Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58E648B015D44654B7128C027A4B1F70900376AAB0A5BEC4F9ADB6BF81670478/0/323830363a3432653a3a2f33322d3332203d3e20323732343131.roa
File:                     323830363a3432653a3a2f33322d3332203d3e20323732343131.roa (raw, json)
Hash identifier:          +g/BxFyGZ1Jd5wtdK4rWvqrMRyVNkMyYVjbDgTXhY68=
Subject key identifier:   FB:2B:C6:AC:7D:98:2C:02:5D:41:C3:83:18:BA:42:59:78:A3:73:15
Certificate issuer:       /CN=3D116F189BE7FDA6C4A00309539E676D9674F340
Certificate serial:       04BD10F79A0C1A2369B696025F705B489723AB83
Authority key identifier: 3D:11:6F:18:9B:E7:FD:A6:C4:A0:03:09:53:9E:67:6D:96:74:F3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D116F189BE7FDA6C4A00309539E676D9674F340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58E648B015D44654B7128C027A4B1F70900376AAB0A5BEC4F9ADB6BF81670478/0/323830363a3432653a3a2f33322d3332203d3e20323732343131.roa
Signing time:             Tue 21 Apr 2026 23:50:00 +0000
ROA not before:           Tue 21 Apr 2026 23:45:00 +0000
ROA not after:            Tue 20 Apr 2027 23:50:00 +0000
asID:                     272411
IP address blocks:        2806:42e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58E648B015D44654B7128C027A4B1F70900376AAB0A5BEC4F9ADB6BF81670478/0/3D116F189BE7FDA6C4A00309539E676D9674F340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58E648B015D44654B7128C027A4B1F70900376AAB0A5BEC4F9ADB6BF81670478/0/3D116F189BE7FDA6C4A00309539E676D9674F340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D116F189BE7FDA6C4A00309539E676D9674F340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 10:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bd:10:f7:9a:0c:1a:23:69:b6:96:02:5f:70:5b:48:97:23:ab:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D116F189BE7FDA6C4A00309539E676D9674F340
        Validity
            Not Before: Apr 21 23:45:00 2026 GMT
            Not After : Apr 20 23:50:00 2027 GMT
        Subject: CN=FB2BC6AC7D982C025D41C38318BA425978A37315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:35:4c:bc:8d:c8:1c:47:7e:79:8f:09:35:
                    06:1f:d7:a0:c5:a1:a8:55:9b:eb:46:44:c2:0e:07:
                    12:0e:30:63:16:d7:4d:b4:6c:d6:0c:66:a4:ef:d8:
                    b4:b6:57:4f:e6:f7:89:cb:05:9f:40:1f:4c:02:ab:
                    85:a4:a6:1e:36:62:5e:36:c3:16:e4:00:d3:dd:9c:
                    85:50:88:90:d9:27:b2:0c:33:ff:e6:c3:f5:e6:88:
                    f7:bc:e3:9b:72:ba:14:ab:9f:af:15:fe:9b:1d:c2:
                    03:c3:7a:b3:c3:04:ca:22:32:bf:64:8e:1a:a4:47:
                    73:24:88:7b:93:ef:cb:65:8a:30:64:66:7a:9e:57:
                    d7:4e:bf:fe:ba:54:ab:18:aa:a0:aa:f6:57:df:b2:
                    e7:74:b1:f3:bd:3e:ef:59:b3:48:28:80:bb:6c:45:
                    d6:f5:86:9b:4e:13:bf:ce:8d:4f:72:1f:7f:22:52:
                    45:63:2e:da:06:a5:09:20:40:66:63:4b:51:c2:1f:
                    f3:4c:33:55:1a:1a:89:43:e2:e6:f5:08:29:39:c8:
                    5f:c9:8f:2a:ae:4c:9b:fb:e7:a0:11:02:41:49:d6:
                    e6:6b:a2:e5:37:94:97:97:4c:b6:69:a2:c7:2d:b6:
                    2e:90:93:7c:cc:38:21:79:b6:e7:c2:93:a7:0f:8b:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:C6:AC:7D:98:2C:02:5D:41:C3:83:18:BA:42:59:78:A3:73:15
            X509v3 Authority Key Identifier:
                keyid:3D:11:6F:18:9B:E7:FD:A6:C4:A0:03:09:53:9E:67:6D:96:74:F3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58E648B015D44654B7128C027A4B1F70900376AAB0A5BEC4F9ADB6BF81670478/0/3D116F189BE7FDA6C4A00309539E676D9674F340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D116F189BE7FDA6C4A00309539E676D9674F340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58E648B015D44654B7128C027A4B1F70900376AAB0A5BEC4F9ADB6BF81670478/0/323830363a3432653a3a2f33322d3332203d3e20323732343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:42e::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:ad:c5:a0:66:1a:97:4b:2a:6a:92:29:0d:6a:9e:09:0a:
         d4:be:23:95:ea:09:8e:7c:d7:b9:15:3f:6d:0e:73:48:66:77:
         49:2d:6f:22:ae:85:03:88:dd:09:c0:67:b2:cc:e9:c4:99:64:
         c6:3d:d9:51:65:c5:5c:17:f8:50:e2:5c:42:d8:c3:43:01:bb:
         10:6c:6f:7f:96:68:e6:13:f7:5d:28:46:61:9b:d8:fe:51:51:
         b9:2a:35:bf:39:08:a9:3a:73:d4:f1:b5:dc:07:18:8b:be:4a:
         d3:d6:af:a5:0e:cf:cb:3b:37:2e:92:b4:80:ea:83:df:d7:9f:
         9a:e9:a0:24:8c:b7:00:68:1b:bd:be:9f:f0:ea:b0:5c:02:00:
         13:e3:0a:5e:91:7c:f2:91:1a:10:61:cb:ea:08:fd:73:f5:a2:
         21:6f:f1:d5:57:d6:a7:a0:23:d5:2a:6f:07:e3:01:41:61:11:
         36:4f:35:ac:a8:5a:f4:f8:ab:42:77:39:33:7f:52:fb:53:b3:
         c2:37:ad:27:9a:e8:96:2c:98:ec:9e:db:df:17:54:eb:30:65:
         84:03:51:68:c0:4c:a5:dc:3d:fa:2a:1b:37:e8:22:3f:68:b7:
         87:8c:9b:7a:98:07:dc:4f:21:4c:61:dd:fd:1d:5e:2c:2b:44:
         34:95:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:24:43 2026 by rpki-client