Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/323830363a3333353a3a2f33322d3430203d3e20323635353830.roa
File:                     323830363a3333353a3a2f33322d3430203d3e20323635353830.roa (raw, json)
Hash identifier:          RnXrzmqT1FFG2RwaElQKdEcbs7v9eWk6IyNxlSEpYWM=
Subject key identifier:   31:D6:BB:A9:64:75:A8:D9:77:83:83:4F:57:0A:D7:BF:D6:D0:F8:67
Certificate issuer:       /CN=66F64BC72E6C76569769AD7FB7ECB465B51A0C7C
Certificate serial:       549831D67310603B9631FB74BFBD02DAE4759E1A
Authority key identifier: 66:F6:4B:C7:2E:6C:76:56:97:69:AD:7F:B7:EC:B4:65:B5:1A:0C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/323830363a3333353a3a2f33322d3430203d3e20323635353830.roa
Signing time:             Fri 24 Jul 2026 20:35:12 +0000
ROA not before:           Fri 24 Jul 2026 20:30:12 +0000
ROA not after:            Fri 23 Jul 2027 20:35:12 +0000
asID:                     265580
IP address blocks:        2806:335::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:98:31:d6:73:10:60:3b:96:31:fb:74:bf:bd:02:da:e4:75:9e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F64BC72E6C76569769AD7FB7ECB465B51A0C7C
        Validity
            Not Before: Jul 24 20:30:12 2026 GMT
            Not After : Jul 23 20:35:12 2027 GMT
        Subject: CN=31D6BBA96475A8D97783834F570AD7BFD6D0F867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:27:f0:de:e4:74:e1:b8:e4:a0:ef:2f:8b:
                    da:7c:06:41:c9:2b:6b:60:42:93:91:56:3b:32:c6:
                    10:7f:35:65:03:df:a1:a2:8d:bb:60:eb:7f:9d:4a:
                    b0:65:de:b2:52:dc:97:1c:4a:3c:cd:65:4c:6c:86:
                    d3:05:ba:d0:4a:3b:fe:2d:5a:0d:1a:6d:24:2d:65:
                    5e:81:b9:09:b6:3f:97:d6:61:c8:52:b0:b5:78:1f:
                    cd:e3:03:0a:ea:99:1c:c9:e2:48:ab:ae:5d:14:c1:
                    93:34:dd:bd:1e:bd:7f:60:6d:c9:c5:bf:26:6c:be:
                    8a:de:be:e4:5a:5e:93:4d:4c:78:98:12:f7:16:b7:
                    08:f5:3e:1d:45:2b:56:33:7c:8c:f6:64:50:52:c1:
                    8b:5f:19:73:ee:ba:9b:eb:87:a4:4f:c1:a8:45:f4:
                    02:71:86:4a:74:2d:72:dc:41:1f:2d:09:3e:84:21:
                    98:06:4e:a3:5d:2d:1c:68:2c:26:d2:1a:f9:8e:bd:
                    22:20:36:07:0d:6f:8e:a0:27:03:15:6c:ed:f8:f9:
                    07:d1:83:97:88:94:e4:56:20:aa:d4:53:54:cb:e4:
                    6f:54:d0:1d:f6:ea:c7:f9:0f:d6:f8:ba:44:3e:97:
                    13:da:13:aa:72:81:7a:26:ca:52:83:e7:13:0c:8d:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:BB:A9:64:75:A8:D9:77:83:83:4F:57:0A:D7:BF:D6:D0:F8:67
            X509v3 Authority Key Identifier:
                keyid:66:F6:4B:C7:2E:6C:76:56:97:69:AD:7F:B7:EC:B4:65:B5:1A:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/323830363a3333353a3a2f33322d3430203d3e20323635353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:335::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:02:3d:25:67:b9:8c:1b:ba:e3:31:f5:d8:0e:04:27:85:aa:
         63:ad:42:86:ff:aa:96:9a:34:80:b0:40:f0:18:7e:8c:3d:df:
         89:77:ca:be:12:90:6f:df:60:82:ed:6b:50:53:6a:08:f1:2c:
         df:30:f1:cb:1d:f8:60:70:75:21:23:5a:b0:f7:06:3f:0e:ec:
         1f:6b:a9:5d:2a:f5:04:ff:51:f8:d7:96:9b:1b:9c:e7:0f:23:
         db:ab:ad:40:f8:a4:c4:24:a1:03:fe:6a:96:c0:7d:74:6e:9d:
         42:3f:28:de:e3:6b:56:ca:8b:bf:eb:cf:f8:b1:ef:39:de:0a:
         64:30:b0:8a:66:6b:f7:c7:bf:dd:a4:29:57:99:5f:53:30:6a:
         66:3a:b8:b8:b0:09:a3:d5:fc:15:69:ca:20:bf:09:51:53:ef:
         0c:cc:f4:bc:3b:5d:ef:c2:21:b5:54:57:da:f1:0f:44:2c:05:
         25:76:28:07:01:5d:bc:fe:8b:ac:13:4f:d4:ad:41:c5:55:57:
         67:5d:01:52:03:e2:e4:16:c4:08:5c:3e:d2:95:2d:cc:1a:51:
         c5:25:41:9d:c4:57:34:9f:b9:1a:ab:17:3a:9c:8c:5e:f3:3a:
         9c:2c:8a:cf:d2:de:dc:1f:ac:14:9b:47:3d:c1:9c:a6:92:8c:
         05:af:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:59:28 2026 by rpki-client