Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a313a3a2f34382d3438203d3e20323732333733.roa
File:                     323830363a3431393a313a3a2f34382d3438203d3e20323732333733.roa (raw, json)
Hash identifier:          cXmVDjxEXPK220FtRnFfpdeoNlnlZWIKhz/AtF0GCzo=
Subject key identifier:   A3:84:DC:61:05:E4:BE:18:61:0E:8B:76:B4:38:9C:18:A9:8D:5C:D0
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       4C6BC38D29F40BBE55640FA53AAB6389AB927B4B
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a313a3a2f34382d3438203d3e20323732333733.roa
Signing time:             Fri 08 May 2026 04:41:42 +0000
ROA not before:           Fri 08 May 2026 04:36:42 +0000
ROA not after:            Fri 07 May 2027 04:41:42 +0000
asID:                     272373
IP address blocks:        2806:419:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 11:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6b:c3:8d:29:f4:0b:be:55:64:0f:a5:3a:ab:63:89:ab:92:7b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: May  8 04:36:42 2026 GMT
            Not After : May  7 04:41:42 2027 GMT
        Subject: CN=A384DC6105E4BE18610E8B76B4389C18A98D5CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:f9:46:d3:38:db:be:6d:5a:a4:51:f6:b4:
                    7f:91:f0:52:d4:b3:78:b8:0c:1f:f0:e6:99:95:62:
                    82:57:77:14:6d:7c:4c:1f:77:63:b9:29:15:da:7c:
                    4c:21:38:e2:45:04:8f:9f:a9:38:3b:6d:7f:43:1b:
                    b5:7d:60:70:34:1c:09:dd:13:2c:dd:95:e2:99:73:
                    3b:d2:0f:84:26:65:dc:6d:73:d4:2f:c7:66:1e:ab:
                    67:a6:6e:52:ec:c7:a9:92:ad:57:83:7a:6b:4e:07:
                    b5:a2:b4:4a:53:f9:2c:32:17:ed:0a:f6:f1:46:3f:
                    91:03:e5:a8:52:c4:6d:75:e7:27:3b:32:4a:39:1f:
                    81:40:4e:5b:ef:10:2a:3f:c5:f7:1b:de:5d:86:c6:
                    d1:44:4b:15:b9:85:e8:54:d6:a1:3b:48:ab:cd:25:
                    3d:67:87:92:0a:d8:0b:05:17:de:b8:f0:a2:9e:1f:
                    15:91:d3:85:61:b0:17:33:85:42:ec:c2:5c:e2:db:
                    db:e1:be:e8:f9:54:54:73:9b:a8:c7:78:0c:c4:6b:
                    7b:1c:8d:c0:61:af:82:ed:cc:4f:a6:c2:b0:b3:4c:
                    6a:1a:e4:18:9f:5b:63:69:8a:50:8a:f2:62:dd:d0:
                    72:31:89:68:74:1c:24:b2:3a:48:2e:ef:01:81:3f:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:84:DC:61:05:E4:BE:18:61:0E:8B:76:B4:38:9C:18:A9:8D:5C:D0
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a313a3a2f34382d3438203d3e20323732333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:31:39:97:c1:c4:f1:20:38:6e:4d:51:a0:ee:52:4c:66:
         9c:d3:9c:c8:1f:df:7d:8b:21:29:58:b3:fd:0b:94:17:af:b1:
         1d:a0:69:33:e8:64:de:51:89:e7:97:8a:88:2b:88:87:75:52:
         f9:80:dc:f5:99:0c:67:ea:02:c3:9d:9c:c1:53:1f:bd:a3:3d:
         c5:a3:43:a8:db:c9:df:bd:7c:7e:7a:fe:e4:99:7b:65:3e:91:
         ac:42:f0:3a:99:d7:68:27:29:26:0d:3c:49:2c:19:d7:ef:93:
         4a:2b:93:ac:d4:d3:a2:61:25:a4:c2:95:9f:81:97:5c:f2:e6:
         ea:82:ff:09:7a:28:f2:0e:58:9d:77:aa:53:e9:22:b2:31:39:
         f3:ff:81:8b:3e:ef:b8:49:ce:dc:71:c8:66:94:93:ae:7e:af:
         31:fb:0a:9c:9b:b6:cb:00:8c:50:db:8e:f9:ac:d1:b1:a3:61:
         7e:f7:48:47:af:68:60:83:3e:2f:64:d3:29:32:b7:b5:b9:06:
         2c:d0:28:99:67:e9:a0:76:5e:b9:84:e4:cd:98:e0:8c:3e:c5:
         30:f7:0a:11:d6:c3:fb:68:15:ac:12:eb:2d:3f:07:8a:e0:e4:
         40:6c:31:f0:dc:47:db:77:28:f2:99:2f:03:46:49:72:69:e5:
         69:10:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:26:20 2026 by rpki-client