Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa
File:                     323830363a3230633a3a2f33322d3332203d3e20323635353137.roa (raw, json)
Hash identifier:          pn4oxM9f8U1fO5WV+j/LwqTe2Kw9ZeME8qkX+05PO0o=
Subject key identifier:   D2:46:D3:AF:1F:D7:24:02:5E:A7:18:76:3F:8E:4C:CE:5E:63:F8:28
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       382E9521E6D10DEC6E039E7CD13819D250B0EC69
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa
Signing time:             Mon 09 Mar 2026 17:33:21 +0000
ROA not before:           Mon 09 Mar 2026 17:28:21 +0000
ROA not after:            Mon 08 Mar 2027 17:33:21 +0000
asID:                     265517
IP address blocks:        2806:20c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2e:95:21:e6:d1:0d:ec:6e:03:9e:7c:d1:38:19:d2:50:b0:ec:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: Mar  9 17:28:21 2026 GMT
            Not After : Mar  8 17:33:21 2027 GMT
        Subject: CN=D246D3AF1FD724025EA718763F8E4CCE5E63F828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:17:d1:d6:c3:78:42:f9:40:f7:a5:53:66:
                    c5:d6:c5:a4:f8:65:68:56:19:79:54:15:72:e5:d9:
                    bf:12:f2:13:37:c6:e9:b5:78:a4:b8:79:f8:fb:a1:
                    57:0d:03:9d:91:a3:6f:a3:fd:e1:90:a7:f1:d2:0f:
                    94:20:45:af:f2:0c:ee:03:d3:dc:64:79:d9:eb:f7:
                    2a:a4:2e:78:6c:dd:1b:90:ae:ae:e1:3b:a7:7a:8d:
                    49:51:7b:60:70:c8:88:20:a1:2b:85:82:9b:e4:60:
                    2c:d5:d7:e4:e0:5c:41:2c:d6:f4:7b:ab:41:0f:d5:
                    8a:f7:f9:76:08:49:d7:63:e0:19:27:12:2a:6a:c9:
                    ef:2e:38:55:7e:5e:fe:7f:1e:0b:94:34:3d:9f:9b:
                    62:81:61:2e:b8:37:7e:b3:14:4f:66:42:0b:7d:86:
                    89:dc:ea:48:e2:13:25:31:41:68:c4:3e:fd:57:b4:
                    55:18:b8:e4:9c:49:84:8d:17:4c:c0:86:ab:62:8f:
                    18:f6:ee:d0:87:0b:65:9b:98:47:94:3f:b3:20:b8:
                    d2:e9:33:a3:eb:aa:dc:d9:44:93:e5:48:79:e5:11:
                    c3:55:bf:dd:3b:79:40:33:5f:11:4c:e1:22:6a:e6:
                    69:e0:54:af:0a:82:fe:be:17:4a:73:40:e4:bb:c4:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:D3:AF:1F:D7:24:02:5E:A7:18:76:3F:8E:4C:CE:5E:63:F8:28
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/323830363a3230633a3a2f33322d3332203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:20c::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:18:4d:30:69:0e:2f:7d:39:99:6b:f3:50:57:39:8f:6c:a2:
         55:70:1b:d4:47:9b:fd:81:bf:6b:99:ee:0d:93:b2:c5:b6:6d:
         c6:f4:8b:a5:7b:35:2d:46:61:cf:23:fb:d8:dc:a3:1f:a1:d1:
         70:9a:e7:5d:8c:d7:af:cb:61:d4:f8:80:77:49:9a:68:10:0e:
         08:48:fc:91:2e:92:c1:18:02:1f:6c:9a:eb:b7:bf:06:10:ba:
         2f:44:27:56:c4:c1:fa:38:36:54:f1:5e:01:89:34:7b:59:e9:
         67:81:66:0f:c4:73:bf:99:fa:cd:23:3d:6f:f7:41:59:e5:c1:
         00:25:ac:d5:c7:38:7d:c8:c9:d0:4e:cd:5c:45:b7:46:c1:03:
         f3:dc:49:cc:30:36:9f:65:32:1a:bf:ac:bc:81:9b:0c:53:bd:
         8f:da:0d:a0:a8:59:14:70:a7:d3:2c:c7:13:2a:65:67:72:36:
         40:8f:24:96:40:b6:13:a8:5f:50:a0:19:71:73:cc:f7:ca:05:
         cf:0b:7d:28:2b:d3:94:d3:41:e6:a6:32:3e:db:6c:bf:b3:23:
         36:2f:95:8c:93:bf:0f:df:66:dd:9d:1c:b8:27:8c:ce:4c:94:
         c9:36:78:42:1d:64:9b:09:5e:b2:47:d2:14:e7:01:0f:fe:3c:
         69:8a:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:21:13 2026 by rpki-client