Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/323830363a3362363a3a2f33322d3438203d3e203238333934.roa
File:                     323830363a3362363a3a2f33322d3438203d3e203238333934.roa (raw, json)
Hash identifier:          WQHm9r3XSYJA7BSV5tjD9KS+gmjHVxRZ751Uh2stRu8=
Subject key identifier:   76:25:11:68:BF:BE:DC:93:A5:61:8F:0E:B6:C8:85:EE:FA:7D:9D:32
Certificate issuer:       /CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
Certificate serial:       2E825E9D538D69E0A3A50BB374EE5FF30103812B
Authority key identifier: A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/323830363a3362363a3a2f33322d3438203d3e203238333934.roa
Signing time:             Tue 22 Jul 2025 00:26:04 +0000
ROA not before:           Tue 22 Jul 2025 00:21:04 +0000
ROA not after:            Tue 21 Jul 2026 00:26:04 +0000
asID:                     28394
IP address blocks:        2806:3b6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:82:5e:9d:53:8d:69:e0:a3:a5:0b:b3:74:ee:5f:f3:01:03:81:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
        Validity
            Not Before: Jul 22 00:21:04 2025 GMT
            Not After : Jul 21 00:26:04 2026 GMT
        Subject: CN=76251168BFBEDC93A5618F0EB6C885EEFA7D9D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:49:7c:49:36:4d:de:92:35:3f:5e:ac:9d:
                    5e:d3:86:2f:63:63:98:d6:22:5d:81:4b:0c:a6:be:
                    53:d9:0e:3d:98:b3:1e:d9:a7:0f:9c:00:a5:14:77:
                    e7:4c:68:65:96:81:2b:7b:f8:2f:54:c7:f9:45:e4:
                    42:7d:87:27:66:6a:23:63:2e:5c:78:e2:a5:96:a9:
                    0b:90:fc:33:14:13:6d:39:15:75:1a:9d:94:f4:ad:
                    2e:22:1a:b2:30:09:af:14:54:1b:50:ed:b2:88:fe:
                    e9:f8:d1:81:03:a8:4b:89:f3:15:4e:28:22:ea:c5:
                    ef:f8:a2:62:7c:4e:98:65:45:e2:b7:92:10:03:24:
                    6a:3e:df:24:71:e5:5c:9b:7e:0d:b7:76:75:da:64:
                    50:0b:a4:20:b9:9f:37:70:77:9d:19:ad:92:66:1e:
                    35:27:c4:3a:b6:39:63:72:47:81:4d:97:a4:e6:57:
                    18:8a:d0:33:8e:87:35:92:00:93:63:5c:fb:0a:27:
                    9c:b4:17:d8:07:b4:a0:37:bd:21:66:e0:a7:d7:fd:
                    13:27:f1:35:0f:de:d0:78:b2:30:a9:95:c5:6f:71:
                    de:7b:41:5f:2b:54:60:91:f3:7d:b7:1f:20:0c:ab:
                    01:b1:8a:82:8b:f0:c9:16:fa:a3:dd:12:48:31:c2:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:25:11:68:BF:BE:DC:93:A5:61:8F:0E:B6:C8:85:EE:FA:7D:9D:32
            X509v3 Authority Key Identifier:
                keyid:A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/323830363a3362363a3a2f33322d3438203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:bf:2b:28:23:e5:93:40:4b:ae:44:dd:36:83:a9:92:37:5c:
         3d:97:bc:9e:f0:6b:7e:9d:fb:ee:3a:aa:38:52:13:08:5f:a3:
         6f:5c:73:e7:d3:3c:25:da:25:bf:16:67:24:fb:2e:53:2a:80:
         bb:e2:ef:c0:d2:ac:7f:9a:85:64:e8:13:ec:99:31:e9:b7:71:
         a5:73:80:30:60:f9:90:ae:28:ef:58:28:e8:4d:55:b8:52:53:
         a9:30:c4:cb:5e:82:e5:bb:45:69:90:90:ba:60:e6:75:2a:93:
         eb:f3:1e:ec:e0:b8:ff:22:d7:3c:43:80:f2:8a:75:f9:9b:08:
         98:1d:94:8e:ae:bc:ec:15:ce:d7:b1:88:df:fe:b2:e8:c3:47:
         2b:c4:3f:f0:89:89:c5:c9:ec:e3:5f:3d:ba:da:1c:20:c6:92:
         42:e7:0b:dc:f0:eb:04:44:eb:4e:88:57:d9:60:8c:b3:1e:f8:
         4b:12:2f:e8:76:1b:5f:ae:06:42:15:94:8d:a1:20:76:17:a9:
         22:5f:ec:40:9e:18:0d:5a:ce:28:d4:16:df:4c:f1:b9:20:14:
         0d:cc:3d:31:71:9b:09:66:66:1d:c9:f7:ae:80:5e:5c:7a:2e:
         6d:04:2c:40:e1:26:ec:d8:c7:59:d9:87:19:99:5e:a8:23:63:
         be:1d:08:5a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIULoJenVONaeCjpQuzdO5f8wEDgSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdFMDE4NkI1QTFFODUzRTQzMTFFNzJEQkNEMUMxRDM4
QUZEM0E3MTAeFw0yNTA3MjIwMDIxMDRaFw0yNjA3MjEwMDI2MDRaMDMxMTAvBgNV
BAMTKDc2MjUxMTY4QkZCRURDOTNBNTYxOEYwRUI2Qzg4NUVFRkE3RDlEMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRi0l8STZN3pI1P16snV7Thi9j
Y5jWIl2BSwymvlPZDj2Ysx7Zpw+cAKUUd+dMaGWWgSt7+C9Ux/lF5EJ9hydmaiNj
Llx44qWWqQuQ/DMUE205FXUanZT0rS4iGrIwCa8UVBtQ7bKI/un40YEDqEuJ8xVO
KCLqxe/4omJ8TphlReK3khADJGo+3yRx5Vybfg23dnXaZFALpCC5nzdwd50ZrZJm
HjUnxDq2OWNyR4FNl6TmVxiK0DOOhzWSAJNjXPsKJ5y0F9gHtKA3vSFm4KfX/RMn
8TUP3tB4sjCplcVvcd57QV8rVGCR8323HyAMqwGxioKL8MkW+qPdEkgxwkZjAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUdiURaL++3JOlYY8OtsiF7vp9nTIwHwYDVR0j
BBgwFoAUp+AYa1oehT5DEectvNHB04r9OnEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xREM4RURGMjgwNjBBNTNDM0Y5RjVDNUI3REVDQTBCMkNG
NTM0NzE3MkRGQ0U4QjU3N0U3ODM3RjUxODcyQzdDLzAvQTdFMDE4NkI1QTFFODUz
RTQzMTFFNzJEQkNEMUMxRDM4QUZEM0E3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BN0UwMTg2QjVBMUU4NTNFNDMx
MUU3MkRCQ0QxQzFEMzhBRkQzQTcxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMURDOEVERjI4MDYwQTUzQzNGOUY1QzVCN0RFQ0EwQjJDRjUzNDcxNzJE
RkNFOEI1NzdFNzgzN0Y1MTg3MkM3Qy8wLzMyMzgzMDM2M2EzMzYyMzYzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYDtjANBgkq
hkiG9w0BAQsFAAOCAQEAeb8rKCPlk0BLrkTdNoOpkjdcPZe8nvBrfp377jqqOFIT
CF+jb1xz59M8JdolvxZnJPsuUyqAu+LvwNKsf5qFZOgT7Jkx6bdxpXOAMGD5kK4o
71go6E1VuFJTqTDEy16C5btFaZCQumDmdSqT6/Me7OC4/yLXPEOA8op1+ZsImB2U
jq687BXO17GI3/6y6MNHK8Q/8ImJxcns4189utocIMaSQucL3PDrBETrTohX2WCM
sx74SxIv6HYbX64GQhWUjaEgdhepIl/sQJ4YDVrOKNQW30zxuSAUDcw9MXGbCWZm
Hcn3roBeXHoubQQsQOEm7NjHWdmHGZleqCNjvh0IWg==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:24:19 2025 by rpki-client