Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a643030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a643030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          Dgpe7Hr2zN9oUICyldc0smZFK/OVyPqdWg6ClJoR3B0=
Subject key identifier:   5F:AA:69:2C:9B:08:51:C3:52:BF:7D:65:00:C5:F9:49:0F:FF:91:E8
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       018812162E606FB889206556161A25EE429BF04A
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a643030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 02 Mar 2026 18:32:24 +0000
ROA not before:           Mon 02 Mar 2026 18:27:24 +0000
ROA not after:            Mon 01 Mar 2027 18:32:24 +0000
asID:                     270165
IP address blocks:        2806:3eb:d000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:12:16:2e:60:6f:b8:89:20:65:56:16:1a:25:ee:42:9b:f0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar  2 18:27:24 2026 GMT
            Not After : Mar  1 18:32:24 2027 GMT
        Subject: CN=5FAA692C9B0851C352BF7D6500C5F9490FFF91E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:6c:75:b7:9f:81:3f:90:d5:d8:a7:12:a2:
                    5a:b8:d1:f1:a7:f2:27:5a:9f:75:4e:4a:25:28:ed:
                    bc:94:76:be:3b:4d:36:af:37:90:26:1d:81:60:0d:
                    c6:1a:4f:46:eb:8c:48:2a:d3:c8:e4:16:6f:f5:c8:
                    e4:79:2b:6d:84:f4:a3:fa:61:11:b8:47:84:97:73:
                    a4:e0:1e:13:0a:b4:e0:ed:bd:b5:17:9e:f9:3c:65:
                    a5:41:62:c3:b5:53:ae:be:c9:55:32:62:e9:f3:31:
                    80:26:14:7e:a4:9f:eb:ac:82:d4:14:07:bb:7f:20:
                    1a:8a:a2:2c:25:f7:92:f4:70:2e:6f:4a:02:1f:83:
                    43:ad:9b:b5:b7:39:ea:8d:48:8c:b4:1e:ec:01:84:
                    45:56:63:bb:eb:4a:8e:93:b0:e3:98:09:c7:a9:e9:
                    d4:b2:02:89:b0:01:c3:25:69:2d:09:4a:17:59:1c:
                    02:53:33:da:8a:56:fc:44:92:82:a6:34:35:fa:d9:
                    17:62:04:c1:88:01:f6:03:12:cd:12:18:1b:7b:ba:
                    f9:eb:48:38:b8:20:43:c0:24:6f:92:1f:4d:a8:56:
                    da:b4:49:4f:53:54:50:55:b1:f0:e8:30:8c:16:dd:
                    a8:32:e6:77:86:04:86:9f:b2:23:d9:89:2d:9e:b0:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AA:69:2C:9B:08:51:C3:52:BF:7D:65:00:C5:F9:49:0F:FF:91:E8
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a643030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:d000::/39

    Signature Algorithm: sha256WithRSAEncryption
         be:ed:1b:7f:17:13:3e:87:0c:6f:f7:e3:e3:e0:31:3f:dc:e1:
         ba:4f:9f:7f:da:e6:6f:1d:68:15:8d:3e:6e:85:05:00:10:00:
         6d:bf:f8:7d:e0:53:81:fc:5d:6f:8c:67:17:b1:61:4c:b3:ed:
         a4:96:84:f7:50:70:56:07:7d:ba:4e:4d:68:36:ea:ea:e2:69:
         61:0e:ae:86:6c:77:28:7f:f7:c9:50:02:9c:2b:c3:c4:ce:36:
         49:d6:c1:dd:9e:1e:44:f1:e2:35:52:03:40:4f:62:33:ff:52:
         21:34:5f:82:81:0e:bb:63:af:3e:52:87:a6:4d:de:3e:57:b1:
         90:f7:e6:bc:88:e3:3a:01:13:13:6a:f6:da:c2:b2:a7:db:46:
         6a:a5:7f:54:2e:81:25:d5:b7:5e:95:6f:1b:6d:03:af:4f:24:
         80:07:6a:0c:bb:2e:f7:3c:49:32:9c:8b:52:20:87:15:39:15:
         17:3f:e9:a1:90:20:56:8f:6f:80:55:9f:1e:9f:0f:64:96:14:
         fd:1d:c9:7f:3b:e8:a9:83:8a:3e:f3:17:99:90:1a:a2:9a:4d:
         5e:3a:0a:cf:0f:3a:74:20:c6:c5:8f:ed:00:2c:af:b9:dd:d9:
         b8:fa:b0:8d:00:90:f8:58:56:3f:55:d1:55:40:95:04:13:f3:
         d1:b1:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:19 2026 by rpki-client