Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DE3F0812D519BBC8F52B06612B19662BD06A6206E2120325F0BEE8FFE0EFF96F/0/323830363a3431373a3a2f33322d3438203d3e20323732333730.roa
File:                     323830363a3431373a3a2f33322d3438203d3e20323732333730.roa (raw, json)
Hash identifier:          zsK4voIOAWrBqk7t+Fy4k3Avkv9EY5HevA++ekuHKxo=
Subject key identifier:   70:E9:A3:D1:A3:69:FC:7C:AC:CA:B0:D2:A0:AE:62:34:D4:85:52:05
Certificate issuer:       /CN=ACCE040AD0FB564920E74BCD97216E9089224B0C
Certificate serial:       0B9A2786E9B3BE03E6F2261435D2428D0881F68D
Authority key identifier: AC:CE:04:0A:D0:FB:56:49:20:E7:4B:CD:97:21:6E:90:89:22:4B:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACCE040AD0FB564920E74BCD97216E9089224B0C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE3F0812D519BBC8F52B06612B19662BD06A6206E2120325F0BEE8FFE0EFF96F/0/323830363a3431373a3a2f33322d3438203d3e20323732333730.roa
Signing time:             Thu 15 Oct 2026 03:40:37 +0000
ROA not before:           Thu 15 Oct 2026 03:35:37 +0000
ROA not after:            Thu 14 Oct 2027 03:40:37 +0000
asID:                     272370
IP address blocks:        2806:417::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE3F0812D519BBC8F52B06612B19662BD06A6206E2120325F0BEE8FFE0EFF96F/0/ACCE040AD0FB564920E74BCD97216E9089224B0C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE3F0812D519BBC8F52B06612B19662BD06A6206E2120325F0BEE8FFE0EFF96F/0/ACCE040AD0FB564920E74BCD97216E9089224B0C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACCE040AD0FB564920E74BCD97216E9089224B0C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 13:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9a:27:86:e9:b3:be:03:e6:f2:26:14:35:d2:42:8d:08:81:f6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCE040AD0FB564920E74BCD97216E9089224B0C
        Validity
            Not Before: Oct 15 03:35:37 2026 GMT
            Not After : Oct 14 03:40:37 2027 GMT
        Subject: CN=70E9A3D1A369FC7CACCAB0D2A0AE6234D4855205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:0f:e5:57:63:56:34:66:5e:09:94:9d:09:
                    c1:4c:2c:37:8b:5c:59:4f:63:89:0f:c0:15:59:87:
                    b8:02:05:d8:35:43:5c:77:12:f1:97:ca:ce:d8:5c:
                    c1:db:27:7a:26:17:98:dd:b1:1d:e2:9c:f2:d5:42:
                    3c:2a:f4:4f:8e:49:12:64:0e:ae:c5:bc:f7:cd:de:
                    27:de:30:b5:9c:a6:fd:5e:cd:55:2d:d4:16:31:cf:
                    a0:0c:4b:fa:6f:13:39:9b:9f:96:93:04:62:4a:3c:
                    a8:05:32:7b:2d:21:c1:e0:19:67:57:82:11:17:a1:
                    bb:92:52:36:f2:ee:eb:49:1b:9d:5e:b5:7e:07:fc:
                    3b:10:f7:91:4b:f4:89:fa:fd:5e:a1:e2:1e:7f:86:
                    9f:d7:f0:d6:02:ea:89:23:fe:8f:55:ff:42:dd:ea:
                    f6:a3:5b:c3:12:9e:b9:8e:5a:4a:49:e2:00:07:06:
                    cd:49:6d:10:f3:33:fe:ab:17:ac:73:cc:31:56:e5:
                    fd:ab:c0:6e:1c:3b:83:70:b7:ef:2a:4d:3e:29:48:
                    b5:bf:ce:73:da:ff:37:d6:70:c2:e9:93:a9:9e:24:
                    67:1e:1b:1c:84:2d:f6:a8:b0:7b:32:2c:40:df:cb:
                    7a:b0:3c:85:22:f3:09:fe:0f:e6:18:91:67:7e:1c:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:A3:D1:A3:69:FC:7C:AC:CA:B0:D2:A0:AE:62:34:D4:85:52:05
            X509v3 Authority Key Identifier:
                keyid:AC:CE:04:0A:D0:FB:56:49:20:E7:4B:CD:97:21:6E:90:89:22:4B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE3F0812D519BBC8F52B06612B19662BD06A6206E2120325F0BEE8FFE0EFF96F/0/ACCE040AD0FB564920E74BCD97216E9089224B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACCE040AD0FB564920E74BCD97216E9089224B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE3F0812D519BBC8F52B06612B19662BD06A6206E2120325F0BEE8FFE0EFF96F/0/323830363a3431373a3a2f33322d3438203d3e20323732333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:417::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:c2:b3:35:1e:62:45:2e:8d:30:3d:36:43:e5:7d:68:62:3b:
         c4:98:e7:f1:18:5d:38:7b:80:f0:47:4c:87:7e:0a:33:ae:89:
         81:19:ca:16:8e:15:44:a5:c8:94:c1:27:d2:01:d1:fa:3c:80:
         f5:d2:41:6c:ba:eb:15:71:78:a8:f6:79:cb:9d:c3:f3:61:e7:
         38:a7:95:60:ec:60:0a:7e:35:6d:f1:6b:26:b8:5a:0e:73:30:
         86:b8:62:36:c3:08:99:70:07:d1:5b:8a:08:bf:ce:61:fc:65:
         07:c7:68:e2:b2:fc:33:f4:1b:71:4f:9a:5e:ab:ba:9d:0c:63:
         91:65:b2:88:15:2a:3e:5c:d7:22:1d:dd:b8:5c:d1:27:4f:3f:
         b1:57:27:b9:ce:e3:8b:a6:a9:58:2f:c5:06:d2:bc:6f:84:82:
         0e:5b:ea:b1:bb:8e:69:8a:da:6c:fc:0e:68:22:a5:c3:20:03:
         d6:13:8b:5d:5b:81:39:cb:aa:81:1b:c6:e2:5f:d5:75:0c:4d:
         6f:e7:d5:7a:99:a9:cc:b6:fe:c7:56:4c:6f:b5:e0:91:3f:dc:
         3b:6d:84:aa:be:19:21:56:37:70:de:26:be:89:81:15:3c:5b:
         15:be:f6:6c:9e:ab:8f:2e:15:63:ee:ba:5f:c7:9a:84:b7:b9:
         a3:d9:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:37:22 2026 by rpki-client