Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a393030303a3a2f33362d3336203d3e20323730323137.roa
File:                     323830363a3430303a393030303a3a2f33362d3336203d3e20323730323137.roa (raw, json)
Hash identifier:          xL3hayL8AdW9k0BdghRP7Sn1+4dHgnBGYoz2fIPmLRo=
Subject key identifier:   BC:4C:F5:1E:E2:D5:59:43:4E:A2:CD:6D:8D:DE:A2:2F:10:A5:F1:C8
Certificate issuer:       /CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
Certificate serial:       16A0F47397AF342DB40B998F3BDBE647701FB102
Authority key identifier: D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a393030303a3a2f33362d3336203d3e20323730323137.roa
Signing time:             Thu 30 Apr 2026 18:25:00 +0000
ROA not before:           Thu 30 Apr 2026 18:20:00 +0000
ROA not after:            Thu 29 Apr 2027 18:25:00 +0000
asID:                     270217
IP address blocks:        2806:400:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 08:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a0:f4:73:97:af:34:2d:b4:0b:99:8f:3b:db:e6:47:70:1f:b1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D82DCB32B12A2F9D4A0EDE91FDC80989061C365F
        Validity
            Not Before: Apr 30 18:20:00 2026 GMT
            Not After : Apr 29 18:25:00 2027 GMT
        Subject: CN=BC4CF51EE2D559434EA2CD6D8DDEA22F10A5F1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:fc:e7:20:7c:a3:ca:ea:92:95:d9:98:e8:
                    7b:d5:5f:ee:59:3b:a4:89:21:58:8e:cb:9e:31:50:
                    8f:c9:f2:09:e4:3f:de:23:7f:7b:e5:e2:a4:d9:c1:
                    6e:a0:84:0c:9c:04:33:86:aa:84:3f:92:f7:e1:bf:
                    f4:c5:6e:08:84:3d:cd:c1:ab:1c:84:1b:81:8d:71:
                    a8:a3:73:30:65:4b:26:25:b0:cf:f8:0f:f0:55:fe:
                    e0:7b:28:e3:af:71:41:ad:66:1e:bc:33:2e:bb:82:
                    70:40:28:b6:90:f5:5a:55:37:5f:b5:0c:a1:b3:78:
                    19:ed:5a:c8:e6:e6:7b:36:9c:4e:8c:22:d5:f1:a0:
                    fb:fc:3a:5a:64:79:f0:28:25:44:b2:80:8d:4f:d4:
                    b8:b5:53:b1:15:bb:86:c8:b0:c4:72:0c:cb:33:94:
                    5b:cc:f3:11:f4:87:f9:73:5e:2e:03:4e:82:4a:de:
                    5d:b3:79:fe:5f:2c:18:b5:00:26:05:82:2c:80:3a:
                    6c:09:0c:3d:45:d1:7f:08:a0:1e:73:62:70:62:59:
                    cc:ea:ea:19:a1:89:39:8f:84:47:3f:32:01:5c:15:
                    23:41:96:b1:b5:b8:4b:16:b4:d6:f3:a6:22:ff:01:
                    47:49:bb:3b:4c:b7:c6:7b:6c:2b:83:33:98:53:dc:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:F5:1E:E2:D5:59:43:4E:A2:CD:6D:8D:DE:A2:2F:10:A5:F1:C8
            X509v3 Authority Key Identifier:
                keyid:D8:2D:CB:32:B1:2A:2F:9D:4A:0E:DE:91:FD:C8:09:89:06:1C:36:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D82DCB32B12A2F9D4A0EDE91FDC80989061C365F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F94605112B9FA946A727E9F95AFE775E6690F2205CF3DA114AEB3A983473A3F/0/323830363a3430303a393030303a3a2f33362d3336203d3e20323730323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:400:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:38:1c:ae:9e:dd:eb:a5:dc:76:15:49:01:c8:db:2b:f6:1e:
         54:da:37:6b:37:05:5d:d5:46:a3:a3:0e:43:a3:bf:85:a6:f4:
         c1:f0:ef:97:8b:37:08:21:0e:1e:a1:98:c5:47:63:23:6e:c9:
         66:e4:f2:dd:12:0c:f1:d0:91:17:48:ec:10:07:2e:4f:95:81:
         7a:ad:98:8b:d7:75:31:bd:39:9b:b8:38:be:29:75:c9:b0:15:
         da:3f:ab:55:04:47:0f:3c:e3:66:9c:6f:69:37:82:39:37:23:
         20:6f:d0:9b:fd:87:84:af:37:1f:80:7c:06:d0:89:11:ee:f4:
         8d:66:b7:85:d3:59:c9:34:8f:fa:08:e3:20:bb:93:fd:ed:a3:
         c0:1b:dc:76:7f:17:d6:0a:5a:24:76:5a:73:aa:e6:d3:6a:e5:
         03:f4:66:3f:13:88:ab:90:06:eb:4e:e6:f3:f0:04:86:86:8f:
         d1:15:94:f9:56:3b:15:6d:8c:ec:4d:62:5e:02:91:a8:d4:ef:
         99:3c:c8:92:ba:68:a9:49:63:0d:9d:6b:d1:a9:76:9c:4b:44:
         b8:04:50:3a:8c:b4:8a:f5:8a:90:7a:b9:f4:ae:b0:cd:ca:c7:
         97:6d:9f:3e:9b:98:83:0a:4c:14:e8:49:29:7c:47:7f:91:ba:
         65:e5:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:37 2026 by rpki-client