Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8D5BFC86407985B53E90CAD79711BD7EA3C8DE90C86725DB18DB42B581AC26D2/0/323830363a3437653a3a2f33322d3438203d3e20323734343531.roa
File:                     323830363a3437653a3a2f33322d3438203d3e20323734343531.roa (raw, json)
Hash identifier:          8oe6KTUJS11GZI612EbJYRMvgkhDbJQrF1EgvDvkkDY=
Subject key identifier:   3C:FF:B1:1B:1C:44:5B:56:C5:AF:7A:24:57:4B:97:8B:FC:B7:58:41
Certificate issuer:       /CN=E75FA7C281202A59790068E2F18351B9EBAAA1F4
Certificate serial:       15E762C28985B31DD37978A6CCCC83AFA22B40ED
Authority key identifier: E7:5F:A7:C2:81:20:2A:59:79:00:68:E2:F1:83:51:B9:EB:AA:A1:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E75FA7C281202A59790068E2F18351B9EBAAA1F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5BFC86407985B53E90CAD79711BD7EA3C8DE90C86725DB18DB42B581AC26D2/0/323830363a3437653a3a2f33322d3438203d3e20323734343531.roa
Signing time:             Wed 09 Sep 2026 20:20:00 +0000
ROA not before:           Wed 09 Sep 2026 20:15:00 +0000
ROA not after:            Wed 08 Sep 2027 20:20:00 +0000
asID:                     274451
IP address blocks:        2806:47e::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5BFC86407985B53E90CAD79711BD7EA3C8DE90C86725DB18DB42B581AC26D2/0/E75FA7C281202A59790068E2F18351B9EBAAA1F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5BFC86407985B53E90CAD79711BD7EA3C8DE90C86725DB18DB42B581AC26D2/0/E75FA7C281202A59790068E2F18351B9EBAAA1F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E75FA7C281202A59790068E2F18351B9EBAAA1F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e7:62:c2:89:85:b3:1d:d3:79:78:a6:cc:cc:83:af:a2:2b:40:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E75FA7C281202A59790068E2F18351B9EBAAA1F4
        Validity
            Not Before: Sep  9 20:15:00 2026 GMT
            Not After : Sep  8 20:20:00 2027 GMT
        Subject: CN=3CFFB11B1C445B56C5AF7A24574B978BFCB75841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:3d:98:a5:bd:78:33:ab:26:2f:ff:95:d9:
                    71:5e:5b:aa:91:40:26:ee:71:7f:07:9f:b9:10:ce:
                    fd:e1:3d:32:1b:48:fe:2d:be:f3:b7:7c:6c:ff:49:
                    d3:89:c8:ba:6e:11:97:22:f9:a1:9d:82:8d:94:7a:
                    e9:1e:3b:cc:de:a3:12:3e:95:0f:e9:33:cf:a5:54:
                    5d:47:bb:85:e2:bd:71:bd:dd:26:40:37:63:4b:fb:
                    07:2d:6d:25:bd:79:75:45:69:11:7f:47:31:e7:c9:
                    70:94:6b:56:aa:90:7d:88:bc:fa:e7:d9:59:be:5d:
                    02:1b:07:97:52:85:ff:3e:7d:5e:85:42:31:23:1a:
                    a3:ae:55:f5:cf:c7:fe:33:57:c9:4b:2b:dd:e5:53:
                    ff:c2:ce:e5:17:f9:0f:c9:2a:c9:a1:0e:e3:a4:79:
                    26:d5:db:b0:e2:cb:4c:4c:3d:bf:de:61:a6:47:60:
                    7d:20:32:cb:aa:12:a6:08:28:ba:64:33:91:10:2c:
                    00:b8:74:d4:d3:4b:99:04:e8:68:b6:3f:58:59:f9:
                    27:8f:7a:5e:6e:e7:59:9a:4d:bd:14:f0:e7:ee:1e:
                    97:55:b1:1f:80:1c:5d:aa:2c:82:8e:8a:b7:ba:ab:
                    79:22:c9:80:35:7c:5c:e5:04:81:03:d9:6e:0e:6f:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:B1:1B:1C:44:5B:56:C5:AF:7A:24:57:4B:97:8B:FC:B7:58:41
            X509v3 Authority Key Identifier:
                keyid:E7:5F:A7:C2:81:20:2A:59:79:00:68:E2:F1:83:51:B9:EB:AA:A1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5BFC86407985B53E90CAD79711BD7EA3C8DE90C86725DB18DB42B581AC26D2/0/E75FA7C281202A59790068E2F18351B9EBAAA1F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E75FA7C281202A59790068E2F18351B9EBAAA1F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5BFC86407985B53E90CAD79711BD7EA3C8DE90C86725DB18DB42B581AC26D2/0/323830363a3437653a3a2f33322d3438203d3e20323734343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:47e::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:d4:3c:b8:d5:14:aa:37:dc:81:81:8c:00:fa:40:b5:6b:
         99:7d:e3:3b:b7:59:ab:23:ec:9f:5d:d7:e1:6d:c6:8e:d1:66:
         25:ee:3b:07:57:9b:d7:86:62:f0:45:24:d1:e6:5f:4a:cc:42:
         96:5e:2a:d2:f5:6b:f5:03:bf:27:a6:f2:6d:29:3c:a9:0f:12:
         53:00:ea:10:31:9f:ce:6e:a4:15:d1:57:a5:8c:0d:72:76:8a:
         a8:59:32:f8:7b:ab:59:cb:89:cd:be:d2:af:b5:77:32:43:5c:
         af:05:fb:e5:e5:e2:4b:6b:41:d8:7f:4f:58:7a:d8:f0:39:e3:
         0a:5b:59:c9:93:2a:06:19:35:70:5c:ec:45:d2:73:51:f6:91:
         4d:20:09:21:8d:c0:ad:99:f0:04:9a:5d:07:9b:55:d9:ff:a9:
         b1:01:dd:cc:82:f9:8d:5f:1f:49:ec:e7:b3:f4:11:10:4e:37:
         0d:11:4b:5f:81:b2:67:38:2e:23:21:2c:fe:27:a5:24:d9:64:
         be:8a:56:82:18:1e:a0:9b:1c:08:3d:61:b1:a8:23:e1:bf:c4:
         fa:8c:ea:e4:e0:1e:a0:5d:08:e6:c8:94:67:9b:28:9f:14:88:
         ae:50:af:6a:96:ae:3e:6a:1f:50:b7:4c:7a:c9:5a:6b:56:d6:
         c7:8e:ae:97
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUFediwomFsx3TeXimzMyDr6IrQO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc1RkE3QzI4MTIwMkE1OTc5MDA2OEUyRjE4MzUxQjlF
QkFBQTFGNDAeFw0yNjA5MDkyMDE1MDBaFw0yNzA5MDgyMDIwMDBaMDMxMTAvBgNV
BAMTKDNDRkZCMTFCMUM0NDVCNTZDNUFGN0EyNDU3NEI5NzhCRkNCNzU4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnj2Ypb14M6smL/+V2XFeW6qR
QCbucX8Hn7kQzv3hPTIbSP4tvvO3fGz/SdOJyLpuEZci+aGdgo2UeukeO8zeoxI+
lQ/pM8+lVF1Hu4XivXG93SZAN2NL+wctbSW9eXVFaRF/RzHnyXCUa1aqkH2IvPrn
2Vm+XQIbB5dShf8+fV6FQjEjGqOuVfXPx/4zV8lLK93lU//CzuUX+Q/JKsmhDuOk
eSbV27Diy0xMPb/eYaZHYH0gMsuqEqYIKLpkM5EQLAC4dNTTS5kE6Gi2P1hZ+SeP
el5u51maTb0U8OfuHpdVsR+AHF2qLIKOire6q3kiyYA1fFzlBIED2W4Ob3EHAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUPP+xGxxEW1bFr3okV0uXi/y3WEEwHwYDVR0j
BBgwFoAU51+nwoEgKll5AGji8YNRueuqofQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RDVCRkM4NjQwNzk4NUI1M0U5MENBRDc5NzExQkQ3RUEz
QzhERTkwQzg2NzI1REIxOERCNDJCNTgxQUMyNkQyLzAvRTc1RkE3QzI4MTIwMkE1
OTc5MDA2OEUyRjE4MzUxQjlFQkFBQTFGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzVGQTdDMjgxMjAyQTU5Nzkw
MDY4RTJGMTgzNTFCOUVCQUFBMUY0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEQ1QkZDODY0MDc5ODVCNTNFOTBDQUQ3OTcxMUJEN0VBM0M4REU5MEM4
NjcyNURCMThEQjQyQjU4MUFDMjZEMi8wLzMyMzgzMDM2M2EzNDM3NjUzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzQzNDM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgR+MA0G
CSqGSIb3DQEBCwUAA4IBAQCPn9Q8uNUUqjfcgYGMAPpAtWuZfeM7t1mrI+yfXdfh
bcaO0WYl7jsHV5vXhmLwRSTR5l9KzEKWXirS9Wv1A78npvJtKTypDxJTAOoQMZ/O
bqQV0VeljA1ydoqoWTL4e6tZy4nNvtKvtXcyQ1yvBfvl5eJLa0HYf09YetjwOeMK
W1nJkyoGGTVwXOxF0nNR9pFNIAkhjcCtmfAEml0Hm1XZ/6mxAd3MgvmNXx9J7Oez
9BEQTjcNEUtfgbJnOC4jISz+J6Uk2WS+ilaCGB6gmxwIPWGxqCPhv8T6jOrk4B6g
XQjmyJRnmyifFIiuUK9qlq4+ah9Qt0x6yVprVtbHjq6X
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:57 2026 by rpki-client