Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/323830363a3437303a3a2f33322d3438203d3e20323734343334.roa
File:                     323830363a3437303a3a2f33322d3438203d3e20323734343334.roa (raw, json)
Hash identifier:          7rmVjtkabV0gumRvz8K0U4d8PGvgPu8eb38uPes4Ra0=
Subject key identifier:   FF:1D:3D:6C:3A:B3:A7:62:BB:FF:3E:A1:7C:B7:78:74:37:A2:0E:9B
Certificate issuer:       /CN=C6D368E9496811D7AF0DA4F72F23F82F02294FF6
Certificate serial:       34EDEE7661496AC9817E4036D1C8844C8C344A0E
Authority key identifier: C6:D3:68:E9:49:68:11:D7:AF:0D:A4:F7:2F:23:F8:2F:02:29:4F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/323830363a3437303a3a2f33322d3438203d3e20323734343334.roa
Signing time:             Wed 02 Sep 2026 17:35:00 +0000
ROA not before:           Wed 02 Sep 2026 17:30:00 +0000
ROA not after:            Wed 01 Sep 2027 17:35:00 +0000
asID:                     274434
IP address blocks:        2806:470::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 02:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ed:ee:76:61:49:6a:c9:81:7e:40:36:d1:c8:84:4c:8c:34:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D368E9496811D7AF0DA4F72F23F82F02294FF6
        Validity
            Not Before: Sep  2 17:30:00 2026 GMT
            Not After : Sep  1 17:35:00 2027 GMT
        Subject: CN=FF1D3D6C3AB3A762BBFF3EA17CB7787437A20E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:43:36:c4:78:eb:90:e2:c0:2e:75:c0:c9:
                    89:ed:ee:1a:a5:e1:51:87:1f:89:20:9a:cd:7b:30:
                    f2:68:11:14:6e:18:00:45:7c:c6:d8:1f:de:e9:97:
                    1d:70:44:aa:b0:0f:bf:b4:c1:b5:be:70:33:6e:ab:
                    a3:90:d8:46:93:df:fb:89:1b:0f:05:66:8e:d3:d8:
                    3c:f8:e3:96:b5:67:74:df:c8:09:f8:7f:1b:50:cf:
                    81:40:6f:10:f5:2d:cd:a6:51:88:35:d7:51:40:33:
                    e1:c7:67:c6:83:98:72:37:05:5d:22:df:14:29:37:
                    e5:52:ff:53:53:61:b3:33:70:7c:98:91:86:13:5b:
                    78:53:45:f8:7a:a3:0c:69:20:cc:42:1a:28:7c:36:
                    ab:8a:06:4f:ac:c3:01:1d:6d:5e:7c:23:86:33:13:
                    98:a5:41:fb:04:b2:69:dd:73:fb:4e:bc:e0:fa:1f:
                    56:da:fc:6d:46:87:c0:f1:eb:30:29:64:97:27:65:
                    df:5a:f9:79:2f:26:8b:ae:fa:88:66:9b:7f:7d:72:
                    87:f9:2f:8c:59:87:01:44:a8:73:a0:d2:52:e4:26:
                    57:ee:66:27:26:6f:0c:ea:34:da:a2:46:8f:80:e2:
                    29:a4:c6:00:c4:8f:1d:4e:1e:ac:20:5f:d8:21:77:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1D:3D:6C:3A:B3:A7:62:BB:FF:3E:A1:7C:B7:78:74:37:A2:0E:9B
            X509v3 Authority Key Identifier:
                keyid:C6:D3:68:E9:49:68:11:D7:AF:0D:A4:F7:2F:23:F8:2F:02:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/323830363a3437303a3a2f33322d3438203d3e20323734343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:470::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:4e:39:b3:aa:65:01:1b:12:98:71:2f:45:59:23:3f:ab:
         96:30:f7:26:e1:a0:6e:8c:67:05:2f:4e:81:5f:36:e6:b8:9f:
         86:f6:2a:91:84:80:d2:76:e0:aa:15:ad:d2:a1:35:46:19:10:
         d3:0a:96:e0:f8:c8:eb:b7:25:a4:90:83:89:5e:8c:d8:c3:0e:
         5b:96:d5:fc:46:84:2e:54:af:bc:ed:b7:2b:32:30:be:1b:c0:
         90:ec:47:65:de:74:24:ee:f3:8c:42:39:d1:a3:41:15:13:f6:
         b5:ea:bf:2b:14:b4:e5:81:fb:03:29:40:7c:43:a8:ad:20:75:
         d8:d9:39:97:ef:e8:65:02:4f:d6:66:e7:10:ce:e1:97:1f:bf:
         8b:55:b7:c1:20:8f:e2:ad:b6:57:f2:47:f5:c5:05:c3:97:d7:
         65:ef:8f:34:f7:10:1d:98:37:47:53:bb:5a:6c:36:3e:9c:a7:
         50:dd:3c:4e:ed:cd:8a:7e:81:d9:66:bc:cd:97:8c:f9:be:d7:
         be:e2:5d:77:ce:32:5e:cc:f0:be:67:01:99:d7:aa:62:b5:e7:
         f6:34:29:68:79:f9:b7:1a:ed:24:79:68:48:ad:8c:74:60:5b:
         46:14:37:b5:a7:5f:64:e8:3e:f1:36:0e:ed:a4:34:12:95:cc:
         83:46:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:57:16 2026 by rpki-client