Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343430303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a343430303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          CSfCRF/XP8mYPinUWBsS6RqyO0R/JdCFL4yH2q1jrqU=
Subject key identifier:   69:A4:41:12:03:1E:A8:90:76:C2:95:94:6D:D0:D4:D8:C1:4A:CD:5A
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       1954701450F3FC01E148A38DC35CF3631D45BBAB
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343430303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 24 Sep 2026 21:36:40 +0000
ROA not before:           Thu 24 Sep 2026 21:31:40 +0000
ROA not after:            Thu 23 Sep 2027 21:36:40 +0000
asID:                     28451
IP address blocks:        2806:3f9:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:54:70:14:50:f3:fc:01:e1:48:a3:8d:c3:5c:f3:63:1d:45:bb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Sep 24 21:31:40 2026 GMT
            Not After : Sep 23 21:36:40 2027 GMT
        Subject: CN=69A44112031EA89076C295946DD0D4D8C14ACD5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:c3:f2:de:47:e2:75:ff:b0:3c:ff:47:6d:
                    1b:86:69:7f:8b:56:1e:0a:53:bd:c3:33:74:ca:8b:
                    ab:e7:e9:f4:54:b4:e4:6e:eb:36:72:66:e3:34:05:
                    2f:bf:2f:c6:5c:a6:7c:11:8b:d9:61:78:2d:f5:98:
                    e9:f0:63:02:18:5a:8a:2e:e8:2e:5f:9d:66:12:36:
                    78:27:7b:e6:1d:1d:ee:50:8e:ff:dc:48:b4:52:14:
                    dc:d1:2f:4d:3d:d7:65:db:67:28:65:36:7e:19:44:
                    f5:61:2c:e2:d3:1c:a7:e8:c8:ab:80:c6:2a:f6:bb:
                    2e:60:bd:0f:c4:ef:02:b5:47:d1:ac:dc:0f:7a:d1:
                    dd:f4:a3:b2:f1:59:bb:48:b2:f6:e4:7e:fd:13:22:
                    1b:01:d4:a1:4f:3d:1c:f6:c8:5f:81:d1:4c:33:b4:
                    bf:e2:ec:ce:59:d9:a1:4f:2d:95:5b:a9:38:2c:62:
                    0f:8f:24:91:ba:bf:34:34:ed:4d:a9:3c:84:0a:e2:
                    49:34:ae:3c:a5:e5:cd:20:76:1e:a8:5b:f2:69:c8:
                    58:3d:6f:64:55:82:36:35:76:c4:21:c7:fd:69:55:
                    b7:72:4e:32:05:04:c0:4a:5d:5e:1e:fd:6d:68:56:
                    54:6a:f0:ac:51:7d:88:2e:71:75:59:f5:2c:bf:84:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A4:41:12:03:1E:A8:90:76:C2:95:94:6D:D0:D4:D8:C1:4A:CD:5A
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343430303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:4400::/38

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:ef:ca:9d:8c:f8:6c:38:8a:6c:4e:ca:55:0d:62:cd:88:
         98:62:46:04:28:91:d1:9b:83:ea:5d:f6:be:55:23:16:4c:d0:
         f6:5b:ba:7d:3d:2c:2c:db:e2:a9:8c:2c:8b:3c:65:d8:d6:6d:
         ef:80:2d:ab:19:d5:bf:a8:b6:a4:81:28:40:4f:80:fb:9c:ee:
         d0:f0:11:60:64:a8:66:0e:f4:3a:ce:8c:b5:d9:45:3c:62:4b:
         78:d9:3f:dd:7c:7e:e6:78:18:76:bf:3c:0d:fb:a6:d6:71:ca:
         97:f4:ab:aa:41:c7:27:66:d4:8d:e4:c8:f6:82:f8:6a:d7:c5:
         2e:f9:48:2b:6c:c2:03:f5:a9:56:39:60:12:d3:11:93:02:54:
         dc:fd:8e:dd:e3:07:66:0c:5e:c4:7c:67:58:02:b1:8f:2f:09:
         c5:7f:30:3e:6b:93:47:72:a5:2b:eb:98:1a:e2:a6:c3:9d:80:
         f1:4d:27:c9:14:73:7d:ed:a6:c6:98:bf:af:42:d1:14:84:73:
         d5:fb:4e:1c:9d:3e:12:3d:9e:17:18:df:d8:9f:41:d4:01:ce:
         dc:2b:63:00:98:7a:cd:ac:40:a5:c4:7d:e2:5b:a4:f1:ce:45:
         19:1d:25:67:c4:b5:5e:2a:ab:79:12:f9:53:56:5a:a2:94:64:
         27:b8:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:31:29 2026 by rpki-client