Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          A79Q8l9ZbDgs2VylLiDUBQ7BLd8oFK1/WNIcU1L1GtE=
Subject key identifier:   FC:AE:30:B3:1E:72:BF:2C:BE:1A:9D:03:EE:36:7B:37:B1:EE:F8:DF
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       5CD668A42B78468BF14D08583F7EA35D2D690DD9
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 02 Mar 2026 18:32:24 +0000
ROA not before:           Mon 02 Mar 2026 18:27:24 +0000
ROA not after:            Mon 01 Mar 2027 18:32:24 +0000
asID:                     270165
IP address blocks:        2806:3eb:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d6:68:a4:2b:78:46:8b:f1:4d:08:58:3f:7e:a3:5d:2d:69:0d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar  2 18:27:24 2026 GMT
            Not After : Mar  1 18:32:24 2027 GMT
        Subject: CN=FCAE30B31E72BF2CBE1A9D03EE367B37B1EEF8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1e:71:6a:bb:67:f8:c5:93:6d:dc:a0:1d:f9:
                    13:21:bb:c3:f8:29:71:ac:64:eb:a8:51:d3:89:40:
                    d9:ab:9b:1c:7d:a7:a4:b3:97:f0:b6:da:6a:13:b1:
                    2d:71:6c:ed:1e:29:42:28:8a:75:3d:0f:d0:df:dd:
                    80:b2:ac:48:e8:67:e0:9b:96:fd:b8:80:ea:f1:f7:
                    70:df:96:c4:b0:38:64:cd:8c:88:ad:a6:a1:90:ca:
                    24:e7:c1:b0:6c:c0:24:93:27:77:f3:96:dc:1d:77:
                    f8:99:69:2a:99:3f:de:78:8c:7a:e7:65:c2:c4:1e:
                    54:cf:33:ef:e2:87:71:d8:96:e4:1d:82:5a:e0:fd:
                    a2:68:73:2f:87:44:eb:e5:44:ae:40:ad:16:e8:40:
                    ab:ea:e5:67:10:43:1a:aa:9b:9e:2c:3c:e3:0f:18:
                    a2:28:e3:d2:6f:74:d5:31:87:e8:06:1b:12:40:bb:
                    a7:42:65:51:6d:48:6a:8f:88:14:d0:12:71:8f:34:
                    9a:e2:6f:3a:cf:35:f4:4d:c8:c8:a5:22:6f:1c:b4:
                    03:0d:9b:19:b1:5d:fb:df:19:6c:7e:03:a9:e8:89:
                    17:58:b0:0c:a2:b4:ea:1c:e9:68:eb:94:a2:fe:ff:
                    21:c8:a9:5d:53:e9:a8:5c:09:e5:b3:d7:c4:3d:bf:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:30:B3:1E:72:BF:2C:BE:1A:9D:03:EE:36:7B:37:B1:EE:F8:DF
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3230303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         a5:5a:50:2c:42:30:b5:5d:76:6b:4c:19:26:ee:b2:e1:80:06:
         11:1c:d9:20:9d:8c:13:82:af:67:3e:f3:fc:62:df:76:a8:06:
         ec:92:75:71:46:3e:66:78:82:11:87:1c:f3:7a:88:5b:f4:b0:
         46:3a:2f:b3:3b:88:6d:b0:df:b4:32:4d:a9:c6:cd:96:3b:15:
         32:28:32:80:62:ef:e4:5e:fa:3a:41:7d:60:68:c2:1d:01:a8:
         b9:87:7c:ee:b3:01:b1:73:c5:13:48:29:da:4b:22:02:7c:5d:
         3e:ff:54:15:fa:85:7d:e2:77:cf:f7:03:97:38:c4:0a:51:4a:
         f3:bc:2c:36:22:64:a5:14:7d:99:30:1b:34:07:3a:83:9f:53:
         4d:91:dc:d8:ac:2f:5c:6c:f3:9b:b8:c1:64:a0:e4:a9:49:9b:
         06:ab:46:1d:ca:1c:31:9a:a7:ac:03:ab:cd:c2:bb:15:3a:69:
         e9:54:3b:79:76:14:12:0c:b8:72:3d:35:c2:af:fa:9e:57:d3:
         83:6a:c5:75:c8:14:14:90:01:e5:6d:42:b5:9f:19:a2:9d:68:
         2c:42:3b:f6:7c:8f:65:3a:73:ca:41:88:f0:72:01:6c:65:60:
         01:0e:29:df:a6:30:40:af:63:38:97:76:d0:f4:d8:34:be:fc:
         aa:73:7b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:51 2026 by rpki-client