Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e20323732333636.roa
File:                     323830363a3431353a3a2f33352d3335203d3e20323732333636.roa (raw, json)
Hash identifier:          +CmWTozNA/XzIYnK4lQCG3fRgg02pjL0lmK1Wc+H5wM=
Subject key identifier:   A0:1A:E3:A3:DF:9F:73:95:79:CF:E7:4C:14:68:20:44:F1:BA:F2:1A
Certificate issuer:       /CN=7A215884842505326184A6087277EE5E2FA4B91F
Certificate serial:       4BBE6E1FEAE0E72C476F4E970B4FAB58B47038B0
Authority key identifier: 7A:21:58:84:84:25:05:32:61:84:A6:08:72:77:EE:5E:2F:A4:B9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A215884842505326184A6087277EE5E2FA4B91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e20323732333636.roa
Signing time:             Sat 23 May 2026 01:43:53 +0000
ROA not before:           Sat 23 May 2026 01:38:53 +0000
ROA not after:            Sat 22 May 2027 01:43:53 +0000
asID:                     272366
IP address blocks:        2806:415::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/7A215884842505326184A6087277EE5E2FA4B91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/7A215884842505326184A6087277EE5E2FA4B91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A215884842505326184A6087277EE5E2FA4B91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 06:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:6e:1f:ea:e0:e7:2c:47:6f:4e:97:0b:4f:ab:58:b4:70:38:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A215884842505326184A6087277EE5E2FA4B91F
        Validity
            Not Before: May 23 01:38:53 2026 GMT
            Not After : May 22 01:43:53 2027 GMT
        Subject: CN=A01AE3A3DF9F739579CFE74C14682044F1BAF21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:9c:59:7d:3e:ee:9c:73:88:13:9d:44:8d:
                    d6:92:82:d0:db:cf:3a:2a:e7:64:e0:a0:49:21:82:
                    19:3f:a9:e9:0b:2a:6a:f2:ad:a5:50:0e:af:63:c3:
                    ad:d2:1e:2f:5a:cf:f9:7a:98:e2:85:0f:7f:6c:cf:
                    5c:73:eb:53:81:26:10:1c:8c:72:4a:06:ac:0c:f0:
                    3c:ee:b1:16:df:dc:25:4b:91:8b:1a:c0:44:21:15:
                    5e:37:fe:c1:30:8e:fd:a3:c6:32:bb:9c:46:98:a1:
                    0f:69:7c:af:6f:f6:70:cd:eb:09:fd:7d:47:cf:9a:
                    38:56:4f:49:91:52:57:05:57:f3:50:91:61:24:f1:
                    a8:4f:2e:91:f3:06:64:f9:b9:27:b7:aa:23:80:92:
                    07:de:06:86:f5:77:97:5c:79:a4:86:dc:d3:ba:e5:
                    22:fa:a2:f8:de:ae:da:89:34:00:89:d6:e4:e6:67:
                    44:b8:d8:93:2c:24:ed:ad:4f:f6:39:f8:6f:75:35:
                    87:bf:b3:97:6a:57:48:71:79:fe:01:8d:b6:dd:a6:
                    57:76:88:2b:c8:71:ad:ea:61:72:d1:b7:9f:a5:42:
                    f0:0b:7d:9a:6c:fa:69:1b:a8:66:37:96:24:c8:79:
                    cb:45:a2:17:13:66:4c:30:d3:fc:73:a8:52:9a:0b:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:E3:A3:DF:9F:73:95:79:CF:E7:4C:14:68:20:44:F1:BA:F2:1A
            X509v3 Authority Key Identifier:
                keyid:7A:21:58:84:84:25:05:32:61:84:A6:08:72:77:EE:5E:2F:A4:B9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/7A215884842505326184A6087277EE5E2FA4B91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A215884842505326184A6087277EE5E2FA4B91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e20323732333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:415::/35

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:a9:3b:51:b0:b5:aa:94:1d:1e:36:c5:8c:43:4c:5c:e2:
         0d:fd:c0:48:55:c4:8d:f8:8c:1c:4b:69:54:41:b8:4d:c4:24:
         cf:d2:fb:78:71:d7:47:a5:a1:a6:ef:6b:58:ed:b1:b9:41:ff:
         22:6d:4c:ac:80:bb:0b:64:81:51:25:15:d1:17:aa:4e:c2:75:
         ee:40:7a:9e:15:af:c1:84:3d:60:fa:f8:41:50:5e:8d:49:5c:
         c0:b7:d9:05:9f:10:1d:7a:b5:f5:d0:4d:bf:75:fa:c7:5a:ba:
         07:62:5d:63:53:09:c8:16:ab:31:16:c7:e0:b9:71:00:38:28:
         0f:dd:66:d1:32:b2:e1:82:45:6e:82:2f:ab:5a:f4:01:6e:99:
         ec:7d:93:b1:9e:7e:79:02:7b:a1:5c:24:5b:2a:c4:9c:47:a5:
         a8:d5:b6:c4:4b:a4:2d:f5:f6:f0:be:2f:72:bd:58:0e:3d:fb:
         a2:1e:57:e2:2b:eb:2b:ab:27:a7:17:75:e3:02:ce:5a:d7:4c:
         f9:2d:86:48:b4:b6:e4:ca:71:2f:15:78:dd:29:f4:0d:25:31:
         dc:b5:a7:da:9e:65:b2:f0:df:54:34:bb:a0:17:fd:b3:a1:7c:
         1f:96:0d:ca:84:41:37:6c:1a:7f:81:ca:c9:80:37:39:69:81:
         f5:1a:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:29:00 2026 by rpki-client