Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a653030303a3a2f33352d3335203d3e20323730313433.roa
File:                     323830363a3364663a653030303a3a2f33352d3335203d3e20323730313433.roa (raw, json)
Hash identifier:          kKw5TkmbOMoUbjE1b6efDBcDdBXf7qx8UPBZSn226wI=
Subject key identifier:   E2:F7:EC:CA:93:41:3B:00:C9:A1:90:03:4E:74:E5:53:18:10:F4:05
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       234AADEBC07DD90D5CCA98D6572264D969E34C0C
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a653030303a3a2f33352d3335203d3e20323730313433.roa
Signing time:             Wed 01 Jul 2026 00:50:26 +0000
ROA not before:           Wed 01 Jul 2026 00:45:26 +0000
ROA not after:            Wed 30 Jun 2027 00:50:26 +0000
asID:                     270143
IP address blocks:        2806:3df:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 20:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:ad:eb:c0:7d:d9:0d:5c:ca:98:d6:57:22:64:d9:69:e3:4c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Jul  1 00:45:26 2026 GMT
            Not After : Jun 30 00:50:26 2027 GMT
        Subject: CN=E2F7ECCA93413B00C9A190034E74E5531810F405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:dd:44:8a:ca:25:02:8a:e5:ba:e3:7d:2b:
                    8f:90:78:c9:d5:e2:a2:4d:0a:e9:be:ad:67:1a:21:
                    d3:51:23:a7:fc:41:cc:0b:05:50:fa:8f:64:f0:5d:
                    60:a1:f3:81:db:f2:a0:f5:20:66:06:5a:c4:98:9a:
                    f1:82:c8:58:44:ee:37:8d:21:d9:b2:95:4a:a3:6d:
                    82:ae:3c:c9:83:93:09:39:11:88:99:9e:5e:3e:31:
                    b7:bb:43:0f:f0:8a:ce:58:b1:b2:74:ad:75:a4:e5:
                    cf:1c:2b:98:0f:46:d7:bb:99:c8:a4:99:7f:77:59:
                    2a:c0:37:a1:e9:93:29:4b:24:68:d6:16:50:51:33:
                    02:ec:39:63:1d:b9:5c:3f:73:3c:cc:9c:00:06:bd:
                    93:cd:24:d7:e1:b5:40:44:3d:eb:71:77:75:0d:71:
                    85:ba:22:cc:37:7f:19:c3:2d:b8:40:3d:b6:c4:cb:
                    bc:73:ed:ac:29:e7:9f:7c:ce:02:d0:f1:9d:e8:02:
                    58:e6:2c:75:f6:c7:4c:22:42:4d:59:df:82:8b:f5:
                    90:64:29:c7:90:82:96:17:12:30:bd:df:76:0a:ad:
                    67:8d:7d:40:e5:12:1d:77:d4:0a:eb:19:3d:b3:8e:
                    c3:2f:78:49:1e:c7:03:af:1b:7b:16:c3:de:80:5e:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:EC:CA:93:41:3B:00:C9:A1:90:03:4E:74:E5:53:18:10:F4:05
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a653030303a3a2f33352d3335203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3df:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:72:92:1b:d1:21:db:68:15:b2:01:03:32:d4:80:25:f4:ad:
         12:d2:bf:10:d3:6f:79:04:2c:1c:a1:75:b5:df:d2:0b:35:d4:
         44:c9:0c:7e:b8:3e:75:fb:6d:ae:aa:8a:b5:90:2f:ad:58:74:
         62:2b:96:ac:87:ca:fc:47:df:23:a7:55:71:94:ef:79:a3:11:
         c8:d5:5a:a6:72:7a:79:21:3f:38:f0:d1:0b:cd:ad:dc:a6:d7:
         63:58:61:e9:b1:a2:48:e2:45:15:96:4e:81:a5:0b:85:6a:57:
         a3:00:ca:a3:ee:40:1c:72:2a:76:f1:9f:6b:46:10:8c:f4:9b:
         c8:e6:8c:47:a6:87:63:51:0b:05:0c:40:22:a4:44:1d:63:2f:
         14:8e:9d:8a:d6:46:74:5e:d1:d0:a8:df:61:86:14:1b:2a:f7:
         37:25:1a:4f:84:63:b2:2c:d4:80:6d:4d:da:4a:21:87:1f:3a:
         f3:d7:9a:a3:e8:96:d9:ac:9a:fa:ab:cb:2b:97:fd:5b:a2:74:
         b3:59:44:c7:a5:00:85:7e:75:1f:72:62:cb:65:c7:3b:8d:f8:
         43:df:50:f7:04:8a:de:59:b1:d6:d5:d6:5a:af:ad:1f:b8:d6:
         ad:22:64:5b:12:bf:92:35:52:40:8e:45:0b:67:1f:9b:bf:c4:
         84:7a:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:07:21 2026 by rpki-client