Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a343030303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          cXZ+9s280zh4hr3daA6vhiaeqDkvOyYHOQmugu1Q9BE=
Subject key identifier:   BF:67:24:26:A8:E7:6E:3D:D1:65:5A:11:E2:30:54:93:0F:6A:58:C5
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       1A421AB303F9DD02C40BB2742B9693FAD316F842
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 23 Oct 2025 21:30:04 +0000
ROA not before:           Thu 23 Oct 2025 21:25:04 +0000
ROA not after:            Thu 22 Oct 2026 21:30:04 +0000
asID:                     28451
IP address blocks:        2806:3f9:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:1a:b3:03:f9:dd:02:c4:0b:b2:74:2b:96:93:fa:d3:16:f8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Oct 23 21:25:04 2025 GMT
            Not After : Oct 22 21:30:04 2026 GMT
        Subject: CN=BF672426A8E76E3DD1655A11E23054930F6A58C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:af:df:6e:39:c9:56:5c:11:2e:6e:01:13:
                    0b:2d:09:92:43:81:d5:ad:4a:73:3b:1a:04:b5:c8:
                    ee:39:18:0d:07:e2:a4:d5:ac:6d:e6:a6:1c:02:e2:
                    b1:1f:5c:0a:5e:25:2e:1d:40:70:73:e8:97:e5:2f:
                    65:b4:bd:2f:21:f5:32:9b:4c:bf:ef:77:46:88:5a:
                    20:ca:57:6b:1d:ae:52:59:de:08:ac:3a:6e:70:85:
                    77:a1:f9:3b:a4:06:cd:1e:9b:c7:b3:c5:66:6d:82:
                    a1:14:1f:89:76:05:06:16:56:8a:8f:c9:4a:b8:11:
                    ca:1d:f0:19:1b:39:6a:0f:12:27:10:10:90:fd:1f:
                    df:1d:f1:68:d3:c0:e2:ed:d9:38:c3:2a:ce:58:9a:
                    bb:4e:16:45:1d:97:97:95:c3:ff:05:68:27:66:df:
                    f4:6c:5c:af:5d:39:01:9f:b9:ce:ca:ab:fd:2f:4a:
                    80:36:c1:d1:06:d3:5f:d0:45:41:33:59:51:6b:e0:
                    52:0b:71:62:3c:c3:81:24:d9:42:85:da:a7:ff:c8:
                    d8:b6:44:76:a1:a2:63:98:b0:a3:42:53:f6:b0:ad:
                    8b:6d:7b:cd:4d:28:94:ba:72:57:30:83:a7:79:59:
                    0c:87:34:ec:ab:e1:a1:16:f3:98:da:37:f2:e0:0e:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:67:24:26:A8:E7:6E:3D:D1:65:5A:11:E2:30:54:93:0F:6A:58:C5
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:4000::/38

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:28:50:39:be:e9:79:5c:8d:e1:08:d4:cc:c7:ca:b3:04:
         41:75:2b:17:bb:79:df:c2:83:1c:84:2f:d7:9e:58:d2:23:a9:
         22:83:b3:d0:67:9a:0a:f6:30:53:c4:f9:72:96:47:f2:c5:5d:
         44:34:3e:79:d2:fc:f6:16:5f:6d:90:c1:1b:da:84:de:ed:a6:
         68:4d:3d:42:36:1e:4f:c1:e4:97:74:a3:8d:ae:b5:b1:ec:ec:
         c4:54:12:db:ce:2c:93:ed:23:ee:cd:3e:76:b2:b2:b2:e5:e4:
         94:8d:be:a9:23:66:5c:fb:1b:ef:d2:d1:da:4d:c1:d1:43:fe:
         32:c2:34:69:7c:26:e7:fa:2c:b8:e4:04:dc:bd:49:a7:41:f2:
         f0:ce:82:c8:c3:11:f0:b5:1b:0c:21:ee:a3:41:9e:31:0c:fd:
         c7:56:2a:e6:59:55:cb:95:59:80:ac:7f:a7:61:98:27:54:d9:
         b3:55:61:08:b2:75:f8:c4:3d:0c:a7:47:ff:ca:d8:46:f5:6c:
         01:78:0d:7f:a9:b6:76:78:fd:4a:9a:e4:29:3c:e9:8f:ad:31:
         10:22:5d:96:83:33:19:3d:96:19:e2:8f:e1:2a:c1:ce:b3:81:
         bb:aa:b3:3a:84:dd:8a:e7:ac:01:33:86:f5:6f:85:ef:0e:86:
         31:1b:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:22 2025 by rpki-client