Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/30B127C9E32D1BCD985944709AA53768CEB8E10E3AC4233ADA71E2C149868F4C/0/323830363a3437363a3a2f33322d3438203d3e20323734343433.roa
File:                     323830363a3437363a3a2f33322d3438203d3e20323734343433.roa (raw, json)
Hash identifier:          tcs0BwK4deYRGqnz7RTKZgl3+OgN066gfm2HfUwONv4=
Subject key identifier:   16:C1:69:FD:D9:88:E2:98:73:0D:D4:36:58:52:6B:C3:67:C9:E9:47
Certificate issuer:       /CN=61FD95A0D827F278EB2CD9C67BCAB313D9C3735C
Certificate serial:       26FE75E0B13BAE79A38FC5492C6AF22F2D5DC5F2
Authority key identifier: 61:FD:95:A0:D8:27:F2:78:EB:2C:D9:C6:7B:CA:B3:13:D9:C3:73:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61FD95A0D827F278EB2CD9C67BCAB313D9C3735C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B127C9E32D1BCD985944709AA53768CEB8E10E3AC4233ADA71E2C149868F4C/0/323830363a3437363a3a2f33322d3438203d3e20323734343433.roa
Signing time:             Thu 03 Sep 2026 20:10:00 +0000
ROA not before:           Thu 03 Sep 2026 20:05:00 +0000
ROA not after:            Thu 02 Sep 2027 20:10:00 +0000
asID:                     274443
IP address blocks:        2806:476::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B127C9E32D1BCD985944709AA53768CEB8E10E3AC4233ADA71E2C149868F4C/0/61FD95A0D827F278EB2CD9C67BCAB313D9C3735C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B127C9E32D1BCD985944709AA53768CEB8E10E3AC4233ADA71E2C149868F4C/0/61FD95A0D827F278EB2CD9C67BCAB313D9C3735C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61FD95A0D827F278EB2CD9C67BCAB313D9C3735C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fe:75:e0:b1:3b:ae:79:a3:8f:c5:49:2c:6a:f2:2f:2d:5d:c5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61FD95A0D827F278EB2CD9C67BCAB313D9C3735C
        Validity
            Not Before: Sep  3 20:05:00 2026 GMT
            Not After : Sep  2 20:10:00 2027 GMT
        Subject: CN=16C169FDD988E298730DD43658526BC367C9E947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:ac:e3:19:11:39:52:5c:23:c9:f9:12:93:
                    48:ab:93:a9:24:8a:87:e1:d4:e5:ff:f7:5f:bc:30:
                    69:79:e9:e6:a3:b3:f3:97:d6:fb:03:15:9e:e2:4e:
                    98:5c:ff:87:30:6f:fd:89:54:01:8a:56:38:6a:55:
                    e0:6a:b1:b4:4c:74:49:aa:fd:6d:63:73:a6:f6:b3:
                    6d:21:f1:c2:b3:62:fc:48:32:52:82:39:f3:d6:26:
                    36:fc:24:17:bf:62:ca:20:d4:8d:cd:cb:57:fe:53:
                    10:35:2c:3a:e6:eb:3f:f3:3c:d3:22:07:dc:5f:32:
                    35:fa:7f:d7:4c:ca:21:b1:b1:c7:3a:86:b0:69:7b:
                    4b:98:3f:c4:1a:04:ec:22:54:01:53:bd:83:25:59:
                    c8:2f:03:3c:7d:e5:0b:2a:bf:c7:27:ef:e2:7b:9d:
                    af:b6:fe:95:46:85:e3:0d:5f:ea:8c:f5:f9:49:fa:
                    ae:1f:d8:94:ab:54:70:32:c7:aa:7a:9b:57:3b:28:
                    c3:ab:50:26:a6:b6:92:f1:1d:d5:37:52:50:1e:b0:
                    8b:cf:0c:9a:d1:43:85:29:ac:b5:39:aa:99:64:1b:
                    86:c8:e5:0c:c4:2d:5a:d1:cc:35:e8:a8:8b:20:ab:
                    e0:79:6e:d6:e4:2d:21:1d:7d:52:ae:12:9f:f2:14:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:69:FD:D9:88:E2:98:73:0D:D4:36:58:52:6B:C3:67:C9:E9:47
            X509v3 Authority Key Identifier:
                keyid:61:FD:95:A0:D8:27:F2:78:EB:2C:D9:C6:7B:CA:B3:13:D9:C3:73:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B127C9E32D1BCD985944709AA53768CEB8E10E3AC4233ADA71E2C149868F4C/0/61FD95A0D827F278EB2CD9C67BCAB313D9C3735C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61FD95A0D827F278EB2CD9C67BCAB313D9C3735C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B127C9E32D1BCD985944709AA53768CEB8E10E3AC4233ADA71E2C149868F4C/0/323830363a3437363a3a2f33322d3438203d3e20323734343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:476::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:af:33:95:43:61:48:fe:38:a1:fa:9e:1a:a8:33:a8:53:
         69:87:d4:74:4a:be:b3:56:43:a0:dc:58:9f:d8:86:1c:54:df:
         f3:6d:24:8f:5d:b0:54:7c:e0:33:a0:74:ee:2e:56:90:e8:fa:
         37:2f:bd:b2:29:af:d2:73:9c:f3:ac:39:40:de:20:1d:dc:89:
         87:6b:4d:59:7e:bb:bf:ca:fd:47:5e:7c:e3:73:89:23:e8:e9:
         ec:60:8a:de:1f:4f:64:99:56:16:16:11:68:d9:5c:1a:59:c4:
         2d:5d:27:22:8f:f1:1e:01:8c:89:64:25:f1:5f:24:29:8f:e3:
         53:9f:3b:66:d7:41:dc:7b:36:f7:34:ca:47:5a:dd:f3:fc:68:
         22:19:1c:8f:90:9f:2f:fe:11:64:93:0f:df:16:80:38:70:3e:
         45:e8:79:4d:3e:df:03:b9:b3:f0:5f:17:92:da:6d:02:e2:4f:
         bc:9a:f6:5b:8c:2d:80:f5:be:c0:08:12:d9:98:43:fa:e0:eb:
         f5:03:fc:0f:c1:c3:46:1c:e7:cd:b8:c6:a9:bd:3d:95:a5:73:
         78:29:59:b1:52:b7:5a:46:65:ad:b6:17:65:78:6b:95:f3:37:
         19:72:3e:cf:ab:4b:d4:87:db:63:1d:d1:cb:4e:07:82:fe:39:
         3a:3a:d6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:04:25 2026 by rpki-client