Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          CTGApUJlbyOARXCs85DGaH1n/9X+KaXC2CXtjyuGOII=
Subject key identifier:   87:AD:6F:0F:25:0F:1F:65:6D:7A:BD:D8:2A:13:02:55:B3:D5:D7:E0
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       7BF3052C6BE0B65E640654E3DE080FB967E0C443
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 02 Mar 2026 18:32:25 +0000
ROA not before:           Mon 02 Mar 2026 18:27:25 +0000
ROA not after:            Mon 01 Mar 2027 18:32:25 +0000
asID:                     270165
IP address blocks:        2806:3eb:9000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f3:05:2c:6b:e0:b6:5e:64:06:54:e3:de:08:0f:b9:67:e0:c4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar  2 18:27:25 2026 GMT
            Not After : Mar  1 18:32:25 2027 GMT
        Subject: CN=87AD6F0F250F1F656D7ABDD82A130255B3D5D7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:ec:12:6f:dd:8b:fd:fc:05:6f:09:ce:b8:
                    02:7e:aa:88:93:29:00:40:d3:a2:91:fd:5e:a9:48:
                    92:6a:34:fd:57:21:e0:2b:c0:a7:ca:e1:d1:8f:f4:
                    47:0f:97:be:ca:37:98:b5:cb:d2:e7:0f:69:eb:00:
                    d9:1d:75:31:a3:52:f8:dd:ab:98:76:99:57:e8:d2:
                    7a:84:7e:92:67:3c:38:65:b2:bb:b1:16:30:2e:f1:
                    b0:ad:7c:6a:27:16:a7:96:55:6c:36:9c:1b:59:1f:
                    6d:9c:22:fa:92:89:28:ab:f3:8e:50:99:70:64:3d:
                    2f:af:bc:06:49:ae:93:c6:b7:60:d1:ab:66:a9:20:
                    8f:97:c8:a7:55:68:55:19:e8:30:cc:57:08:23:39:
                    9f:12:ef:40:82:a2:2c:12:ba:84:ea:bd:03:14:58:
                    01:10:03:e3:2c:00:f8:a4:fb:ae:9f:b7:1c:2c:f8:
                    3a:54:a3:0f:da:49:20:f7:d7:56:48:7a:aa:19:bf:
                    34:53:49:1d:6d:82:ec:2c:52:f4:57:d2:c9:15:3a:
                    20:f1:cb:7b:53:f8:c5:81:26:90:6a:dc:93:07:b8:
                    e4:e1:9f:a4:75:76:37:96:4a:d9:8a:bc:b5:d3:dc:
                    0e:f4:09:83:de:ce:da:d6:c0:63:b3:70:b9:e9:58:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AD:6F:0F:25:0F:1F:65:6D:7A:BD:D8:2A:13:02:55:B3:D5:D7:E0
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a393030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         76:99:87:fb:c3:be:0a:97:04:28:6f:53:54:96:42:be:2c:67:
         e2:e2:98:a1:4a:bf:9e:f0:9b:16:50:dd:c7:72:4e:e5:22:ce:
         14:8d:c2:0c:81:13:14:7c:89:7b:59:d4:fb:63:69:95:2a:67:
         22:9e:f2:b6:04:03:37:74:90:ad:e6:34:c5:5f:4c:f9:db:1f:
         c3:5d:70:48:d8:b6:0b:be:82:5f:d5:7f:04:82:2b:70:00:b4:
         f3:c1:69:4e:3c:95:a8:76:ff:aa:af:b1:59:85:68:a0:cf:f3:
         28:ee:fc:9e:2f:f5:ed:78:83:7e:81:f4:95:9f:3e:98:cd:b1:
         c5:27:a1:cb:db:93:36:21:0b:73:3b:3b:2c:e4:70:60:a8:84:
         9c:22:a4:95:84:11:ff:42:f6:f3:71:78:b5:76:e4:4c:5a:09:
         63:38:9c:fa:dc:05:16:27:21:d9:e9:45:44:25:26:20:11:ea:
         4c:b6:e2:dd:f9:b4:d8:a5:f0:8d:a5:c7:22:35:03:5d:aa:5f:
         25:89:52:8b:8d:db:e5:71:6a:7b:48:5b:a8:22:1b:1f:1b:0b:
         89:67:7c:e3:cb:9a:ba:14:14:6e:1c:b7:98:a6:3f:6b:7a:cb:
         64:fc:d1:2b:49:9d:53:a7:4c:06:bc:9d:22:d8:1c:26:65:63:
         06:50:7f:e1
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUe/MFLGvgtl5kBlTj3ggPuWfgxEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEzRUVCNUNENTlBQTBDQjlBQjkwODI1RkNDMUREODA5
MjQ1RTcyMjAeFw0yNjAzMDIxODI3MjVaFw0yNzAzMDExODMyMjVaMDMxMTAvBgNV
BAMTKDg3QUQ2RjBGMjUwRjFGNjU2RDdBQkREODJBMTMwMjU1QjNENUQ3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLOwSb92L/fwFbwnOuAJ+qoiT
KQBA06KR/V6pSJJqNP1XIeArwKfK4dGP9EcPl77KN5i1y9LnD2nrANkddTGjUvjd
q5h2mVfo0nqEfpJnPDhlsruxFjAu8bCtfGonFqeWVWw2nBtZH22cIvqSiSir845Q
mXBkPS+vvAZJrpPGt2DRq2apII+XyKdVaFUZ6DDMVwgjOZ8S70CCoiwSuoTqvQMU
WAEQA+MsAPik+66ftxws+DpUow/aSSD311ZIeqoZvzRTSR1tguwsUvRX0skVOiDx
y3tT+MWBJpBq3JMHuOThn6R1djeWStmKvLXT3A70CYPeztrWwGOzcLnpWBX/AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUh61vDyUPH2Vter3YKhMCVbPV1+AwHwYDVR0j
BBgwFoAUij7rXNWaoMuauQgl/MHdgJJF5yIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDJDQkRBMjE2RkQ3RTRGNENCM0QzODczNjA5NDA5NzVD
NTg3OEQ3MjBBNTBFQ0FCNDQxODgxODc4OTJERkIxLzAvOEEzRUVCNUNENTlBQTBD
QjlBQjkwODI1RkNDMUREODA5MjQ1RTcyMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTNFRUI1Q0Q1OUFBMENCOUFC
OTA4MjVGQ0MxREQ4MDkyNDVFNzIyLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyQ0JEQTIxNkZEN0U0RjRDQjNEMzg3MzYwOTQwOTc1QzU4NzhENzIw
QTUwRUNBQjQ0MTg4MTg3ODkyREZCMS8wLzMyMzgzMDM2M2EzMzY1NjIzYTM5MzAz
MDMwM2EzYTJmMzMzOTJkMzMzOTIwM2QzZTIwMzIzNzMwMzEzNjM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYBKAYD65AwDQYJKoZIhvcNAQELBQADggEBAHaZh/vDvgqXBChvU1SWQr4sZ+Li
mKFKv57wmxZQ3cdyTuUizhSNwgyBExR8iXtZ1PtjaZUqZyKe8rYEAzd0kK3mNMVf
TPnbH8NdcEjYtgu+gl/VfwSCK3AAtPPBaU48lah2/6qvsVmFaKDP8yju/J4v9e14
g36B9JWfPpjNscUnocvbkzYhC3M7OyzkcGCohJwipJWEEf9C9vNxeLV25ExaCWM4
nPrcBRYnIdnpRUQlJiAR6ky24t35tNil8I2lxyI1A12qXyWJUouN2+VxantIW6gi
Gx8bC4lnfOPLmroUFG4ct5imP2t6y2T80StJnVOnTAa8nSLYHCZlYwZQf+E=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:07:56 2026 by rpki-client