Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a633030303a3a2f33342d3334203d3e203238343531.roa
File:                     323830363a3366393a633030303a3a2f33342d3334203d3e203238343531.roa (raw, json)
Hash identifier:          Kzah7PKP0s67832CMwufrqWwuKnIZHFIY569Q9AepNA=
Subject key identifier:   D7:BE:F8:EA:6B:84:8A:68:11:24:CD:65:A9:D3:46:E6:A6:3F:45:49
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       2F48E3D73D2BB131F9B83E82E6CD56B71D5262AB
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a633030303a3a2f33342d3334203d3e203238343531.roa
Signing time:             Thu 05 Feb 2026 00:29:10 +0000
ROA not before:           Thu 05 Feb 2026 00:24:10 +0000
ROA not after:            Thu 04 Feb 2027 00:29:10 +0000
asID:                     28451
IP address blocks:        2806:3f9:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 15:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:48:e3:d7:3d:2b:b1:31:f9:b8:3e:82:e6:cd:56:b7:1d:52:62:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Feb  5 00:24:10 2026 GMT
            Not After : Feb  4 00:29:10 2027 GMT
        Subject: CN=D7BEF8EA6B848A681124CD65A9D346E6A63F4549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:cb:6b:76:d7:27:d9:67:5d:f1:c2:5c:63:
                    0d:70:31:f7:ef:0f:95:d7:62:33:59:db:9d:c6:c8:
                    e2:a9:07:14:db:c7:90:86:c4:38:7a:01:ed:be:7e:
                    e4:22:ee:3b:23:e2:f4:75:49:68:ad:f6:de:dd:9f:
                    2e:45:81:06:e8:22:8a:1a:9d:77:ad:92:38:9d:03:
                    58:12:19:a6:58:e4:95:39:19:c8:5f:cb:e8:7c:62:
                    4e:ab:20:93:a2:c2:b5:7f:23:02:bd:95:c1:ea:02:
                    6f:9a:1a:ea:94:21:0b:3c:4f:e8:fa:b8:8d:30:54:
                    83:65:eb:ec:3b:2d:c7:b0:d0:0b:c8:1f:d9:9a:d4:
                    b3:f1:13:0f:b1:8b:41:9f:95:1b:11:f5:be:02:58:
                    de:6b:93:18:33:37:40:32:d0:73:c0:ce:d4:81:32:
                    8e:36:98:c4:a8:b5:5d:15:e3:07:b0:9e:86:0b:fc:
                    ed:09:2f:ee:45:bb:e9:8c:5a:99:9f:06:e4:d4:ab:
                    72:9d:0a:87:00:d7:3a:85:1c:63:35:bb:90:d9:60:
                    8e:26:88:dc:08:c7:db:b3:7f:65:0c:34:0a:90:bd:
                    e7:e1:69:bb:c7:26:31:4b:7b:e2:ca:05:ea:4c:d7:
                    d8:7d:c7:57:15:fa:fc:94:cb:7e:79:01:37:ac:fb:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BE:F8:EA:6B:84:8A:68:11:24:CD:65:A9:D3:46:E6:A6:3F:45:49
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a633030303a3a2f33342d3334203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:17:b5:9f:80:fb:26:e6:b9:ad:d4:df:3f:cc:02:56:88:
         1b:0f:3a:20:92:9e:d7:bd:0f:b1:ad:5f:c8:68:65:7d:27:cd:
         dc:f4:09:bc:b7:22:07:12:f7:dd:1c:5e:27:06:6e:99:8a:a2:
         b9:b2:aa:e9:ad:72:9f:b2:08:75:0d:2c:1d:9b:7e:9b:24:84:
         e6:57:2e:db:6d:5b:ee:19:be:aa:71:ea:6f:ed:2c:3e:b7:ec:
         0f:03:75:11:78:88:f5:f7:97:6c:ef:ed:fe:24:62:ea:e5:0c:
         4d:2d:8c:85:3b:6b:69:d1:17:72:86:22:fd:0d:5c:22:fd:fe:
         a1:fb:34:d8:4d:73:00:8b:84:3f:c8:4b:56:58:ff:e4:c8:23:
         44:13:4e:5a:08:d3:c7:81:80:ff:4d:7c:db:49:a1:9f:4d:66:
         b9:71:52:82:9b:08:fa:82:f3:76:9c:06:be:eb:c0:40:c2:a3:
         9a:0f:1a:2d:bb:b8:8a:a8:71:96:fb:4e:c6:fc:89:27:b8:c0:
         a7:2a:91:e0:1e:56:47:c9:ba:ac:50:aa:c1:f3:ca:b5:65:81:
         90:64:4c:7d:c1:4d:c6:f3:ea:55:b9:8a:d0:59:f4:75:1c:e2:
         01:e8:50:70:0d:c5:04:fd:ed:e6:85:b4:9c:74:f3:8c:ae:3f:
         be:a8:a5:85
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUL0jj1z0rsTH5uD6C5s1Wtx1SYqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4QUMwNjcwNjUwNjhFMDlDQjY1MUMzNDY3OTVFOEMw
NzUzRDNEQjAeFw0yNjAyMDUwMDI0MTBaFw0yNzAyMDQwMDI5MTBaMDMxMTAvBgNV
BAMTKEQ3QkVGOEVBNkI4NDhBNjgxMTI0Q0Q2NUE5RDM0NkU2QTYzRjQ1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Nstrdtcn2Wdd8cJcYw1wMffv
D5XXYjNZ253GyOKpBxTbx5CGxDh6Ae2+fuQi7jsj4vR1SWit9t7dny5FgQboIooa
nXetkjidA1gSGaZY5JU5Gchfy+h8Yk6rIJOiwrV/IwK9lcHqAm+aGuqUIQs8T+j6
uI0wVINl6+w7Lcew0AvIH9ma1LPxEw+xi0GflRsR9b4CWN5rkxgzN0Ay0HPAztSB
Mo42mMSotV0V4wewnoYL/O0JL+5Fu+mMWpmfBuTUq3KdCocA1zqFHGM1u5DZYI4m
iNwIx9uzf2UMNAqQvefhabvHJjFLe+LKBepM19h9x1cV+vyUy355ATes+8SRAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQU17746muEimgRJM1lqdNG5qY/RUkwHwYDVR0j
BBgwFoAU/4rAZwZQaOCctlHDRnlejAdT09swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjAwNkZBREMyNDc2RTQ1MDkxRjM3N0NFNzEyMTM4RkZB
RjZCMUFBNzhDQjY4ODIxNUNFN0I0QTZCQjg0M0FFLzAvRkY4QUMwNjcwNjUwNjhF
MDlDQjY1MUMzNDY3OTVFOEMwNzUzRDNEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjhBQzA2NzA2NTA2OEUwOUNC
NjUxQzM0Njc5NUU4QzA3NTNEM0RCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYwMDZGQURDMjQ3NkU0NTA5MUYzNzdDRTcxMjEzOEZGQUY2QjFBQTc4
Q0I2ODgyMTVDRTdCNEE2QkI4NDNBRS8wLzMyMzgzMDM2M2EzMzY2MzkzYTYzMzAz
MDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzODM0MzUzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
BigGA/nAMA0GCSqGSIb3DQEBCwUAA4IBAQB1tRe1n4D7Jua5rdTfP8wCVogbDzog
kp7XvQ+xrV/IaGV9J83c9Am8tyIHEvfdHF4nBm6ZiqK5sqrprXKfsgh1DSwdm36b
JITmVy7bbVvuGb6qcepv7Sw+t+wPA3UReIj195ds7+3+JGLq5QxNLYyFO2tp0Rdy
hiL9DVwi/f6h+zTYTXMAi4Q/yEtWWP/kyCNEE05aCNPHgYD/TXzbSaGfTWa5cVKC
mwj6gvN2nAa+68BAwqOaDxotu7iKqHGW+07G/IknuMCnKpHgHlZHybqsUKrB88q1
ZYGQZEx9wU3G8+pVuYrQWfR1HOIB6FBwDcUE/e3mhbScdPOMrj++qKWF
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:09:21 2026 by rpki-client