Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/323830363a3435393a343030303a3a2f33352d3335203d3e20323734343031.roa
File:                     323830363a3435393a343030303a3a2f33352d3335203d3e20323734343031.roa (raw, json)
Hash identifier:          MsYXBz+mfud09yNeTpTSW5RpNBeSk1VVFgN1rbSiNmc=
Subject key identifier:   0C:AB:A3:0F:0F:C2:68:9D:AD:65:AE:BC:B1:2E:2C:E4:64:BB:47:0A
Certificate issuer:       /CN=26307F9C03ED95E10C8A368F80E2A31DDA963AEE
Certificate serial:       1C889857CD7D334616E98F713773A846222F2228
Authority key identifier: 26:30:7F:9C:03:ED:95:E1:0C:8A:36:8F:80:E2:A3:1D:DA:96:3A:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/323830363a3435393a343030303a3a2f33352d3335203d3e20323734343031.roa
Signing time:             Wed 07 Oct 2026 03:25:00 +0000
ROA not before:           Wed 07 Oct 2026 03:20:00 +0000
ROA not after:            Wed 06 Oct 2027 03:25:00 +0000
asID:                     274401
IP address blocks:        2806:459:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:88:98:57:cd:7d:33:46:16:e9:8f:71:37:73:a8:46:22:2f:22:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26307F9C03ED95E10C8A368F80E2A31DDA963AEE
        Validity
            Not Before: Oct  7 03:20:00 2026 GMT
            Not After : Oct  6 03:25:00 2027 GMT
        Subject: CN=0CABA30F0FC2689DAD65AEBCB12E2CE464BB470A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:6a:35:72:38:20:6f:66:69:3f:14:60:44:
                    e3:ce:2e:da:fb:29:65:8b:1c:06:fe:03:1b:c2:c6:
                    8a:4d:6e:1d:dd:2e:5b:77:22:a9:a3:0f:3e:36:a6:
                    75:1d:a8:d5:98:47:6f:72:48:d5:4b:e7:1e:ce:74:
                    66:94:86:e1:dd:51:d7:d7:47:5f:7c:70:35:33:9b:
                    0c:22:84:c4:96:b2:b5:bc:76:5d:86:85:a2:13:cb:
                    3e:a2:95:9a:17:19:60:91:c7:f2:c8:b7:40:1a:14:
                    42:58:c9:a6:74:a0:b4:19:b8:08:e2:86:92:2e:8e:
                    58:62:f7:94:07:59:84:9b:bf:b8:5b:11:26:45:e3:
                    77:0e:8f:de:c4:80:7f:e9:11:47:ca:61:e6:84:8e:
                    ba:b6:76:ce:8d:4b:4e:ee:47:13:4f:40:d0:42:9b:
                    8b:70:0e:07:e5:5b:96:35:2c:60:2a:79:d1:bd:77:
                    70:1d:56:6d:9a:33:5e:08:aa:44:3b:1a:44:4f:52:
                    4b:ee:be:6f:bc:36:0a:a3:c8:e8:01:10:81:0a:d7:
                    00:f4:3d:77:00:92:35:0b:ab:dc:a2:00:fd:b4:8c:
                    7c:be:af:82:b3:cb:6a:7a:2a:b8:04:74:f3:c0:d9:
                    d3:ad:2f:50:d6:f5:64:91:a5:c2:f3:1f:9a:da:2e:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:A3:0F:0F:C2:68:9D:AD:65:AE:BC:B1:2E:2C:E4:64:BB:47:0A
            X509v3 Authority Key Identifier:
                keyid:26:30:7F:9C:03:ED:95:E1:0C:8A:36:8F:80:E2:A3:1D:DA:96:3A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/323830363a3435393a343030303a3a2f33352d3335203d3e20323734343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:459:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         98:3c:b1:40:f6:0e:42:74:b3:61:62:e5:94:77:fd:b6:46:c3:
         49:1f:3f:b7:46:40:fe:f9:a2:85:89:9b:bb:2d:e9:1e:c5:34:
         b5:88:26:44:ae:b0:ef:b5:5b:74:67:ac:46:e1:d5:b6:5e:1b:
         58:e2:16:77:c8:06:dc:f4:43:47:3d:05:bf:ec:cb:a1:15:05:
         af:6f:42:eb:3e:5a:c9:51:1b:42:da:a9:f0:90:8e:b2:77:a5:
         9a:56:bf:db:82:da:73:86:9f:ff:d7:05:d9:4d:c3:71:e8:04:
         ae:43:15:25:da:3c:9e:57:1f:66:6a:88:cf:80:d4:b6:05:d4:
         cd:22:ed:de:e2:87:c0:9c:a8:86:d8:80:4f:ee:2f:99:e4:08:
         d9:45:ce:87:62:72:55:37:73:38:a9:49:52:b2:8a:70:eb:b6:
         66:c5:bf:11:6e:b2:ea:58:f1:05:fb:69:90:bf:ee:36:77:8b:
         5c:df:80:f2:f1:34:29:32:62:87:16:ad:8c:06:6b:f9:24:2c:
         58:23:8b:98:d4:a6:2f:73:9b:af:b0:c0:b5:82:a4:b4:ed:c6:
         46:1a:91:19:fe:96:47:54:7b:ef:16:51:6e:a2:5b:ad:42:b3:
         bf:02:af:ac:77:d2:bb:08:81:8b:b5:db:a1:d9:32:25:78:e2:
         cc:61:29:b4
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUHIiYV819M0YW6Y9xN3OoRiIvIigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzMDdGOUMwM0VEOTVFMTBDOEEzNjhGODBFMkEzMURE
QTk2M0FFRTAeFw0yNjEwMDcwMzIwMDBaFw0yNzEwMDYwMzI1MDBaMDMxMTAvBgNV
BAMTKDBDQUJBMzBGMEZDMjY4OURBRDY1QUVCQ0IxMkUyQ0U0NjRCQjQ3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJT2o1cjggb2ZpPxRgROPOLtr7
KWWLHAb+AxvCxopNbh3dLlt3IqmjDz42pnUdqNWYR29ySNVL5x7OdGaUhuHdUdfX
R198cDUzmwwihMSWsrW8dl2GhaITyz6ilZoXGWCRx/LIt0AaFEJYyaZ0oLQZuAji
hpIujlhi95QHWYSbv7hbESZF43cOj97EgH/pEUfKYeaEjrq2ds6NS07uRxNPQNBC
m4twDgflW5Y1LGAqedG9d3AdVm2aM14IqkQ7GkRPUkvuvm+8NgqjyOgBEIEK1wD0
PXcAkjULq9yiAP20jHy+r4Kzy2p6KrgEdPPA2dOtL1DW9WSRpcLzH5raLlL3AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUDKujDw/CaJ2tZa68sS4s5GS7RwowHwYDVR0j
BBgwFoAUJjB/nAPtleEMijaPgOKjHdqWOu4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTY3OTExNzEyNTlCNEYxOTQ4NDZFMjVFNzM5QkIyMUQ0
Q0YxRDdBQTk4ODlFQzhBMzI1MDQ3MDFCNDg3ODdCLzAvMjYzMDdGOUMwM0VEOTVF
MTBDOEEzNjhGODBFMkEzMUREQTk2M0FFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjMwN0Y5QzAzRUQ5NUUxMEM4
QTM2OEY4MEUyQTMxRERBOTYzQUVFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2NzkxMTcxMjU5QjRGMTk0ODQ2RTI1RTczOUJCMjFENENGMUQ3QUE5
ODg5RUM4QTMyNTA0NzAxQjQ4Nzg3Qi8wLzMyMzgzMDM2M2EzNDM1MzkzYTM0MzAz
MDMwM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNzM0MzQzMDMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAYEWUAwDQYJKoZIhvcNAQELBQADggEBAJg8sUD2DkJ0s2Fi5ZR3/bZGw0kf
P7dGQP75ooWJm7st6R7FNLWIJkSusO+1W3RnrEbh1bZeG1jiFnfIBtz0Q0c9Bb/s
y6EVBa9vQus+WslRG0LaqfCQjrJ3pZpWv9uC2nOGn//XBdlNw3HoBK5DFSXaPJ5X
H2ZqiM+A1LYF1M0i7d7ih8CcqIbYgE/uL5nkCNlFzodiclU3czipSVKyinDrtmbF
vxFusupY8QX7aZC/7jZ3i1zfgPLxNCkyYocWrYwGa/kkLFgji5jUpi9zm6+wwLWC
pLTtxkYakRn+lkdUe+8WUW6iW61Cs78Cr6x30rsIgYu126HZMiV44sxhKbQ=
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:29:47 2026 by rpki-client