Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E88EDBF8B5B71CF4413D376D4A79DDA5AD2F1A5B7105238E925B1AFF1B6AB54D/0/323830363a3437373a3a2f33322d3336203d3e20323734343434.roa
File:                     323830363a3437373a3a2f33322d3336203d3e20323734343434.roa (raw, json)
Hash identifier:          LTBIUWQxAk9/sQgPMxIXjtcxWI6Di6zlqw57IzUsiI4=
Subject key identifier:   F4:06:B6:E5:59:E2:47:FD:61:E4:A6:0D:AE:2E:FE:01:55:58:92:07
Certificate issuer:       /CN=56A20141995EC5A09DB0BA9F97803B8A3C9AF637
Certificate serial:       763C183C3F4D4C00B23E3628F8ACB37EC650F618
Authority key identifier: 56:A2:01:41:99:5E:C5:A0:9D:B0:BA:9F:97:80:3B:8A:3C:9A:F6:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56A20141995EC5A09DB0BA9F97803B8A3C9AF637.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E88EDBF8B5B71CF4413D376D4A79DDA5AD2F1A5B7105238E925B1AFF1B6AB54D/0/323830363a3437373a3a2f33322d3336203d3e20323734343434.roa
Signing time:             Thu 24 Sep 2026 01:25:00 +0000
ROA not before:           Thu 24 Sep 2026 01:20:00 +0000
ROA not after:            Thu 23 Sep 2027 01:25:00 +0000
asID:                     274444
IP address blocks:        2806:477::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E88EDBF8B5B71CF4413D376D4A79DDA5AD2F1A5B7105238E925B1AFF1B6AB54D/0/56A20141995EC5A09DB0BA9F97803B8A3C9AF637.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E88EDBF8B5B71CF4413D376D4A79DDA5AD2F1A5B7105238E925B1AFF1B6AB54D/0/56A20141995EC5A09DB0BA9F97803B8A3C9AF637.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56A20141995EC5A09DB0BA9F97803B8A3C9AF637.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3c:18:3c:3f:4d:4c:00:b2:3e:36:28:f8:ac:b3:7e:c6:50:f6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56A20141995EC5A09DB0BA9F97803B8A3C9AF637
        Validity
            Not Before: Sep 24 01:20:00 2026 GMT
            Not After : Sep 23 01:25:00 2027 GMT
        Subject: CN=F406B6E559E247FD61E4A60DAE2EFE0155589207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:cb:bf:5a:3b:87:ad:1a:57:6a:0d:86:35:
                    6f:df:3c:98:8c:3c:8d:41:3d:78:2a:06:87:c9:f8:
                    6f:98:70:3c:5d:40:f1:73:b8:6e:a4:fd:5c:9d:fa:
                    55:05:6c:a9:66:50:8e:e7:c6:d3:da:c8:10:c1:f6:
                    ad:0e:37:04:8d:5a:c2:9f:e4:9e:1b:7a:2c:77:c6:
                    59:1b:cf:07:2d:9f:88:5c:26:b6:ba:3a:18:6e:0a:
                    ad:bc:03:0c:75:ff:84:84:f8:36:18:3b:b8:63:27:
                    dc:b8:ed:d4:58:c4:40:2f:1b:83:e0:25:67:41:e8:
                    72:c0:2b:47:8d:0d:83:3c:96:fd:2e:ca:58:b7:ae:
                    48:15:96:f3:ff:5d:85:35:87:e9:ab:d8:cf:be:62:
                    27:f5:ed:cb:b7:7f:eb:91:b9:aa:8c:3c:fb:2f:60:
                    27:b2:da:73:73:9b:78:81:66:f6:12:7d:cc:0a:32:
                    09:b2:a6:b4:ba:02:01:94:6a:85:bf:d7:00:92:c4:
                    d1:ef:88:e4:99:74:d8:1b:ca:60:ce:dd:2d:90:d6:
                    f3:50:bb:af:b4:62:d0:ab:eb:c1:b5:d5:c0:ca:d8:
                    e4:0a:58:2e:28:e7:66:8f:2f:99:38:4d:1f:ff:d2:
                    40:b5:c1:f5:17:a4:63:9e:2a:7a:55:da:6b:0c:68:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:06:B6:E5:59:E2:47:FD:61:E4:A6:0D:AE:2E:FE:01:55:58:92:07
            X509v3 Authority Key Identifier:
                keyid:56:A2:01:41:99:5E:C5:A0:9D:B0:BA:9F:97:80:3B:8A:3C:9A:F6:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E88EDBF8B5B71CF4413D376D4A79DDA5AD2F1A5B7105238E925B1AFF1B6AB54D/0/56A20141995EC5A09DB0BA9F97803B8A3C9AF637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56A20141995EC5A09DB0BA9F97803B8A3C9AF637.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E88EDBF8B5B71CF4413D376D4A79DDA5AD2F1A5B7105238E925B1AFF1B6AB54D/0/323830363a3437373a3a2f33322d3336203d3e20323734343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:477::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:c0:e3:6f:e0:55:a7:6b:2f:c8:a6:e6:74:7c:0e:cc:4a:5e:
         07:f7:7b:ff:d1:fb:24:f6:98:cf:4c:22:f6:6d:00:bb:44:ef:
         12:a1:34:ec:c3:ee:93:4e:d4:5c:4e:3a:39:61:97:5b:85:b3:
         85:e0:74:61:24:f5:b5:8d:3a:c4:9a:6a:00:c1:9d:65:b9:eb:
         6e:98:f4:bd:cf:6a:a8:2c:b1:e8:13:2a:86:9a:13:90:e9:cf:
         19:45:19:a1:b9:44:e6:a3:3b:d3:92:77:40:53:f7:76:3f:6c:
         b7:24:52:6f:33:74:36:87:a0:78:95:47:f2:4f:c9:41:91:bd:
         76:34:36:98:04:21:bf:13:d0:2b:6a:72:aa:a8:91:48:f9:61:
         92:33:a5:63:f8:30:01:b5:a2:0c:fb:53:3d:ec:06:08:f3:ed:
         89:5b:e8:63:ba:37:84:ba:5f:f2:25:d5:fa:5a:d3:67:f4:d5:
         6a:b8:c2:c3:88:08:1c:b4:bd:db:b4:51:2c:88:30:79:66:f1:
         73:67:95:b3:45:ec:d7:cd:bc:5a:b6:bf:e8:ed:98:62:f3:df:
         65:9c:00:8d:84:6f:a5:61:c3:e9:c7:16:db:ae:fb:39:f7:84:
         6c:27:18:98:43:08:7c:94:a4:fc:2c:40:8b:91:ab:f6:45:6f:
         6d:82:db:cd
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUdjwYPD9NTACyPjYo+KyzfsZQ9hgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZBMjAxNDE5OTVFQzVBMDlEQjBCQTlGOTc4MDNCOEEz
QzlBRjYzNzAeFw0yNjA5MjQwMTIwMDBaFw0yNzA5MjMwMTI1MDBaMDMxMTAvBgNV
BAMTKEY0MDZCNkU1NTlFMjQ3RkQ2MUU0QTYwREFFMkVGRTAxNTU1ODkyMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/w8u/WjuHrRpXag2GNW/fPJiM
PI1BPXgqBofJ+G+YcDxdQPFzuG6k/Vyd+lUFbKlmUI7nxtPayBDB9q0ONwSNWsKf
5J4beix3xlkbzwctn4hcJra6OhhuCq28Awx1/4SE+DYYO7hjJ9y47dRYxEAvG4Pg
JWdB6HLAK0eNDYM8lv0uyli3rkgVlvP/XYU1h+mr2M++Yif17cu3f+uRuaqMPPsv
YCey2nNzm3iBZvYSfcwKMgmyprS6AgGUaoW/1wCSxNHviOSZdNgbymDO3S2Q1vNQ
u6+0YtCr68G11cDK2OQKWC4o52aPL5k4TR//0kC1wfUXpGOeKnpV2msMaOCbAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU9Aa25VniR/1h5KYNri7+AVVYkgcwHwYDVR0j
BBgwFoAUVqIBQZlexaCdsLqfl4A7ijya9jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FODhFREJGOEI1QjcxQ0Y0NDEzRDM3NkQ0QTc5RERBNUFE
MkYxQTVCNzEwNTIzOEU5MjVCMUFGRjFCNkFCNTRELzAvNTZBMjAxNDE5OTVFQzVB
MDlEQjBCQTlGOTc4MDNCOEEzQzlBRjYzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NkEyMDE0MTk5NUVDNUEwOURC
MEJBOUY5NzgwM0I4QTNDOUFGNjM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTg4RURCRjhCNUI3MUNGNDQxM0QzNzZENEE3OUREQTVBRDJGMUE1Qjcx
MDUyMzhFOTI1QjFBRkYxQjZBQjU0RC8wLzMyMzgzMDM2M2EzNDM3MzczYTNhMmYz
MzMyMmQzMzM2MjAzZDNlMjAzMjM3MzQzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgR3MA0G
CSqGSIb3DQEBCwUAA4IBAQB0wONv4FWnay/IpuZ0fA7MSl4H93v/0fsk9pjPTCL2
bQC7RO8SoTTsw+6TTtRcTjo5YZdbhbOF4HRhJPW1jTrEmmoAwZ1luetumPS9z2qo
LLHoEyqGmhOQ6c8ZRRmhuUTmozvTkndAU/d2P2y3JFJvM3Q2h6B4lUfyT8lBkb12
NDaYBCG/E9AranKqqJFI+WGSM6Vj+DABtaIM+1M97AYI8+2JW+hjujeEul/yJdX6
WtNn9NVquMLDiAgctL3btFEsiDB5ZvFzZ5WzRezXzbxatr/o7Zhi899lnACNhG+l
YcPpxxbbrvs594RsJxiYQwh8lKT8LECLkav2RW9tgtvN
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:08:42 2026 by rpki-client