Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/323830363a3433643a3a2f33322d3438203d3e20323733323539.roa
File:                     323830363a3433643a3a2f33322d3438203d3e20323733323539.roa (raw, json)
Hash identifier:          4mYVrBSWZZVHQyg3sHfSo5g5asXTY/YMC8czANbJnnc=
Subject key identifier:   D3:BE:F8:06:A2:70:70:B7:7D:EB:CA:31:DD:0E:BE:22:5A:DB:31:DC
Certificate issuer:       /CN=B6AF2213A6524752139A6FFD37B02BB34B2769CD
Certificate serial:       74107A2839A1D2FCA0AC2DDE666FFDE335FA0AFC
Authority key identifier: B6:AF:22:13:A6:52:47:52:13:9A:6F:FD:37:B0:2B:B3:4B:27:69:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/323830363a3433643a3a2f33322d3438203d3e20323733323539.roa
Signing time:             Thu 23 Jul 2026 17:45:00 +0000
ROA not before:           Thu 23 Jul 2026 17:40:00 +0000
ROA not after:            Thu 22 Jul 2027 17:45:00 +0000
asID:                     273259
IP address blocks:        2806:43d::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:7a:28:39:a1:d2:fc:a0:ac:2d:de:66:6f:fd:e3:35:fa:0a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6AF2213A6524752139A6FFD37B02BB34B2769CD
        Validity
            Not Before: Jul 23 17:40:00 2026 GMT
            Not After : Jul 22 17:45:00 2027 GMT
        Subject: CN=D3BEF806A27070B77DEBCA31DD0EBE225ADB31DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:22:fd:91:ea:f8:94:ca:78:43:b0:6e:46:
                    62:90:d3:5e:2f:10:80:3e:b5:c0:10:b4:ad:06:ef:
                    c8:85:41:4f:af:4b:88:67:9b:04:77:f0:66:11:f9:
                    cd:6c:88:f4:84:1f:3c:82:84:ac:f4:8f:bf:cb:8e:
                    a9:6e:bc:5a:28:dc:4f:e9:d8:a6:b2:c7:d7:88:df:
                    6c:49:ac:c6:5f:d1:ab:60:c7:fb:09:f5:83:66:09:
                    da:6c:c1:ff:12:aa:19:79:67:fe:41:0c:41:77:ca:
                    ed:75:20:bd:14:23:b8:52:34:ce:7f:40:d9:39:1e:
                    a1:b6:7e:42:f4:de:c5:0e:6e:e6:c8:7a:f1:0e:65:
                    8f:13:68:87:e9:f8:a1:d3:54:1d:c8:84:71:21:b4:
                    70:16:6f:9c:27:0d:ed:ba:df:10:f6:f7:0d:44:04:
                    64:3d:44:b9:91:ff:d0:b3:f7:75:99:a2:70:25:48:
                    02:fe:19:2d:96:91:25:4e:bb:34:72:68:f3:58:d4:
                    d6:a1:d0:2b:4a:00:d0:a0:91:e7:ae:50:98:f5:26:
                    97:0b:03:9b:cf:d5:60:f8:ae:51:47:35:d3:45:0a:
                    ec:86:81:22:e0:11:e7:0e:c6:bb:b0:5e:a2:17:3e:
                    03:d4:03:58:3d:91:bd:ce:8f:39:d0:b5:e5:32:c6:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:F8:06:A2:70:70:B7:7D:EB:CA:31:DD:0E:BE:22:5A:DB:31:DC
            X509v3 Authority Key Identifier:
                keyid:B6:AF:22:13:A6:52:47:52:13:9A:6F:FD:37:B0:2B:B3:4B:27:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6AF2213A6524752139A6FFD37B02BB34B2769CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1EC05C45EF622E5A675E9B53D86BBC0A7C539550D41D132ED95BCEC49353BE5/0/323830363a3433643a3a2f33322d3438203d3e20323733323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:43d::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:31:d4:78:ad:16:e1:3a:29:88:7f:d2:4c:95:b7:c0:b8:6f:
         6c:e8:58:9a:6f:cc:1e:2b:ad:7f:4f:cb:8c:63:b1:33:f5:8f:
         a7:71:a5:82:14:15:c4:48:8c:13:1e:65:88:63:5c:41:d7:8a:
         95:d8:c3:96:da:2a:9b:78:39:cf:19:5d:56:52:9e:b4:1b:e0:
         f6:d0:7d:80:f4:59:dd:30:b8:dd:35:e2:36:78:e7:a4:0c:e7:
         ae:ea:9b:25:fb:dd:1c:82:ac:26:5f:dd:52:fb:ab:2e:dd:b9:
         bf:ce:a9:4d:2f:36:13:ce:c7:11:b4:d2:04:03:91:ee:72:fd:
         ba:27:0f:90:72:00:be:91:b5:b2:d8:b0:b0:65:fa:5f:6e:59:
         6c:f4:b7:d2:aa:c4:26:b7:7f:a4:90:6c:b5:79:00:c1:56:d3:
         e1:8b:23:d5:4c:2f:20:0a:bc:0b:95:2e:da:1c:7a:c9:27:50:
         6b:69:cd:88:98:c6:de:d4:23:dc:3f:8b:d1:1c:f9:30:20:39:
         5a:aa:a9:7a:84:7c:41:2a:cd:0d:fb:68:8d:4a:e6:69:4e:2c:
         db:a0:bd:eb:99:04:1d:85:09:1a:fe:9a:a9:6e:90:b1:6c:bf:
         8c:fc:8f:3e:f7:bd:3e:b1:ad:c6:5f:cd:98:ec:d0:2a:ac:f8:
         5c:04:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:08 2026 by rpki-client