Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a3a2f33322d3430203d3e20323730313630.roa
File:                     323830363a3365373a3a2f33322d3430203d3e20323730313630.roa (raw, json)
Hash identifier:          mIx4gQGyi/q3ipnK1/+rOR4VZJdL7uCW0BrJ7g3mjBo=
Subject key identifier:   57:C9:C1:A4:AB:A0:46:E2:45:D1:91:E7:7C:48:99:40:69:0E:28:26
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       749493AB8A3634C665798D4C0A076D97C70D76B7
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a3a2f33322d3430203d3e20323730313630.roa
Signing time:             Thu 11 Jun 2026 17:05:00 +0000
ROA not before:           Thu 11 Jun 2026 17:00:00 +0000
ROA not after:            Thu 10 Jun 2027 17:05:00 +0000
asID:                     270160
IP address blocks:        2806:3e7::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:94:93:ab:8a:36:34:c6:65:79:8d:4c:0a:07:6d:97:c7:0d:76:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jun 11 17:00:00 2026 GMT
            Not After : Jun 10 17:05:00 2027 GMT
        Subject: CN=57C9C1A4ABA046E245D191E77C489940690E2826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:7d:dc:e2:57:05:3e:f8:30:d4:f0:23:b4:
                    7f:d9:1f:fa:de:25:ba:dc:25:47:f8:90:9c:09:4d:
                    18:1d:d5:52:fb:0b:8f:0a:80:db:44:d7:56:12:5d:
                    74:af:cc:cc:af:c9:58:b3:4f:d5:7e:b1:4d:d1:2d:
                    32:57:0f:4c:87:8a:97:7b:c4:30:2e:70:59:5d:e0:
                    c8:15:cd:2d:0d:a5:f9:02:0a:a1:f8:f1:c9:64:a1:
                    c3:c6:b3:93:20:ca:ee:98:55:8d:6b:72:d4:36:16:
                    02:21:88:95:34:6e:1a:b3:4e:8d:a3:af:22:c6:80:
                    67:3b:a2:a1:1b:6d:6d:14:c5:d6:59:51:e3:fe:cb:
                    47:c7:cf:d3:a7:5d:5a:e6:3a:eb:b6:72:f1:53:db:
                    70:7e:d5:7d:0c:de:91:ef:42:8a:19:e3:38:bf:20:
                    ea:7b:05:20:ba:a5:b4:5d:4d:47:1c:33:c5:6b:1e:
                    7c:27:11:f6:dc:75:f9:38:91:3c:27:5e:84:3b:e3:
                    66:2b:6f:71:c3:c4:f8:34:ae:37:1b:3f:a7:e1:ee:
                    1c:53:47:17:b1:b1:fe:9c:82:54:b2:f6:31:0f:6e:
                    3d:1b:78:af:d4:2e:08:90:d2:15:e8:da:09:c6:06:
                    eb:41:fa:b3:8e:00:e7:38:04:a8:e8:df:89:9f:64:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C9:C1:A4:AB:A0:46:E2:45:D1:91:E7:7C:48:99:40:69:0E:28:26
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a3a2f33322d3430203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:75:17:9b:fc:ed:49:8e:39:70:bf:71:0b:71:39:58:9f:6d:
         f4:b5:fa:b2:00:6a:54:40:3e:96:7c:92:76:14:a5:8e:e4:88:
         98:2e:0f:4f:8b:75:68:cd:2b:b5:52:1e:ab:b3:20:e9:68:c8:
         1a:ae:37:43:2d:b9:a5:31:3b:48:6f:52:57:5e:26:c2:b0:c6:
         4e:c5:0a:7f:e5:b5:0d:4e:26:bf:fe:c2:64:0d:14:de:9d:55:
         ca:8c:3e:52:df:8b:71:ba:d7:00:a2:9f:c9:10:97:d5:fb:17:
         69:b1:c7:b6:8f:2f:dd:be:36:80:e1:8b:be:ca:f1:7c:03:5b:
         fd:66:a8:35:8b:1d:ac:22:d2:ad:cb:ca:f7:1b:6e:a2:75:56:
         d3:7c:7d:57:21:be:30:19:a7:f9:3b:c5:2a:87:3d:c5:79:76:
         83:2c:6a:80:43:82:71:69:b2:3f:d5:cd:21:5e:81:a2:93:08:
         1f:6d:6e:9c:80:a4:f4:cc:69:23:28:16:e1:4b:9d:df:9e:8a:
         a4:5a:57:43:c7:00:3d:da:54:8a:dd:a0:f0:34:89:8f:82:d6:
         2b:c9:7d:15:e9:be:94:1d:ce:8e:fc:57:1b:04:95:66:9b:d7:
         5b:47:5e:00:b3:d7:a1:01:61:76:e7:cc:c2:20:c5:81:91:9e:
         c4:69:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:51 2026 by rpki-client