Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e203337373037.roa
File:                     323830363a3364333a3a2f33322d3332203d3e203337373037.roa (raw, json)
Hash identifier:          yjUaPZ2Yfc0EG5E6q6c5rPW3ryj75dRPSEfixHl0n2o=
Subject key identifier:   38:04:D5:5B:AC:6D:C0:11:24:39:03:09:1D:11:26:1C:41:32:93:D8
Certificate issuer:       /CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
Certificate serial:       0B4389CFA31DF8E75C06043809DB8ADE1BE4F47A
Authority key identifier: 6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e203337373037.roa
Signing time:             Wed 30 Sep 2026 20:37:36 +0000
ROA not before:           Wed 30 Sep 2026 20:32:36 +0000
ROA not after:            Wed 29 Sep 2027 20:37:36 +0000
asID:                     37707
IP address blocks:        2806:3d3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Nov 2026 23:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:43:89:cf:a3:1d:f8:e7:5c:06:04:38:09:db:8a:de:1b:e4:f4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
        Validity
            Not Before: Sep 30 20:32:36 2026 GMT
            Not After : Sep 29 20:37:36 2027 GMT
        Subject: CN=3804D55BAC6DC011243903091D11261C413293D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:bc:3d:7a:ab:cb:bb:77:b7:f3:33:66:6e:
                    fa:8e:b8:df:be:6f:af:a8:91:18:29:33:3d:55:7a:
                    a7:00:04:64:2d:65:83:a0:d0:0d:ab:d7:44:ba:8d:
                    99:6e:7a:3a:73:c2:c0:7c:d0:42:8f:64:1e:3b:84:
                    0c:93:25:d2:93:24:93:cb:6a:b6:23:71:79:b1:26:
                    8c:2f:f1:ab:57:2a:94:20:d7:82:34:75:7d:58:0f:
                    d4:34:2e:4c:8e:04:d4:11:48:d4:4b:f3:5b:38:4a:
                    ec:0e:c6:07:8b:9c:72:f3:16:ac:da:8c:f9:27:7c:
                    23:e2:a9:83:2b:3b:b6:c1:b9:b7:9f:94:0e:57:94:
                    87:81:f6:c2:a2:da:dd:88:af:da:31:96:69:66:5e:
                    b2:6e:ed:f7:69:ef:3f:e2:cf:05:02:67:29:21:cc:
                    15:1a:e0:1d:eb:9b:7a:f0:37:5f:db:e9:e0:58:ee:
                    f7:27:16:2a:9e:45:30:4a:b4:7d:f5:9a:28:9f:1e:
                    0e:58:1a:7a:4e:87:aa:9e:8b:ce:97:71:12:42:e8:
                    1c:79:b1:0b:85:3b:02:2d:f1:5d:2d:ec:91:f3:3e:
                    09:f9:a7:fb:f2:2a:a0:22:40:38:c9:71:05:6f:37:
                    1e:af:fc:23:1f:ed:1c:d2:6d:90:e1:33:77:fd:04:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:04:D5:5B:AC:6D:C0:11:24:39:03:09:1D:11:26:1C:41:32:93:D8
            X509v3 Authority Key Identifier:
                keyid:6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e203337373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d3::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:60:50:3e:7e:32:52:c0:e0:38:62:ed:df:b6:39:16:88:
         8c:48:23:42:28:d1:c4:eb:56:32:d4:8a:a8:aa:e9:0d:d7:1c:
         28:62:42:0c:ad:36:f2:32:7d:2b:f2:0a:f5:f6:70:90:96:f3:
         96:79:f7:ad:d1:06:7e:e1:2d:12:aa:62:57:17:44:50:46:5c:
         5e:5d:bd:09:fb:98:b5:4f:d9:72:e7:83:4e:ac:7f:a5:7e:c0:
         1b:eb:ff:eb:4b:bc:e8:67:67:ed:87:0d:3a:7f:9b:09:9c:7f:
         44:0c:59:a0:8e:10:a3:bf:97:d1:42:1d:30:ee:9f:19:c1:8d:
         ce:81:b2:0b:37:9d:ec:17:ce:46:69:3c:29:30:09:99:b7:25:
         2e:b3:2b:04:58:ea:1a:e7:78:f7:6e:af:d7:09:bd:21:fe:f4:
         8e:7b:18:7b:f8:f6:70:ac:0a:ab:09:17:61:aa:cf:26:a9:3a:
         23:39:e6:60:30:5b:9e:ef:5d:82:87:20:c7:ea:c4:1b:8e:3f:
         7d:55:ad:b4:83:f0:02:d4:88:76:07:fe:42:89:fb:79:12:03:
         5c:75:9d:6a:17:27:e3:31:3a:bf:79:1e:6a:6e:6f:ae:fd:61:
         0f:e3:b7:79:f8:c8:39:36:f5:45:ba:9c:1a:5a:fb:74:3b:b1:
         df:3f:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 07:10:30 2026 by rpki-client