Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/323830363a3331393a3a2f33322d3438203d3e20323730313538.roa
File:                     323830363a3331393a3a2f33322d3438203d3e20323730313538.roa (raw, json)
Hash identifier:          057EaRiZ2hSabM3uOx17qGYsQjUKM2Q+70ohIorSYA0=
Subject key identifier:   92:55:CB:E9:B2:EA:3A:CD:EF:47:F4:10:70:9C:69:10:59:73:FC:BC
Certificate issuer:       /CN=9A758BF09145BEC830A7EE000666C15B37354654
Certificate serial:       5102E51658493F03E17602A593EB9631226B16E1
Authority key identifier: 9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/323830363a3331393a3a2f33322d3438203d3e20323730313538.roa
Signing time:             Tue 19 May 2026 19:43:12 +0000
ROA not before:           Tue 19 May 2026 19:38:12 +0000
ROA not after:            Tue 18 May 2027 19:43:12 +0000
asID:                     270158
IP address blocks:        2806:319::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Jun 2026 20:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:02:e5:16:58:49:3f:03:e1:76:02:a5:93:eb:96:31:22:6b:16:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A758BF09145BEC830A7EE000666C15B37354654
        Validity
            Not Before: May 19 19:38:12 2026 GMT
            Not After : May 18 19:43:12 2027 GMT
        Subject: CN=9255CBE9B2EA3ACDEF47F410709C69105973FCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:6c:e2:b8:8a:b0:69:6a:d6:e0:fb:21:1c:
                    85:df:dd:5f:16:0b:34:e3:2b:78:7a:24:fe:bd:0b:
                    22:97:db:06:85:eb:da:59:08:d9:45:39:30:7d:19:
                    f7:e2:56:9d:c1:7a:1d:eb:a3:89:24:37:1c:16:c5:
                    ed:fd:43:85:c9:64:96:f7:e7:59:ab:cb:a7:13:29:
                    37:3a:2b:e6:f7:a4:53:56:99:d3:50:44:29:e4:f0:
                    3a:d5:1f:7d:aa:69:d2:e1:cc:f3:90:61:9c:71:f6:
                    96:e2:1c:4b:aa:56:86:b0:70:bb:ec:0f:fc:3d:75:
                    d7:69:f1:d7:40:dd:a5:0d:eb:e8:38:be:3f:df:2d:
                    32:48:cd:b5:28:c3:3f:a6:e2:d1:b5:a5:c3:30:0c:
                    03:59:f5:eb:e1:7c:2b:39:79:c4:a0:73:75:1d:8a:
                    9c:49:2e:fc:dd:e5:bd:68:da:ff:df:cd:34:b0:f3:
                    5d:dc:3b:c2:d4:06:b9:d8:f9:d6:14:26:a1:6c:23:
                    bd:ed:ac:34:9b:6c:7d:84:93:b7:73:e1:c0:3f:c5:
                    df:12:3d:7f:e8:bf:22:b4:78:4e:70:37:c7:ac:28:
                    21:07:05:6d:f5:0a:c1:85:f6:da:24:12:3b:49:7e:
                    92:df:32:95:e0:c2:1c:09:91:79:38:23:d0:cc:60:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:55:CB:E9:B2:EA:3A:CD:EF:47:F4:10:70:9C:69:10:59:73:FC:BC
            X509v3 Authority Key Identifier:
                keyid:9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/323830363a3331393a3a2f33322d3438203d3e20323730313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:319::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:1f:33:f4:de:2a:22:50:0c:80:b3:c8:e3:dd:33:35:bf:
         f4:6a:f1:a6:3b:3f:ea:1a:7f:4c:16:76:f9:4b:2c:8a:3c:82:
         d2:0d:4e:18:1d:10:74:98:fa:7d:ef:fc:28:15:e6:d6:f2:38:
         f8:d5:7e:dc:52:0e:1b:8e:e9:23:e0:30:53:8f:ff:5e:8a:c2:
         9b:18:91:69:c6:7f:6a:b1:ea:30:c6:e6:62:b1:25:d1:e9:4b:
         52:c8:94:a3:78:92:69:bb:e5:4b:a8:89:d1:11:3b:82:b1:3b:
         77:3f:22:4f:cd:0c:e3:82:77:68:29:8a:1d:31:aa:5d:28:3f:
         5c:06:4b:95:cc:76:2f:28:7b:44:97:75:15:da:72:07:fc:25:
         55:bc:3e:69:b2:3f:d5:f6:13:3a:4b:20:6b:f4:77:89:db:25:
         34:a9:8d:7a:32:1d:c1:40:25:ed:6c:4f:6b:de:8d:93:24:44:
         ce:27:81:89:aa:55:c9:27:c1:25:aa:74:b9:8e:b3:b3:be:c7:
         2b:01:38:b2:4a:41:9c:03:c6:19:5c:c0:48:af:1b:51:1c:0a:
         02:f1:7c:02:0f:6a:5b:f3:b0:18:3f:8f:1c:b0:a5:39:98:6d:
         a7:db:b8:df:15:6d:34:e0:73:97:a0:eb:b3:df:35:2c:d9:56:
         57:f4:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 00:57:46 2026 by rpki-client