Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/323830363a3336353a3a2f33332d3333203d3e20323635363038.roa
File:                     323830363a3336353a3a2f33332d3333203d3e20323635363038.roa (raw, json)
Hash identifier:          HlC/DpAEl/g7hGHz/zlqYkQXsSOf6TLHAGcHYbUUuos=
Subject key identifier:   83:95:14:68:D7:5A:EC:9A:FA:5A:8A:FE:F8:C1:57:56:22:F0:F2:D0
Certificate issuer:       /CN=794E430D43ABFA5039F655E9806296B630AD4189
Certificate serial:       26BB2979A711881EF5E82990ACC57CAEA1C77BAE
Authority key identifier: 79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/323830363a3336353a3a2f33332d3333203d3e20323635363038.roa
Signing time:             Wed 29 Oct 2025 18:30:01 +0000
ROA not before:           Wed 29 Oct 2025 18:25:01 +0000
ROA not after:            Wed 28 Oct 2026 18:30:01 +0000
asID:                     265608
IP address blocks:        2806:365::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bb:29:79:a7:11:88:1e:f5:e8:29:90:ac:c5:7c:ae:a1:c7:7b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E430D43ABFA5039F655E9806296B630AD4189
        Validity
            Not Before: Oct 29 18:25:01 2025 GMT
            Not After : Oct 28 18:30:01 2026 GMT
        Subject: CN=83951468D75AEC9AFA5A8AFEF8C1575622F0F2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:76:a7:3f:8f:d5:dd:93:52:22:fd:6e:2b:
                    d6:5f:6a:14:11:c6:b7:df:a6:98:09:f8:91:95:90:
                    d4:72:6c:f8:bf:0f:1e:35:3e:58:6e:e3:7e:73:20:
                    11:80:74:06:55:c5:8f:ab:69:0a:7c:fa:42:49:ad:
                    d7:3e:3c:f2:43:39:79:2d:30:07:c6:55:5a:1b:dc:
                    01:ed:e6:cc:a0:50:11:8e:a1:d2:9b:e9:6b:b8:14:
                    e3:78:f0:fc:19:7d:7b:57:1a:09:86:1d:f0:39:6a:
                    5e:09:b0:87:94:8b:49:09:e7:b5:28:53:d2:32:e4:
                    84:3d:2d:c1:88:ea:cc:ce:af:6a:c7:c7:37:ed:f3:
                    ad:98:7a:37:4c:76:6a:ae:2a:78:a5:0e:e0:f6:7b:
                    33:5a:86:7a:52:39:ff:be:89:e4:36:f7:08:6c:52:
                    4b:36:7b:27:fa:52:50:c9:f2:99:3b:5e:52:65:84:
                    28:2a:b2:66:ec:61:83:dd:6b:6d:ce:79:3a:1a:bd:
                    76:a2:13:69:08:01:80:8d:07:71:e1:41:ad:81:90:
                    8c:11:a1:5c:2f:fa:a0:5e:71:d6:66:a2:f7:9f:54:
                    70:8c:8f:1d:24:1e:79:f4:5e:6c:32:9c:02:d1:a5:
                    33:22:7a:d9:70:9e:a2:c0:54:b7:10:f3:1d:96:84:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:95:14:68:D7:5A:EC:9A:FA:5A:8A:FE:F8:C1:57:56:22:F0:F2:D0
            X509v3 Authority Key Identifier:
                keyid:79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/323830363a3336353a3a2f33332d3333203d3e20323635363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:365::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:dc:80:4f:65:e9:74:2d:ae:ba:fb:ca:6c:c6:29:76:ce:27:
         97:40:31:73:22:dd:19:ca:3e:19:ce:f6:1f:26:98:ee:b0:a5:
         1a:de:29:7c:60:c7:84:a9:c8:42:f7:d8:9b:7c:4b:c5:ec:7e:
         94:07:b1:55:29:67:88:29:ec:5e:1e:38:1c:c2:9b:e4:e1:b1:
         c8:bc:45:7a:98:7d:dc:32:2d:53:7b:cb:05:aa:cd:7b:8a:32:
         f6:1c:81:ba:e1:f0:55:5c:73:84:4d:16:83:ba:0a:62:0f:b2:
         ca:d6:22:c0:f3:c4:37:ba:79:81:ff:14:91:23:7a:65:fc:6f:
         a6:bb:57:8b:4f:b9:b9:f4:33:9d:a2:3f:f0:fe:1a:67:a8:fe:
         82:94:b0:cb:b0:77:fd:44:92:e4:6d:4b:fb:df:80:ec:d5:e6:
         b6:0e:8b:16:1a:4c:29:b9:a6:33:57:34:9f:e7:a2:a5:a4:a2:
         79:07:db:db:56:bc:9c:33:a8:af:46:6e:54:9d:be:75:5d:35:
         d8:e6:32:02:37:f6:2f:f0:2e:7e:7b:86:0a:7b:a6:a7:85:7f:
         42:0e:ac:f0:60:3f:a2:f5:cd:56:03:f2:52:d7:1f:a5:26:ab:
         37:84:b3:d3:07:71:dd:48:2b:45:1b:71:31:dc:4c:78:42:57:
         64:f6:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:41:06 2025 by rpki-client