Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/323830363a3434303a3a2f33322d3332203d3e20323733323635.roa
File:                     323830363a3434303a3a2f33322d3332203d3e20323733323635.roa (raw, json)
Hash identifier:          8DeJ46yxKzA/iNiOmO6x9cGcQ47ja2JZpD8oDufAzBE=
Subject key identifier:   1B:5B:A1:75:94:0B:7E:EA:F0:30:45:88:70:E0:B9:BB:0A:43:F0:E8
Certificate issuer:       /CN=416CF0331286750C025F14783F3BED3EB3227568
Certificate serial:       6B0896DE6BE4AC31393CA841F9039C583FC47011
Authority key identifier: 41:6C:F0:33:12:86:75:0C:02:5F:14:78:3F:3B:ED:3E:B3:22:75:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/416CF0331286750C025F14783F3BED3EB3227568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/323830363a3434303a3a2f33322d3332203d3e20323733323635.roa
Signing time:             Mon 09 Mar 2026 04:33:18 +0000
ROA not before:           Mon 09 Mar 2026 04:28:18 +0000
ROA not after:            Mon 08 Mar 2027 04:33:18 +0000
asID:                     273265
IP address blocks:        2806:440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/416CF0331286750C025F14783F3BED3EB3227568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/416CF0331286750C025F14783F3BED3EB3227568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/416CF0331286750C025F14783F3BED3EB3227568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:08:96:de:6b:e4:ac:31:39:3c:a8:41:f9:03:9c:58:3f:c4:70:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416CF0331286750C025F14783F3BED3EB3227568
        Validity
            Not Before: Mar  9 04:28:18 2026 GMT
            Not After : Mar  8 04:33:18 2027 GMT
        Subject: CN=1B5BA175940B7EEAF030458870E0B9BB0A43F0E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:1d:8f:3b:9d:4c:68:f9:28:5a:2b:64:22:
                    ba:13:9b:e4:a2:5a:01:23:26:1a:36:c5:b1:f7:7d:
                    ea:b0:4d:4a:dc:db:13:64:96:c6:4c:3c:c9:e6:2c:
                    1a:d8:53:83:f6:94:e2:07:ef:50:d3:3e:88:c4:34:
                    bd:38:f2:1c:fa:0f:1e:74:41:b2:8a:00:94:39:f0:
                    60:1d:ab:08:4d:97:6c:30:ef:6e:82:65:65:1c:b6:
                    d4:c1:6c:fd:1b:6d:95:2a:7c:d4:eb:06:61:72:68:
                    cc:61:b0:4d:29:88:56:56:f2:01:34:68:5c:03:bb:
                    04:85:e9:76:b0:1e:da:d2:92:7b:0f:96:2f:b2:4b:
                    33:5f:a2:d1:e0:fa:43:c2:06:7f:2c:48:ca:f0:a4:
                    6d:e3:b9:37:46:87:de:90:08:94:03:82:d5:54:04:
                    89:f1:e1:c7:b4:ce:50:c6:1e:56:65:28:7a:bd:eb:
                    82:d3:16:2a:39:44:26:fe:af:2c:04:87:7a:5f:f9:
                    78:3b:77:49:3a:10:68:36:1f:75:dd:71:d8:40:f3:
                    05:ca:bf:e6:8e:ee:9e:03:20:92:22:e4:fd:d6:b5:
                    84:67:e8:a0:bc:ae:92:60:85:9f:e5:01:15:91:b0:
                    a4:cb:18:10:fb:3a:e5:1c:74:36:bd:24:33:b2:0f:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:A1:75:94:0B:7E:EA:F0:30:45:88:70:E0:B9:BB:0A:43:F0:E8
            X509v3 Authority Key Identifier:
                keyid:41:6C:F0:33:12:86:75:0C:02:5F:14:78:3F:3B:ED:3E:B3:22:75:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/416CF0331286750C025F14783F3BED3EB3227568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/416CF0331286750C025F14783F3BED3EB3227568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F8218B9DCFFA923E761BBFFA58CC9A0BEA89743C335753DA2FDCA8FC1FC3913/0/323830363a3434303a3a2f33322d3332203d3e20323733323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:a1:27:26:1b:63:f6:4c:e5:1d:3a:0d:26:ba:da:e7:db:
         2f:dc:ce:05:4b:46:07:a0:e5:cd:77:6d:1e:5a:01:4d:50:b5:
         de:2f:d2:4c:e7:62:a0:bf:e8:5f:8d:32:51:7a:7c:3d:cf:b6:
         10:b7:25:e4:39:cf:c4:97:10:51:aa:2d:af:bd:6a:0f:d9:da:
         f6:79:8d:c7:5c:0d:ef:8b:cd:21:18:90:ed:b4:c1:35:0e:f1:
         d6:53:e1:98:18:ef:b6:61:00:c0:6d:9f:4e:42:c8:a1:30:7b:
         b3:dc:21:00:79:64:74:6d:8b:36:83:57:8a:fc:8c:85:69:07:
         6a:3f:48:8b:60:75:a7:af:68:6f:ec:16:7c:36:e5:26:4a:a7:
         1c:32:e7:67:58:8d:c4:21:37:b5:cf:a0:72:13:e1:12:32:61:
         0a:c1:a6:f1:32:a1:d5:eb:a8:b1:fd:db:2d:49:dd:79:33:fb:
         58:18:cd:9c:13:dd:59:cf:a2:2c:56:eb:76:76:50:9c:4b:0a:
         ae:e7:c2:60:79:da:70:3a:b1:49:79:65:68:f2:fa:5d:d4:98:
         9c:d4:5c:e3:d4:53:e0:1c:f5:7f:f6:1e:cd:cc:f5:77:34:e0:
         33:96:71:c3:62:b7:8b:df:7e:f2:b2:36:77:c5:9c:b2:c1:c8:
         54:9b:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:21:25 2026 by rpki-client