Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/323830363a3333633a3a2f33322d3438203d3e20323635353837.roa
File:                     323830363a3333633a3a2f33322d3438203d3e20323635353837.roa (raw, json)
Hash identifier:          XkMFBKiMIBwd4Yyc6xXjD1L8SJ98xnVsistt2JRFamw=
Subject key identifier:   6D:70:FB:85:22:22:DD:FC:A1:D9:DB:BB:00:69:59:8E:21:DA:0D:22
Certificate issuer:       /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Certificate serial:       1198665D804A16EF6A50BAC889A1F14424A94F62
Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/323830363a3333633a3a2f33322d3438203d3e20323635353837.roa
Signing time:             Wed 29 Apr 2026 04:40:12 +0000
ROA not before:           Wed 29 Apr 2026 04:35:12 +0000
ROA not after:            Wed 28 Apr 2027 04:40:12 +0000
asID:                     265587
IP address blocks:        2806:33c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:98:66:5d:80:4a:16:ef:6a:50:ba:c8:89:a1:f1:44:24:a9:4f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
        Validity
            Not Before: Apr 29 04:35:12 2026 GMT
            Not After : Apr 28 04:40:12 2027 GMT
        Subject: CN=6D70FB852222DDFCA1D9DBBB0069598E21DA0D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:9a:8c:80:ec:3e:72:d3:86:89:10:ce:d3:
                    9e:87:57:7b:a6:61:cb:98:28:61:8a:ba:b2:a5:41:
                    68:3b:28:f7:ac:2d:6a:a4:3e:f1:cf:c9:63:fe:ab:
                    f9:60:f4:7d:e0:f2:9f:25:ed:75:05:8b:52:07:70:
                    86:d9:92:67:7f:c7:d8:6b:63:3b:71:5c:55:4c:9a:
                    e3:6a:8d:14:6c:4f:d0:56:ad:2c:ca:57:e4:72:56:
                    ea:da:7f:6a:0c:29:6c:cf:64:1d:21:b6:65:7c:14:
                    42:74:cb:8a:02:b0:c8:6d:1c:3c:61:9f:5d:11:2d:
                    31:ef:1d:82:90:5c:cd:1b:cb:55:b1:70:0d:9f:a4:
                    5c:a6:4b:4f:42:ee:68:b4:4e:f6:2e:29:28:ef:a1:
                    30:e3:16:72:ec:6b:b2:51:a4:1e:25:a9:95:d8:34:
                    2b:2e:f6:e2:52:32:a1:a3:30:97:2b:a7:dd:d8:f4:
                    ed:ce:84:ba:d9:25:87:58:04:f9:6f:76:e4:45:ab:
                    d6:bf:b3:92:7f:1c:be:a4:32:c0:23:99:24:b1:3c:
                    c1:1a:25:d5:58:34:88:41:97:6f:1f:3d:02:69:4b:
                    82:b3:64:eb:0d:66:54:d9:bf:2d:57:6a:d6:52:10:
                    aa:27:b1:57:60:ee:ab:3d:fc:3b:2f:a0:1e:f3:b7:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:FB:85:22:22:DD:FC:A1:D9:DB:BB:00:69:59:8E:21:DA:0D:22
            X509v3 Authority Key Identifier:
                keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/323830363a3333633a3a2f33322d3438203d3e20323635353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:33c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:26:ba:2a:8f:75:e0:50:c4:d4:07:a8:4b:25:96:84:49:26:
         97:ae:00:46:9d:f2:d2:ba:fd:d8:3b:8b:5e:e2:33:8b:42:35:
         93:b3:f3:27:fa:59:c5:d6:82:53:c7:70:74:10:b5:10:a5:1f:
         62:f4:02:65:6a:69:cf:fd:89:03:91:ab:96:07:ca:04:d1:c4:
         4c:aa:af:98:b3:ef:2a:79:a4:25:14:05:3c:8f:52:f7:6a:f8:
         9d:d0:96:7c:b7:ef:cb:49:6a:96:0f:a9:94:ab:0f:e7:d7:45:
         c1:9f:48:2f:52:1a:86:a7:ab:7c:66:c8:9a:50:2e:77:70:e0:
         6f:9e:33:f2:86:8b:39:f8:d8:f1:8c:cb:2d:2e:f8:80:0b:63:
         92:e7:7b:7b:6d:35:35:61:a8:ed:1c:cd:e7:08:59:7f:e6:36:
         36:66:57:79:41:a3:87:a5:e3:45:f0:b1:b0:43:c9:21:9b:2b:
         47:f8:2d:ff:26:67:d3:70:ce:41:45:36:07:0f:5a:88:ff:51:
         93:ee:bf:3a:5e:a1:0c:fd:12:c5:e6:ce:61:ec:66:90:1c:45:
         df:5b:7e:07:0d:df:8b:43:7f:59:33:a3:ec:15:d2:62:4a:55:
         54:56:a4:11:95:f4:7a:2c:55:14:fa:75:f0:aa:af:ae:28:ad:
         51:5d:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:10:35 2026 by rpki-client