Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa
File:                     323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa (raw, json)
Hash identifier:          SiT+tv8UiAWdoyP/sbhqJoucKe8+YRgRA6gqsM8ZsfA=
Subject key identifier:   D3:6F:F4:CE:B6:96:5B:60:63:7D:75:4D:16:E1:8D:62:B6:09:20:9B
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       1E61FF282B2FF4E581C14D4854E3A4773AAE5BEB
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa
Signing time:             Thu 05 Feb 2026 00:29:10 +0000
ROA not before:           Thu 05 Feb 2026 00:24:10 +0000
ROA not after:            Thu 04 Feb 2027 00:29:10 +0000
asID:                     28451
IP address blocks:        2806:3f9:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 15:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:61:ff:28:2b:2f:f4:e5:81:c1:4d:48:54:e3:a4:77:3a:ae:5b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Feb  5 00:24:10 2026 GMT
            Not After : Feb  4 00:29:10 2027 GMT
        Subject: CN=D36FF4CEB6965B60637D754D16E18D62B609209B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:3b:61:b2:d2:67:98:52:c9:bd:13:07:0d:
                    55:5e:e3:95:f0:79:dc:fc:04:49:1b:25:57:87:aa:
                    f3:84:d0:f4:47:5b:92:5a:b6:16:d4:ea:7e:95:7d:
                    18:4f:c7:f0:9f:a9:3d:ba:2b:c0:1a:59:56:06:fd:
                    43:0d:84:c9:cf:55:d8:90:15:dd:56:57:83:ae:38:
                    16:cf:07:77:2f:bd:df:3c:67:f0:86:82:e8:b3:8f:
                    cf:fd:d7:f2:36:aa:14:d9:b9:26:24:d1:16:e1:17:
                    0d:74:9d:12:d8:7c:33:18:fc:5c:de:d6:14:4c:ef:
                    b0:62:1d:ec:91:de:f0:55:94:12:e7:14:36:03:fe:
                    09:b2:c8:c4:90:cb:ce:b7:c7:b0:1f:70:5c:9c:6c:
                    22:ac:06:3a:84:36:c8:a6:24:d6:4a:1c:0e:18:9b:
                    62:77:90:f9:6d:b1:ad:d9:ec:70:02:f4:61:31:47:
                    e9:92:71:7f:84:57:90:86:fd:80:ae:0e:3c:1d:82:
                    40:54:0d:a6:36:f2:be:50:c3:f3:f0:31:d2:5f:f0:
                    5c:89:cd:86:ef:4a:d7:ea:29:e8:32:4c:d8:90:65:
                    52:a5:df:c9:d3:35:43:74:65:90:17:b7:bd:a4:f9:
                    58:fa:b6:4f:a0:8d:59:56:b8:13:9f:28:9d:21:29:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:F4:CE:B6:96:5B:60:63:7D:75:4D:16:E1:8D:62:B6:09:20:9B
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:23:76:5b:fa:3b:aa:75:77:2e:7c:1d:a8:5d:bb:23:b4:
         12:89:4e:d1:78:e9:08:cb:4b:a6:28:0d:28:71:38:f5:f1:1a:
         9f:4d:3b:16:78:f6:f7:41:0b:2b:38:3b:88:30:7b:3a:db:33:
         3e:ad:1e:d5:42:1a:d3:1e:32:9f:87:49:11:0c:3d:6b:1d:08:
         b4:b5:7c:fe:c8:91:22:67:e2:d6:9f:f6:e1:db:13:4b:0d:2b:
         1a:fa:3b:51:5c:04:39:82:26:0a:8c:3c:af:b9:6c:27:1f:f2:
         41:12:08:83:da:e8:43:e6:25:af:58:70:2c:5d:13:99:d5:eb:
         89:9a:6e:bb:1f:6e:a4:66:89:5c:d5:0a:f7:44:01:9c:e6:c6:
         a6:0a:3c:38:56:5c:e8:cb:99:4d:cb:f8:fe:bf:13:0a:4b:b4:
         ce:5c:af:c4:a7:33:1c:0f:3f:e5:d5:17:02:4c:0b:ee:14:a7:
         03:59:01:56:f3:18:e1:f7:da:53:1a:d5:5c:52:9d:e1:fe:c1:
         b3:19:57:70:cf:2c:97:2e:db:ea:f6:6b:3c:7f:9e:fa:14:db:
         99:b4:95:7d:da:98:b7:00:61:11:d7:5d:55:88:28:7a:18:0f:
         b3:50:58:1d:a9:82:da:8a:36:5c:09:5c:2a:1c:5f:0f:68:e7:
         c2:2f:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:19 2026 by rpki-client