Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/323830363a3233623a3a2f33322d3438203d3e203232393038.roa
File:                     323830363a3233623a3a2f33322d3438203d3e203232393038.roa (raw, json)
Hash identifier:          PFR8ds2B0UHJLapWbxmxwQ5xnh1lXC7NT7ZkK1X/Cp0=
Subject key identifier:   3D:78:4A:A6:15:B8:6F:3D:3D:96:D6:EC:C9:8F:2C:09:43:E1:3A:32
Certificate issuer:       /CN=EED9740A57556413451C3DB2C7E611BB32EB036C
Certificate serial:       5AAF2DCCB44107D36BE855129CAB110A9434BA87
Authority key identifier: EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/323830363a3233623a3a2f33322d3438203d3e203232393038.roa
Signing time:             Fri 10 Jul 2026 18:30:00 +0000
ROA not before:           Fri 10 Jul 2026 18:25:00 +0000
ROA not after:            Fri 09 Jul 2027 18:30:00 +0000
asID:                     22908
IP address blocks:        2806:23b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 23:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:af:2d:cc:b4:41:07:d3:6b:e8:55:12:9c:ab:11:0a:94:34:ba:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED9740A57556413451C3DB2C7E611BB32EB036C
        Validity
            Not Before: Jul 10 18:25:00 2026 GMT
            Not After : Jul  9 18:30:00 2027 GMT
        Subject: CN=3D784AA615B86F3D3D96D6ECC98F2C0943E13A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:2e:7c:3a:ca:ff:8b:03:fe:e9:3c:2f:96:
                    5c:c1:67:6e:b5:6d:86:59:12:1d:98:73:79:82:fd:
                    f8:7b:bb:16:e4:0e:d7:19:b8:08:6f:31:5d:f5:81:
                    02:4e:72:b6:e9:10:a8:32:18:aa:47:f0:28:57:78:
                    23:23:12:46:0f:fe:ce:ad:e0:dc:96:fb:d3:8e:fb:
                    a7:6b:06:82:e7:17:18:03:ec:e3:ba:96:ab:36:5d:
                    38:f8:62:da:b5:1f:1e:93:b2:d4:fe:f4:98:4a:10:
                    bb:9c:57:01:67:cf:fe:e3:19:f5:a0:88:e2:e2:41:
                    a4:0f:7b:d0:8b:da:83:a4:e5:5a:aa:f6:65:6d:17:
                    bc:c9:a6:f8:4e:d5:c0:53:a0:33:2e:47:97:b6:3f:
                    ac:37:8f:69:b2:e6:b1:5e:fe:d5:9d:27:e9:2b:9d:
                    67:80:a4:92:2c:c9:c3:24:47:f4:e0:36:4e:a1:ba:
                    ef:5a:f7:af:a6:5d:f0:82:82:fb:43:ad:6f:d4:c0:
                    7f:b4:82:58:13:00:eb:76:5f:87:93:88:59:4b:13:
                    95:7d:1e:fe:a5:e9:61:4c:58:e7:84:d3:18:bd:3b:
                    d7:32:a0:b1:14:bf:07:2a:e4:f2:61:6c:51:91:d1:
                    05:01:25:32:6a:43:5a:9e:cf:53:96:7d:59:30:4a:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:4A:A6:15:B8:6F:3D:3D:96:D6:EC:C9:8F:2C:09:43:E1:3A:32
            X509v3 Authority Key Identifier:
                keyid:EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/323830363a3233623a3a2f33322d3438203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:23b::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:75:38:3d:3b:ee:c9:ca:26:c5:81:7d:21:3f:f4:96:53:c2:
         d2:c5:cc:28:74:11:96:f0:5f:7c:f5:13:c5:31:c9:16:64:8c:
         c8:ab:4c:2e:1d:7d:88:b5:29:46:70:5f:e4:e7:38:3e:ef:e6:
         b4:7f:0c:0e:f8:cc:36:0b:dd:48:f2:ee:d3:6a:4b:bd:11:95:
         94:3b:30:0a:cb:b7:23:8e:82:f0:72:83:67:ca:67:b3:3c:a4:
         9d:8f:65:d9:88:70:28:d1:4b:3f:34:b9:f5:b4:62:b0:88:d8:
         3c:f5:c7:8a:99:39:09:9c:a4:7b:83:74:04:61:a6:f9:85:4a:
         d0:9b:a5:39:5f:6a:31:ee:75:16:27:7f:a9:97:ad:45:79:1f:
         f9:46:bd:ad:35:76:75:1b:f4:ba:35:ad:68:67:19:2e:f4:25:
         79:0f:c0:52:ed:e7:34:dc:ae:42:d6:86:b6:ce:0b:3c:57:73:
         ce:a2:2b:63:5a:7f:ab:82:d4:00:82:c2:59:1c:2c:6a:6d:e4:
         f3:cf:ec:03:a2:63:03:e8:bb:ff:9e:f0:51:22:02:14:6c:31:
         ab:6e:49:cd:95:e3:a0:d4:0d:05:e9:62:09:87:dc:21:2a:8b:
         3f:46:e6:24:b4:81:34:c9:2d:9d:72:2e:ca:ed:57:aa:93:24:
         e8:22:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:54:09 2026 by rpki-client