Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          4a74+wrZc4ygJMhexMWcprzVGR8ln2XgPqVUCC6SESg=
Subject key identifier:   86:AE:79:A6:72:7B:C6:CB:F2:12:6F:D5:FF:4C:81:43:69:A4:DE:A8
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       13A2DEBCBD7AA1FDFF20F3CDCA669B18475806E4
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 24 Sep 2026 21:36:37 +0000
ROA not before:           Thu 24 Sep 2026 21:31:37 +0000
ROA not after:            Thu 23 Sep 2027 21:36:37 +0000
asID:                     28451
IP address blocks:        2806:3f9:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a2:de:bc:bd:7a:a1:fd:ff:20:f3:cd:ca:66:9b:18:47:58:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Sep 24 21:31:37 2026 GMT
            Not After : Sep 23 21:36:37 2027 GMT
        Subject: CN=86AE79A6727BC6CBF2126FD5FF4C814369A4DEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:87:aa:9f:fd:69:a1:20:24:a7:cc:07:93:
                    ab:1f:0a:c7:47:40:a2:58:64:6f:2f:18:0b:db:b1:
                    57:0b:10:4c:32:31:38:a5:6b:23:d0:3a:d1:53:05:
                    2d:55:30:74:76:fd:b2:ae:a9:ad:bb:f3:3b:60:e1:
                    d2:b2:07:e8:b6:f8:1e:78:bc:ae:ab:23:64:c3:3f:
                    5a:de:c1:ab:0a:35:3d:3a:34:b9:c8:b4:65:8e:85:
                    84:44:4e:c9:35:45:97:ca:5c:86:70:f3:00:4d:35:
                    73:f0:d6:48:89:7f:c7:fd:a9:c5:60:83:cf:5a:91:
                    84:c0:ec:cc:8b:87:6d:b3:4d:81:b7:b1:d6:a8:a2:
                    3e:d0:5c:4e:f2:60:11:fc:97:7b:82:75:7d:39:bd:
                    d1:40:67:06:ff:69:ad:61:19:e6:4c:c3:03:5c:75:
                    24:06:6b:0e:4b:62:9a:54:62:9f:db:b9:21:e8:e2:
                    d3:de:83:58:4b:6c:f6:91:e0:1d:1a:22:e5:20:ee:
                    f7:bd:c3:a1:4d:71:06:d3:c4:b1:ec:9d:6b:82:17:
                    92:1e:f7:80:cd:a4:7c:97:98:76:4d:c7:f9:fd:7d:
                    f1:b7:10:cd:9a:8a:ea:4a:8b:39:d5:5a:71:4d:16:
                    db:7b:7f:fd:86:64:d3:c8:8c:d6:39:d3:21:52:7b:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AE:79:A6:72:7B:C6:CB:F2:12:6F:D5:FF:4C:81:43:69:A4:DE:A8
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:7c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:05:0a:fa:ee:f7:7a:c5:56:2e:c7:c5:3f:cb:75:8b:bc:
         a3:46:2b:4b:57:b0:d6:92:33:ce:6c:7f:e3:c5:7c:af:7d:db:
         8a:49:4b:4c:d0:3e:7e:cc:3d:d6:9e:ab:8c:0f:d0:56:41:d4:
         c3:a4:7a:50:42:9d:48:aa:4b:92:83:92:3d:8d:8e:0c:88:01:
         ac:48:22:61:fd:4a:86:cf:5d:c1:c4:ca:91:a6:ea:e7:4a:d4:
         d3:1d:f1:4f:35:a3:da:39:54:ba:06:46:d9:8a:de:b7:41:b5:
         7f:87:01:6a:fc:63:03:6d:49:f8:43:06:48:a9:d0:48:4f:ee:
         1d:81:01:78:46:0d:2a:37:dd:33:4b:ac:45:36:cc:55:f9:9d:
         54:b1:fe:f7:ac:1d:20:31:a4:0a:56:bd:8f:bc:00:d1:b6:a3:
         5f:ca:5e:96:5f:d4:c8:29:b9:61:7d:30:31:bb:cc:98:d1:71:
         4c:c7:35:a2:6e:75:62:4a:7d:ae:d8:5e:b1:82:ed:25:0a:1d:
         68:21:34:29:40:fd:1a:10:90:dd:c4:b5:bd:69:57:e1:2e:54:
         2a:8c:df:ff:25:b5:00:3a:30:ad:a5:fc:1d:00:fe:86:42:c0:
         b1:d4:49:ed:d2:d7:c2:66:61:fe:1c:19:5d:19:04:ec:f8:a8:
         be:8c:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:38:47 2026 by rpki-client