Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/323830363a3436333a3a2f33322d3332203d3e20323635353733.roa
File:                     323830363a3436333a3a2f33322d3332203d3e20323635353733.roa (raw, json)
Hash identifier:          /7gAmBKaRlyvtXul5mFcH/nPsL/hqsVY9gfF+Ea/7MI=
Subject key identifier:   85:59:5E:21:75:F7:5C:99:50:27:74:EE:54:B8:41:CF:DF:3E:EF:BC
Certificate issuer:       /CN=9944437270C81D9C983F17FF6E081781B0A72418
Certificate serial:       761BD8C72F68574D2F80459C3E03C8A2434126B8
Authority key identifier: 99:44:43:72:70:C8:1D:9C:98:3F:17:FF:6E:08:17:81:B0:A7:24:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9944437270C81D9C983F17FF6E081781B0A72418.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/323830363a3436333a3a2f33322d3332203d3e20323635353733.roa
Signing time:             Sat 11 Jul 2026 18:40:00 +0000
ROA not before:           Sat 11 Jul 2026 18:35:00 +0000
ROA not after:            Sat 10 Jul 2027 18:40:00 +0000
asID:                     265573
IP address blocks:        2806:463::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/9944437270C81D9C983F17FF6E081781B0A72418.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/9944437270C81D9C983F17FF6E081781B0A72418.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9944437270C81D9C983F17FF6E081781B0A72418.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1b:d8:c7:2f:68:57:4d:2f:80:45:9c:3e:03:c8:a2:43:41:26:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944437270C81D9C983F17FF6E081781B0A72418
        Validity
            Not Before: Jul 11 18:35:00 2026 GMT
            Not After : Jul 10 18:40:00 2027 GMT
        Subject: CN=85595E2175F75C99502774EE54B841CFDF3EEFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:08:68:2b:4b:4f:59:db:b9:41:43:93:f2:
                    c4:0d:49:4f:b0:a7:df:65:e5:8a:68:4e:e8:79:cf:
                    34:96:f4:c2:ad:ab:37:fb:47:c4:2f:4a:77:8f:1d:
                    06:55:0b:7a:42:56:a9:a1:3d:e0:e5:1d:68:db:ef:
                    b3:45:e3:8f:03:b4:9e:3e:f6:33:4c:eb:42:95:03:
                    cb:aa:2e:0c:78:5f:18:16:85:76:91:27:dd:b7:76:
                    17:81:33:91:37:8f:6d:a3:97:4c:cc:e9:c8:4a:a0:
                    c3:74:20:8c:0e:53:aa:31:70:8a:ed:3a:74:1a:be:
                    35:a5:e7:d6:32:e4:7f:b9:a7:36:95:d2:ef:eb:7f:
                    23:09:77:44:bb:43:b8:25:19:42:59:a6:d6:cf:a2:
                    e1:7f:89:e8:2d:27:08:f0:40:26:74:8d:20:8f:c5:
                    a6:6e:9b:84:b4:a7:0e:6f:35:a3:df:82:58:ac:f3:
                    be:c1:a2:d4:38:ec:b4:e0:75:a6:24:96:f8:68:fc:
                    c8:4b:4e:13:5b:84:5e:eb:59:36:de:10:ea:09:79:
                    ed:67:12:4c:ac:e6:0e:6d:07:c0:a3:bf:9e:e6:f0:
                    06:62:a0:f0:73:35:9a:c8:f9:09:64:d6:a1:3d:20:
                    45:28:1d:78:12:0b:84:37:98:8e:60:a3:6b:1b:16:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:59:5E:21:75:F7:5C:99:50:27:74:EE:54:B8:41:CF:DF:3E:EF:BC
            X509v3 Authority Key Identifier:
                keyid:99:44:43:72:70:C8:1D:9C:98:3F:17:FF:6E:08:17:81:B0:A7:24:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/9944437270C81D9C983F17FF6E081781B0A72418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9944437270C81D9C983F17FF6E081781B0A72418.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/323830363a3436333a3a2f33322d3332203d3e20323635353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:463::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:c2:1d:9b:e7:f0:3d:a1:34:7f:32:11:e0:ee:b3:65:11:
         19:48:b8:83:06:fa:33:c1:ee:87:24:6e:0a:66:02:b1:5e:39:
         37:a8:7a:e5:4d:3a:a6:f5:42:24:8d:0c:5e:82:2f:2b:e7:ab:
         1a:be:27:54:b8:f1:a2:e2:be:2d:b2:22:6b:6f:4c:dd:56:6f:
         1b:40:52:0e:79:ce:0f:ae:ff:dd:01:d6:e7:6c:aa:25:39:62:
         ab:06:d4:f3:fb:35:10:51:0f:20:24:96:ec:fd:f9:18:06:71:
         bb:f1:dd:c0:7f:86:23:9a:12:0f:1f:4b:66:1e:97:40:aa:c9:
         30:8b:0c:d8:62:f4:e1:fa:c8:3d:2f:24:3b:75:0a:47:e2:85:
         a5:e4:27:49:49:74:aa:24:0c:48:c5:00:5e:d0:b4:83:34:4c:
         ba:8c:bc:c8:fe:98:ec:bd:19:48:7e:10:e7:0b:f6:2c:19:b8:
         16:fa:39:c0:ef:56:d2:c5:1c:cd:07:c9:9a:b1:bb:5c:f6:c6:
         61:76:51:ed:c6:f0:06:c1:62:f1:92:a4:2c:3c:61:cd:9a:ef:
         9e:0a:55:42:60:88:d1:80:c0:5a:51:f1:23:ae:92:e3:c8:96:
         2f:f0:8b:2e:56:1e:5e:7e:b4:8a:09:7c:d4:e7:54:d0:2f:36:
         cd:1f:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:19 2026 by rpki-client