Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a353030303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a353030303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          0kNlaTRXV3dBe+56b2bFnHcLxuj26MRwOaJBAA2TKwk=
Subject key identifier:   63:C4:4F:B0:E2:A7:69:74:5B:EA:48:75:D2:3C:86:61:2A:BD:F7:15
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       76E22F8D7A62BFA44F86C65664F7D9AFA3BDD03B
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a353030303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 23 Oct 2025 21:30:01 +0000
ROA not before:           Thu 23 Oct 2025 21:25:01 +0000
ROA not after:            Thu 22 Oct 2026 21:30:01 +0000
asID:                     28451
IP address blocks:        2806:3f9:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e2:2f:8d:7a:62:bf:a4:4f:86:c6:56:64:f7:d9:af:a3:bd:d0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Oct 23 21:25:01 2025 GMT
            Not After : Oct 22 21:30:01 2026 GMT
        Subject: CN=63C44FB0E2A769745BEA4875D23C86612ABDF715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:f8:b2:1b:0e:b5:28:fd:c0:12:c8:94:88:
                    8c:1c:bc:14:2e:0d:18:d1:03:de:8d:d0:98:5c:3e:
                    01:07:db:d2:74:50:de:36:0a:77:1c:ac:7c:3c:c3:
                    a3:76:03:60:c0:5b:37:53:a1:eb:09:e6:11:f0:c4:
                    fe:47:7b:8a:4e:c3:d6:96:b4:81:08:11:14:17:e8:
                    19:bd:83:1b:66:0b:32:b0:f4:c3:97:96:20:f9:96:
                    0b:93:91:6c:72:79:53:33:9d:65:93:70:12:a4:cd:
                    10:14:c1:25:a9:6c:39:17:71:97:b6:78:6d:03:93:
                    14:be:14:14:8c:93:20:30:a9:91:37:d7:90:b3:c6:
                    e3:19:23:60:b2:17:ef:c9:a4:30:7d:ad:c9:ea:b1:
                    37:e5:bb:ab:80:57:de:7b:cf:c4:58:b6:50:63:0c:
                    05:51:cf:4d:b8:43:13:cf:c4:a3:bb:7f:79:d9:63:
                    6b:b2:14:97:23:1f:c8:b3:da:c7:49:8b:75:8a:b4:
                    e8:be:7b:f9:4f:8a:98:92:7c:22:00:dd:83:40:f7:
                    d8:5e:d2:71:10:b5:07:1d:16:a8:12:b9:47:74:ba:
                    56:f6:0e:bc:1a:f8:ab:4f:d2:6e:11:89:7a:2c:66:
                    7f:c9:54:ad:87:2f:e4:15:33:ed:3d:3c:ee:61:ba:
                    20:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C4:4F:B0:E2:A7:69:74:5B:EA:48:75:D2:3C:86:61:2A:BD:F7:15
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a353030303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:5000::/38

    Signature Algorithm: sha256WithRSAEncryption
         87:e7:15:88:da:b3:d9:1e:13:6e:a0:5c:4c:4b:22:0f:b0:82:
         ca:05:0a:d7:e9:4b:d7:63:a4:69:84:de:a5:3d:bf:19:4b:05:
         a1:5d:89:30:91:30:28:d1:e6:91:ed:4c:63:41:c5:7a:d1:33:
         1d:85:66:42:f0:aa:81:8d:af:63:d9:82:4a:14:2c:38:d7:ff:
         cc:46:b7:9c:b7:6e:26:68:61:c1:a5:58:b7:1d:f7:8e:c7:3c:
         ac:95:0d:f2:4a:74:6f:b4:b2:a8:0f:b3:58:6f:3c:ff:78:4a:
         fd:a6:b8:fc:1b:d8:f7:97:65:a5:8d:a0:99:eb:ae:f3:d5:89:
         76:dc:c6:53:27:13:7c:2a:80:61:9b:e1:69:34:c9:fd:45:6e:
         77:ad:3a:dc:02:8c:c0:e3:b7:4b:c2:bb:9f:1e:91:e4:4e:4c:
         bc:3c:2c:e8:93:37:17:88:8b:d5:fc:eb:0b:b0:6a:96:e2:89:
         37:3d:7b:8f:e6:c1:69:98:c3:2b:e4:0e:b3:a3:6c:08:11:85:
         96:d3:97:35:46:89:15:55:e2:a7:23:01:84:19:e7:24:ff:08:
         8f:ff:ca:9f:84:83:29:f2:aa:a1:52:55:23:5d:70:24:99:e7:
         9e:70:66:f1:ba:31:08:b8:bb:a1:21:46:2c:10:02:e5:74:11:
         3c:18:c2:5a
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUduIvjXpiv6RPhsZWZPfZr6O90DswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4QUMwNjcwNjUwNjhFMDlDQjY1MUMzNDY3OTVFOEMw
NzUzRDNEQjAeFw0yNTEwMjMyMTI1MDFaFw0yNjEwMjIyMTMwMDFaMDMxMTAvBgNV
BAMTKDYzQzQ0RkIwRTJBNzY5NzQ1QkVBNDg3NUQyM0M4NjYxMkFCREY3MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Y/iyGw61KP3AEsiUiIwcvBQu
DRjRA96N0JhcPgEH29J0UN42CnccrHw8w6N2A2DAWzdToesJ5hHwxP5He4pOw9aW
tIEIERQX6Bm9gxtmCzKw9MOXliD5lguTkWxyeVMznWWTcBKkzRAUwSWpbDkXcZe2
eG0DkxS+FBSMkyAwqZE315CzxuMZI2CyF+/JpDB9rcnqsTflu6uAV957z8RYtlBj
DAVRz024QxPPxKO7f3nZY2uyFJcjH8iz2sdJi3WKtOi+e/lPipiSfCIA3YNA99he
0nEQtQcdFqgSuUd0ulb2Drwa+KtP0m4RiXosZn/JVK2HL+QVM+09PO5huiDJAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUY8RPsOKnaXRb6kh10jyGYSq99xUwHwYDVR0j
BBgwFoAU/4rAZwZQaOCctlHDRnlejAdT09swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjAwNkZBREMyNDc2RTQ1MDkxRjM3N0NFNzEyMTM4RkZB
RjZCMUFBNzhDQjY4ODIxNUNFN0I0QTZCQjg0M0FFLzAvRkY4QUMwNjcwNjUwNjhF
MDlDQjY1MUMzNDY3OTVFOEMwNzUzRDNEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjhBQzA2NzA2NTA2OEUwOUNC
NjUxQzM0Njc5NUU4QzA3NTNEM0RCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYwMDZGQURDMjQ3NkU0NTA5MUYzNzdDRTcxMjEzOEZGQUY2QjFBQTc4
Q0I2ODgyMTVDRTdCNEE2QkI4NDNBRS8wLzMyMzgzMDM2M2EzMzY2MzkzYTM1MzAz
MDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzODM0MzUzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
AigGA/lQMA0GCSqGSIb3DQEBCwUAA4IBAQCH5xWI2rPZHhNuoFxMSyIPsILKBQrX
6UvXY6RphN6lPb8ZSwWhXYkwkTAo0eaR7UxjQcV60TMdhWZC8KqBja9j2YJKFCw4
1//MRrect24maGHBpVi3HfeOxzyslQ3ySnRvtLKoD7NYbzz/eEr9prj8G9j3l2Wl
jaCZ667z1Yl23MZTJxN8KoBhm+FpNMn9RW53rTrcAozA47dLwrufHpHkTky8PCzo
kzcXiIvV/OsLsGqW4ok3PXuP5sFpmMMr5A6zo2wIEYWW05c1RokVVeKnIwGEGeck
/wiP/8qfhIMp8qqhUlUjXXAkmeeecGbxujEIuLuhIUYsEALldBE8GMJa
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:22 2025 by rpki-client