Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a363430303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a363430303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          N6DgEXbmcQAO4Sxq3RTwdSGGgNGMRSsGwMlnxmG2XGg=
Subject key identifier:   55:58:E4:35:83:18:D3:66:78:3E:94:93:73:4F:83:50:F8:14:A2:FF
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       32533C2586EA42D3815EFA5596270BB3DEE01E29
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a363430303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 24 Sep 2026 21:36:38 +0000
ROA not before:           Thu 24 Sep 2026 21:31:38 +0000
ROA not after:            Thu 23 Sep 2027 21:36:38 +0000
asID:                     28451
IP address blocks:        2806:3f9:6400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 06:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:53:3c:25:86:ea:42:d3:81:5e:fa:55:96:27:0b:b3:de:e0:1e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Sep 24 21:31:38 2026 GMT
            Not After : Sep 23 21:36:38 2027 GMT
        Subject: CN=5558E4358318D366783E9493734F8350F814A2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:01:f6:39:c2:11:fe:66:db:5a:85:38:1a:
                    c7:f3:f2:9b:46:0f:26:e7:f5:ae:f5:75:29:c5:81:
                    64:6a:8c:3b:03:30:e7:7c:33:83:13:06:e7:9e:2c:
                    6b:6b:25:fd:29:a5:c6:81:45:ce:61:f0:88:3c:6d:
                    79:78:7a:4a:c7:25:9f:87:ff:4e:9d:b5:3e:02:12:
                    ee:78:1a:db:c8:20:43:db:c5:67:69:0d:34:77:5b:
                    c1:06:61:f1:37:ae:39:74:ac:eb:27:70:a7:3a:7c:
                    05:14:4f:7c:e3:28:b0:7b:cc:67:f0:60:4f:cd:ff:
                    db:78:e9:2d:09:52:7b:45:6e:c7:87:0c:d2:b2:8b:
                    23:72:9f:39:69:c6:72:2a:a3:08:2f:0a:fd:be:87:
                    23:8c:4f:29:01:51:71:d6:d3:6f:79:f0:00:5c:63:
                    86:35:0e:06:e6:5c:07:17:75:de:77:d2:05:1b:4a:
                    c7:0a:7b:91:63:7b:41:d6:a4:0d:47:ee:a0:b4:43:
                    bf:6e:47:cc:1e:01:f9:6c:7d:2f:1b:f4:20:be:88:
                    d2:24:50:61:88:4d:35:00:cc:b6:b7:60:fb:f0:4c:
                    af:99:5f:57:81:e6:22:1f:07:48:15:03:ab:bd:38:
                    30:c7:55:ef:1b:81:dd:9e:46:4e:84:9c:0e:06:0e:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:E4:35:83:18:D3:66:78:3E:94:93:73:4F:83:50:F8:14:A2:FF
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a363430303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:6400::/38

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:1f:59:19:e5:d0:9d:9c:2f:8c:18:d9:19:36:37:44:6a:
         c5:ed:82:84:a2:f8:8f:e8:fe:f4:4c:b7:d2:20:21:c3:34:a8:
         80:aa:72:09:ee:21:cf:8e:81:07:03:56:ee:f3:5f:ea:83:42:
         44:4b:6c:fa:1e:21:c9:ca:f2:9d:84:d4:29:87:df:d4:17:0e:
         fc:f5:d8:4b:c0:0b:db:34:e0:06:ac:b7:f1:98:80:a2:0c:8b:
         1d:48:fe:4a:78:00:2a:2f:15:5a:be:13:41:4d:29:6b:6a:fe:
         01:b9:8c:a5:51:79:43:ed:5f:dd:bc:2e:63:39:af:cd:e4:1a:
         c2:d6:2e:3e:c2:82:39:06:a1:52:ae:db:9c:65:ad:53:20:91:
         21:dd:6b:5c:7a:06:2b:b3:1a:52:d6:11:6b:db:09:4d:0c:b5:
         cd:1a:74:78:0d:a8:f6:38:c2:36:de:8e:f4:7c:b8:b8:23:eb:
         98:d0:17:3f:f7:3e:66:7a:15:c2:1a:9f:a3:a2:aa:a1:6f:11:
         a9:60:fc:6c:20:aa:74:74:b2:e1:ab:fa:66:af:cf:6a:b9:67:
         02:97:69:77:fc:c2:a2:12:90:3a:8d:01:e6:74:81:d7:ce:94:
         b9:90:df:e4:92:28:d4:ae:48:7a:3f:97:bf:6c:59:3b:37:65:
         87:d8:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:08:36 2026 by rpki-client