2:25:3e:fc:59:b5:63:fe:27:c3:7c:df:e0:87:98:10:
         bb:57:0b:c7:64:fb:57:b7:05:e5:b3:31:03:86:88:90:9d:c2:
         15:58:99:b4:4b:d7:4e:a3:a3:c7:7b:d6:71:82:e3:52:22:db:
         11:90:ab:bd:f6:9e:4e:1a:99:c1:ad:c8:08:a7:a7:00:8d:8d:
         d3:60:5b:21:77:e5:b4:54:60:1a:19:85:b2:0b:b9:2f:7a:f7:
         6a:d2:02:78:5b:07:8e:ad:d6:ea:5e:18:ba:58:8d:d0:f5:46:
         a4:23:ba:44:28:d4:9c:38:40:0a:81:8e:d9:7b:1d:21:fa:e1:
         00:95:ab:bd:f8:6f:16:69:29:57:68:02:e2:f6:a6:b8:d8:87:
         59:d7:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:19:21 2026 by rpki-client