Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A72E18519438CF535A291CF1AEB059C2EBF1A2A260705A39E4BC7AD3FADAF318/0/323830363a3365643a3a2f33322d3438203d3e20323730313638.roa
File:                     323830363a3365643a3a2f33322d3438203d3e20323730313638.roa (raw, json)
Hash identifier:          EJa9UUP0VoJ7bNEj5Jea0JxfNw3+ooLSRFJ6J1BYUAQ=
Subject key identifier:   7C:3D:79:66:58:1C:99:A3:CD:17:47:35:5C:28:B4:BA:3C:91:80:91
Certificate issuer:       /CN=26C6B87C693032C3E275F2DB379357B6F174002C
Certificate serial:       6E78FBC77F7F7C1993EFE48C123E811C01924130
Authority key identifier: 26:C6:B8:7C:69:30:32:C3:E2:75:F2:DB:37:93:57:B6:F1:74:00:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26C6B87C693032C3E275F2DB379357B6F174002C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A72E18519438CF535A291CF1AEB059C2EBF1A2A260705A39E4BC7AD3FADAF318/0/323830363a3365643a3a2f33322d3438203d3e20323730313638.roa
Signing time:             Mon 20 Jul 2026 17:15:00 +0000
ROA not before:           Mon 20 Jul 2026 17:10:00 +0000
ROA not after:            Mon 19 Jul 2027 17:15:00 +0000
asID:                     270168
IP address blocks:        2806:3ed::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A72E18519438CF535A291CF1AEB059C2EBF1A2A260705A39E4BC7AD3FADAF318/0/26C6B87C693032C3E275F2DB379357B6F174002C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A72E18519438CF535A291CF1AEB059C2EBF1A2A260705A39E4BC7AD3FADAF318/0/26C6B87C693032C3E275F2DB379357B6F174002C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26C6B87C693032C3E275F2DB379357B6F174002C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:fb:c7:7f:7f:7c:19:93:ef:e4:8c:12:3e:81:1c:01:92:41:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C6B87C693032C3E275F2DB379357B6F174002C
        Validity
            Not Before: Jul 20 17:10:00 2026 GMT
            Not After : Jul 19 17:15:00 2027 GMT
        Subject: CN=7C3D7966581C99A3CD1747355C28B4BA3C918091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:1d:80:4b:79:ce:ca:f2:06:a3:6b:9a:b8:
                    86:ce:c6:01:7b:4c:26:51:77:f4:e7:52:91:0e:91:
                    26:48:0b:be:92:93:46:a4:d3:2a:14:e7:7a:d2:ac:
                    22:70:44:97:7c:a5:26:ec:e1:62:a9:71:5b:ca:66:
                    3c:e6:24:0e:5f:12:77:a2:19:49:34:2f:8a:b6:f0:
                    cb:4e:27:db:74:51:8f:28:d9:ea:ec:48:b2:9f:c7:
                    f4:2a:48:51:13:65:b1:be:42:e6:5c:60:c5:62:0b:
                    58:86:2e:d8:a2:85:e3:96:dd:cb:68:2a:23:df:eb:
                    81:b1:73:ff:5c:88:eb:d7:76:49:66:a5:ad:48:20:
                    ca:64:92:08:3a:39:62:7e:12:6b:37:dd:e9:4e:ef:
                    0b:c0:05:44:55:72:70:15:20:87:3b:5b:38:9e:96:
                    d3:30:22:43:21:47:28:3f:fc:39:3e:5f:8b:05:a8:
                    43:f6:21:24:dc:db:28:d0:e3:ab:4e:7b:41:fa:f6:
                    bf:c9:22:45:6d:d4:ca:d9:b4:0d:04:83:88:d2:32:
                    7e:3f:6d:a2:ba:14:69:17:80:53:c2:4d:b7:08:76:
                    a5:18:f5:12:b3:1b:fd:95:f9:07:59:5f:ab:ac:5d:
                    59:56:08:c6:03:df:5d:f2:73:04:a6:21:4b:2a:7b:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3D:79:66:58:1C:99:A3:CD:17:47:35:5C:28:B4:BA:3C:91:80:91
            X509v3 Authority Key Identifier:
                keyid:26:C6:B8:7C:69:30:32:C3:E2:75:F2:DB:37:93:57:B6:F1:74:00:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A72E18519438CF535A291CF1AEB059C2EBF1A2A260705A39E4BC7AD3FADAF318/0/26C6B87C693032C3E275F2DB379357B6F174002C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26C6B87C693032C3E275F2DB379357B6F174002C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A72E18519438CF535A291CF1AEB059C2EBF1A2A260705A39E4BC7AD3FADAF318/0/323830363a3365643a3a2f33322d3438203d3e20323730313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:9e:03:15:d5:c6:f1:68:eb:6a:37:85:53:df:29:c8:ea:db:
         ab:2c:24:fe:27:4a:19:ab:57:14:fd:0b:74:6c:71:10:35:a5:
         c2:54:a1:b0:c3:52:c8:50:77:5c:78:76:34:6e:50:b4:84:bc:
         92:30:ab:88:3d:54:78:5d:60:86:82:55:d7:df:13:fd:74:cf:
         b3:95:26:bf:d1:41:78:38:38:8c:ce:71:a8:6e:de:27:39:ea:
         cd:92:54:ca:49:39:b2:34:58:4d:0e:e0:90:1b:34:b2:bd:7e:
         cb:1f:3b:70:cc:3f:a8:26:89:9b:a2:42:03:c0:b4:33:f9:06:
         69:18:02:c1:49:8f:eb:79:22:ea:bf:08:3f:ad:ee:02:b1:de:
         04:50:ec:97:f8:63:d9:09:07:10:f8:0b:0b:4e:30:78:b6:04:
         4b:af:15:be:5d:95:c0:d2:28:f3:7d:e8:aa:c6:f7:c5:04:e6:
         73:15:ef:86:d9:c7:9d:94:12:d3:46:ac:88:b8:ac:25:0c:dd:
         73:4b:65:b3:58:29:f2:c8:40:b0:ad:eb:83:49:a6:36:a8:b0:
         7e:71:71:14:8b:0c:18:7f:39:9d:42:1f:13:2a:07:ac:5e:bb:
         5d:6e:da:60:74:ee:3d:28:7e:c1:16:64:73:08:48:e1:5a:68:
         c6:50:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:38 2026 by rpki-client