Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/323830363a3333353a3a2f33322d3430203d3e20323635353830.roa
File:                     323830363a3333353a3a2f33322d3430203d3e20323635353830.roa (raw, json)
Hash identifier:          JguU9nOOb/uhjmEUKNfnvaoWp/K4FPwm47Gnz0NW0mA=
Subject key identifier:   7E:8F:C4:0E:78:A3:51:A0:4E:E6:79:3C:5B:7F:98:44:A5:26:7D:29
Certificate issuer:       /CN=66F64BC72E6C76569769AD7FB7ECB465B51A0C7C
Certificate serial:       71F78DAFEDEFE1E5145F3B5B160DC0BFFE891270
Authority key identifier: 66:F6:4B:C7:2E:6C:76:56:97:69:AD:7F:B7:EC:B4:65:B5:1A:0C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/323830363a3333353a3a2f33322d3430203d3e20323635353830.roa
Signing time:             Fri 22 Aug 2025 19:55:00 +0000
ROA not before:           Fri 22 Aug 2025 19:50:00 +0000
ROA not after:            Fri 21 Aug 2026 19:55:00 +0000
asID:                     265580
IP address blocks:        2806:335::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f7:8d:af:ed:ef:e1:e5:14:5f:3b:5b:16:0d:c0:bf:fe:89:12:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F64BC72E6C76569769AD7FB7ECB465B51A0C7C
        Validity
            Not Before: Aug 22 19:50:00 2025 GMT
            Not After : Aug 21 19:55:00 2026 GMT
        Subject: CN=7E8FC40E78A351A04EE6793C5B7F9844A5267D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:64:ce:3d:00:77:4e:86:5a:34:cd:1f:d7:
                    f2:36:3f:fe:81:0f:ed:d4:90:8b:59:fa:3e:45:33:
                    e2:22:04:6e:3f:2c:d1:10:1c:fd:bc:ae:ec:df:1e:
                    da:ab:67:97:a8:95:32:3c:e7:26:b6:90:13:cc:53:
                    a9:64:40:bb:03:36:2a:cf:16:f6:0c:6d:9f:30:90:
                    1f:8e:51:2b:67:b9:55:69:21:5a:a8:3f:b9:82:85:
                    e5:a3:b3:fc:a1:2a:84:a0:f9:72:fe:a8:d8:6f:69:
                    fe:ff:0a:eb:dc:a7:9c:e9:14:1f:4a:bc:a9:32:98:
                    96:06:6b:45:7a:ae:34:0f:74:7c:10:34:84:e3:66:
                    0c:d1:9b:e8:c8:61:0b:31:0d:9a:6b:41:8b:cf:f8:
                    57:dc:82:d3:de:06:71:07:e8:aa:a7:f3:18:2e:9d:
                    a8:21:c8:34:b3:70:82:3c:e1:37:12:fa:0a:f5:06:
                    19:92:b2:e5:aa:3d:9d:2a:f0:79:5c:01:10:dd:72:
                    43:86:ab:b6:7b:54:e4:6f:cc:93:1a:3c:46:67:6c:
                    c3:41:93:37:ec:92:cc:37:cd:40:ec:83:93:8f:8e:
                    44:24:d9:8d:d3:ef:d7:31:05:92:8c:13:26:75:8d:
                    f2:66:89:27:d1:3d:fd:47:41:7a:86:fd:66:50:77:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8F:C4:0E:78:A3:51:A0:4E:E6:79:3C:5B:7F:98:44:A5:26:7D:29
            X509v3 Authority Key Identifier:
                keyid:66:F6:4B:C7:2E:6C:76:56:97:69:AD:7F:B7:EC:B4:65:B5:1A:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/323830363a3333353a3a2f33322d3430203d3e20323635353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:335::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:de:72:ba:de:07:ed:e4:25:84:40:77:56:64:59:5c:11:fd:
         70:4e:57:dd:b9:f2:c1:cc:c2:f5:67:c5:e3:47:60:22:55:ba:
         22:2b:8b:2f:91:37:52:78:7c:70:95:18:49:62:3c:2b:59:d2:
         ee:b3:00:9a:2f:f2:44:01:4e:f1:b0:17:96:68:67:48:1f:62:
         4e:40:26:b4:9b:28:83:c0:2e:1c:2e:fb:19:33:63:4e:a5:da:
         5b:0a:15:e3:90:f2:5d:dd:8e:15:6f:7a:80:c8:35:a1:41:b4:
         9f:f0:76:04:08:48:e7:13:52:59:27:55:16:8b:09:2e:67:d7:
         b0:f5:1c:97:50:9a:d2:55:74:1b:08:58:47:3d:9a:b5:00:a2:
         2d:62:62:49:07:9e:eb:d2:67:27:29:70:41:82:2a:45:bc:fc:
         bc:f6:7b:74:ed:71:4d:5b:58:88:68:46:26:93:d5:89:46:92:
         63:47:ff:58:5d:8e:9d:5e:47:b3:58:41:31:4d:2c:58:d5:00:
         8f:eb:66:d0:b6:cf:4f:5c:5e:22:4a:09:00:d7:2d:ab:d2:19:
         bc:c3:47:70:48:83:a4:34:1b:38:46:cc:41:45:9a:a8:ed:b4:
         83:19:28:a1:b5:48:76:85:2c:49:ab:10:0f:36:43:92:12:37:
         ea:f9:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:17:39 2025 by rpki-client