Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3CA3944C8CC7368C1F21425040FAE703B9DC8F1A23513C8846F9C2BC166CA99/0/323830363a3430373a3a2f33322d3438203d3e20323730323236.roa
File:                     323830363a3430373a3a2f33322d3438203d3e20323730323236.roa (raw, json)
Hash identifier:          fsLBdHPU1lYshlcN/nnu/BqIgZBXcxnQ9TTVYWnGo5k=
Subject key identifier:   12:BA:F2:F7:47:0F:D6:AE:7A:DD:20:F8:AB:01:C7:0B:3C:66:EA:49
Certificate issuer:       /CN=8F9D2CF748FCC86267A42212ED87FCF0C6322F63
Certificate serial:       68ACF2914FD238B401F73F72ADAD4F5566131C6A
Authority key identifier: 8F:9D:2C:F7:48:FC:C8:62:67:A4:22:12:ED:87:FC:F0:C6:32:2F:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D2CF748FCC86267A42212ED87FCF0C6322F63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3CA3944C8CC7368C1F21425040FAE703B9DC8F1A23513C8846F9C2BC166CA99/0/323830363a3430373a3a2f33322d3438203d3e20323730323236.roa
Signing time:             Thu 02 Oct 2025 23:00:51 +0000
ROA not before:           Thu 02 Oct 2025 22:55:51 +0000
ROA not after:            Thu 01 Oct 2026 23:00:51 +0000
asID:                     270226
IP address blocks:        2806:407::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3CA3944C8CC7368C1F21425040FAE703B9DC8F1A23513C8846F9C2BC166CA99/0/8F9D2CF748FCC86267A42212ED87FCF0C6322F63.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3CA3944C8CC7368C1F21425040FAE703B9DC8F1A23513C8846F9C2BC166CA99/0/8F9D2CF748FCC86267A42212ED87FCF0C6322F63.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D2CF748FCC86267A42212ED87FCF0C6322F63.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ac:f2:91:4f:d2:38:b4:01:f7:3f:72:ad:ad:4f:55:66:13:1c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9D2CF748FCC86267A42212ED87FCF0C6322F63
        Validity
            Not Before: Oct  2 22:55:51 2025 GMT
            Not After : Oct  1 23:00:51 2026 GMT
        Subject: CN=12BAF2F7470FD6AE7ADD20F8AB01C70B3C66EA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:e8:68:63:6f:74:2a:d0:76:3c:f4:92:34:
                    46:ee:56:7d:19:d2:05:29:1d:67:3a:7a:52:a1:30:
                    d2:82:00:25:0b:3a:3d:59:3a:9f:33:79:bb:1e:56:
                    f8:cd:40:aa:c3:40:25:8f:c3:0d:60:23:57:f7:bd:
                    c5:72:f9:7a:f1:01:68:06:7a:7e:e6:57:03:0a:12:
                    a6:e2:ec:22:fb:24:d7:a5:fb:bf:1d:31:99:07:4c:
                    25:70:d6:2f:a8:63:e9:d5:8f:87:4a:54:02:d9:df:
                    c7:61:12:74:0b:d8:56:77:1a:12:6f:ae:86:6b:94:
                    d7:76:15:81:a9:d2:9f:80:c4:19:38:84:be:56:d2:
                    76:05:ca:fc:34:03:8c:0b:e7:33:ba:cf:bf:6c:a5:
                    3e:f4:26:d6:08:0b:fb:0c:76:4a:22:5c:3c:c8:b3:
                    b7:5e:8f:84:f6:3d:be:29:38:11:4a:40:a8:ae:f9:
                    5b:ad:fd:91:6d:76:e4:0e:d6:ba:e2:96:76:e8:27:
                    4b:99:8e:7f:7c:57:a0:00:60:19:f6:41:49:04:c4:
                    ab:f8:6a:2c:17:c6:b7:03:65:cd:c0:6f:32:6a:46:
                    f0:b8:df:6b:ab:c3:50:6d:43:8b:64:93:19:72:b6:
                    23:c7:8c:9d:4c:e4:d9:44:23:f8:1a:a9:2e:34:c8:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BA:F2:F7:47:0F:D6:AE:7A:DD:20:F8:AB:01:C7:0B:3C:66:EA:49
            X509v3 Authority Key Identifier:
                keyid:8F:9D:2C:F7:48:FC:C8:62:67:A4:22:12:ED:87:FC:F0:C6:32:2F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3CA3944C8CC7368C1F21425040FAE703B9DC8F1A23513C8846F9C2BC166CA99/0/8F9D2CF748FCC86267A42212ED87FCF0C6322F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D2CF748FCC86267A42212ED87FCF0C6322F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3CA3944C8CC7368C1F21425040FAE703B9DC8F1A23513C8846F9C2BC166CA99/0/323830363a3430373a3a2f33322d3438203d3e20323730323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:407::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:53:ca:bc:da:23:d8:13:86:d3:95:33:6a:f0:16:48:c0:
         c5:23:9f:a2:64:27:5c:fc:20:f7:a2:12:54:c2:15:05:82:1d:
         71:b2:10:6f:2f:4c:24:4e:8e:17:69:9c:86:85:d4:4b:e7:4e:
         7e:71:ff:48:8d:19:dd:7c:e9:aa:2d:b1:ea:63:3d:4b:8a:4f:
         f9:24:14:88:63:7a:e6:4b:4c:ff:05:36:1d:ec:87:7f:8d:eb:
         70:85:61:57:44:cd:8e:51:aa:84:3f:85:b5:37:bd:5f:22:ef:
         88:ef:5c:9d:b8:13:53:d8:10:b6:bc:8a:a4:e6:b7:80:f3:18:
         6a:f8:e8:77:ae:14:f4:53:09:0e:8b:5d:3e:1d:ca:9b:b4:8b:
         e4:6c:74:2a:57:04:45:73:20:bf:ba:53:d6:f1:5e:19:86:b5:
         29:73:f3:e9:51:81:96:1e:76:ba:77:1d:92:a8:a4:1d:d0:f9:
         f1:04:4f:a7:91:7d:bd:58:c9:57:63:21:41:75:fb:13:e4:06:
         ca:da:38:fe:6b:10:13:24:3f:76:13:fe:ee:c3:63:02:2e:85:
         8c:10:87:1c:af:e4:45:80:b9:79:b6:8e:cb:1c:f6:95:e4:cc:
         71:e0:f3:a3:0e:bf:a3:9e:d0:be:a6:a2:e3:54:70:24:46:f6:
         dc:3e:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:31:45 2025 by rpki-client