Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/323830363a3365333a3a2f33322d3332203d3e20323730313532.roa
File:                     323830363a3365333a3a2f33322d3332203d3e20323730313532.roa (raw, json)
Hash identifier:          MoRn5ugkLN25Wy4sX6LhVeNkLpW6THI8pTDLrF8XO0I=
Subject key identifier:   9F:94:22:32:14:D2:A7:8B:CB:C9:AB:22:C8:23:8B:A3:9C:82:30:D8
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       641B199EFA56A9A0FCC6CACE5BB9F8ACCD66840B
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/323830363a3365333a3a2f33322d3332203d3e20323730313532.roa
Signing time:             Tue 06 Oct 2026 00:40:00 +0000
ROA not before:           Tue 06 Oct 2026 00:35:00 +0000
ROA not after:            Tue 05 Oct 2027 00:40:00 +0000
asID:                     270152
IP address blocks:        2806:3e3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 16:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1b:19:9e:fa:56:a9:a0:fc:c6:ca:ce:5b:b9:f8:ac:cd:66:84:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Oct  6 00:35:00 2026 GMT
            Not After : Oct  5 00:40:00 2027 GMT
        Subject: CN=9F94223214D2A78BCBC9AB22C8238BA39C8230D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:95:ae:ba:19:68:ac:37:12:90:7a:7c:a4:
                    ae:ba:69:0e:2c:10:b1:27:92:b5:cf:2d:fa:b6:cf:
                    a3:1e:28:5b:b8:3d:eb:b6:fa:db:4b:5c:61:97:5c:
                    b9:86:77:c4:49:d1:4c:f1:53:44:f8:66:15:a9:a4:
                    ef:8f:b8:01:0f:71:c1:58:ba:a6:3c:2c:fa:7d:c5:
                    7e:c1:43:9b:b9:70:d3:02:12:25:27:9e:a9:c6:cf:
                    70:fb:d7:14:18:a5:c7:8a:43:c2:48:be:86:6b:ad:
                    1e:73:a2:0c:23:a1:55:48:55:c6:fb:c7:d5:ea:a4:
                    c3:f4:22:b0:c3:ce:ea:e2:a8:33:d6:2e:00:1a:38:
                    cf:4a:96:a2:a6:80:32:f4:63:2b:25:0e:ca:89:12:
                    9c:e5:e3:6d:a8:e3:0f:51:22:81:71:af:15:e2:91:
                    78:16:72:22:ba:10:26:20:69:83:58:33:b8:57:23:
                    12:fd:a2:3e:53:51:7b:c0:62:c1:8b:b2:4c:f9:50:
                    52:a3:7a:64:ed:bd:89:46:19:49:48:bc:7f:7d:90:
                    e4:41:26:67:aa:2e:bd:57:82:d2:b9:de:8e:d9:63:
                    bf:66:ae:e2:7c:57:30:32:ec:45:0c:ea:31:dd:f2:
                    8d:de:3b:9a:51:07:b8:c6:85:71:2c:9f:c6:b6:6c:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:94:22:32:14:D2:A7:8B:CB:C9:AB:22:C8:23:8B:A3:9C:82:30:D8
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/323830363a3365333a3a2f33322d3332203d3e20323730313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e3::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:97:56:74:89:1a:92:63:43:28:eb:c6:7a:c2:c3:5d:11:38:
         d1:03:7a:32:42:16:aa:4c:38:8b:45:8c:bf:f8:f5:a0:56:bf:
         c7:65:2f:9a:62:de:1e:88:b6:b0:99:c6:e0:b0:e8:73:76:4b:
         2e:e6:d5:6f:e0:19:03:0d:84:03:90:b9:e0:d4:eb:02:f2:43:
         d3:ee:51:c4:d6:b0:90:ef:e4:9d:0e:e5:76:58:3a:c9:5b:6f:
         58:5a:7a:6a:9c:8b:0c:77:95:47:4e:2e:87:41:09:90:91:9d:
         5e:ef:22:36:d9:ca:01:2a:b8:11:99:ef:48:a6:12:47:a4:a6:
         62:4e:28:76:c4:fe:04:9e:e0:0a:67:91:91:76:41:63:df:50:
         a1:34:57:70:b0:7f:2f:ae:45:03:fa:41:2b:57:0a:ce:e8:12:
         8f:1c:8f:e5:24:97:6f:9f:ba:84:4f:da:f7:c4:ae:24:95:fe:
         ec:4b:a7:8b:14:ca:f9:33:24:01:84:e5:86:a8:42:0c:22:a3:
         da:52:e2:2b:43:4d:f0:32:4b:13:09:64:2b:31:8f:13:24:64:
         ae:f1:10:4b:2c:4d:05:8e:cd:9f:e9:18:3c:3c:31:67:d1:51:
         fd:4e:1f:7c:05:5b:96:c7:c1:5f:b4:69:93:2e:39:32:b2:b8:
         10:d7:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:45 2026 by rpki-client