Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/323830363a3336353a653030303a3a2f33352d3335203d3e20323635363038.roa
File:                     323830363a3336353a653030303a3a2f33352d3335203d3e20323635363038.roa (raw, json)
Hash identifier:          5M5RHA1H08Zi81WagRLgEPfvWHUkSYSMOEZQnmPMsNk=
Subject key identifier:   D3:01:27:86:BA:B2:F2:CF:C2:B1:E2:9C:FF:00:29:86:7A:54:9A:11
Certificate issuer:       /CN=794E430D43ABFA5039F655E9806296B630AD4189
Certificate serial:       222695C2623D2EA437244A141D9DB0D38CC2D8B5
Authority key identifier: 79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/323830363a3336353a653030303a3a2f33352d3335203d3e20323635363038.roa
Signing time:             Wed 30 Sep 2026 18:37:33 +0000
ROA not before:           Wed 30 Sep 2026 18:32:33 +0000
ROA not after:            Wed 29 Sep 2027 18:37:33 +0000
asID:                     265608
IP address blocks:        2806:365:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 07:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:26:95:c2:62:3d:2e:a4:37:24:4a:14:1d:9d:b0:d3:8c:c2:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E430D43ABFA5039F655E9806296B630AD4189
        Validity
            Not Before: Sep 30 18:32:33 2026 GMT
            Not After : Sep 29 18:37:33 2027 GMT
        Subject: CN=D3012786BAB2F2CFC2B1E29CFF0029867A549A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:50:13:7c:08:e8:fd:de:0d:57:ce:6c:27:
                    02:6d:5b:99:b9:75:dc:94:85:c1:dd:f5:71:8d:e8:
                    3e:df:3c:8a:c7:2f:ba:f2:87:43:dc:26:fc:fc:58:
                    73:c4:ad:7e:21:34:42:1f:26:6c:51:43:60:82:da:
                    22:72:69:f8:a5:1a:8d:66:68:e8:50:ae:bc:bc:e2:
                    65:72:b3:36:1b:f1:d1:3e:c1:43:79:53:7b:c5:b0:
                    3f:21:f0:a8:bd:7f:0b:3a:ec:c5:25:e1:ed:c4:b5:
                    87:5f:b5:ce:ee:79:69:85:45:1c:77:57:b5:a2:51:
                    aa:8e:86:38:06:8e:3b:34:30:ba:6c:ca:e9:9d:05:
                    d4:8a:ba:5d:9b:44:75:99:cc:bb:ca:e3:f3:36:83:
                    c1:c2:fa:16:86:46:0b:ab:ad:fa:a6:44:a7:60:eb:
                    8d:e1:7f:cf:f4:47:bf:c1:81:78:2b:1e:d1:45:b3:
                    39:51:cd:0e:c3:92:af:b6:9b:b1:c1:cd:1c:66:d2:
                    cb:ec:aa:7d:68:4d:82:46:3b:67:4b:26:b1:30:d3:
                    ab:c0:bc:1f:4f:70:76:57:72:b7:b5:01:5e:73:80:
                    be:e5:14:20:12:38:99:b5:1f:a5:8d:f2:fc:88:98:
                    3a:04:9d:8e:d4:8c:00:70:d0:3b:1b:c3:b7:12:6a:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:27:86:BA:B2:F2:CF:C2:B1:E2:9C:FF:00:29:86:7A:54:9A:11
            X509v3 Authority Key Identifier:
                keyid:79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/323830363a3336353a653030303a3a2f33352d3335203d3e20323635363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:365:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:5c:85:83:ef:ea:af:9d:36:17:fa:d6:10:99:da:f9:b3:
         ee:bc:4c:a3:5f:f1:12:39:45:f3:7e:d0:a2:fa:8e:13:f8:3e:
         50:a0:78:1e:76:2b:02:42:fb:59:c9:0b:0f:d8:60:c1:29:75:
         56:03:cf:bd:41:fc:07:e8:af:f4:1e:a5:cf:4c:6c:ba:38:5c:
         da:e9:6d:d3:11:5e:34:19:18:f3:21:4c:1d:9b:85:ed:50:73:
         54:9b:87:e6:94:89:88:5e:2c:66:74:9f:2e:36:9c:a8:21:f6:
         dd:8d:2d:24:2e:b1:ca:3e:5a:5f:06:4c:5c:20:53:b2:c0:f0:
         ee:41:5f:97:82:c2:3e:0e:71:a0:0f:39:22:8f:cf:e3:a7:11:
         fd:1b:ec:7b:eb:a2:2d:d9:e2:88:b5:8d:67:e1:5d:c0:b4:b9:
         ea:2f:71:c0:be:ce:8f:f0:fb:74:8e:7c:0e:be:16:a8:51:21:
         de:c8:d3:2f:68:d3:da:eb:69:82:df:9e:a2:33:94:11:a4:44:
         49:e9:08:6c:76:ac:ce:b6:21:7a:bd:86:82:e2:12:1b:7f:23:
         55:5b:d7:bd:28:42:55:9f:fe:e7:6f:c4:94:0c:17:44:54:89:
         36:f5:68:66:9f:e8:11:f5:8c:0e:42:a8:ab:e5:90:aa:02:e9:
         e6:4c:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:27:37 2026 by rpki-client