Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a356330303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a356330303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          5E2mdtw2pXe1edV5qI+zesdE9OAQscaQxzny/cvT/GQ=
Subject key identifier:   A3:51:78:5E:93:DA:7A:F9:27:E1:55:62:4C:88:78:AA:15:B8:0E:57
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       08122E3096DB35902583F4AB2617E647CB5E2285
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a356330303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 23 Oct 2025 21:30:04 +0000
ROA not before:           Thu 23 Oct 2025 21:25:04 +0000
ROA not after:            Thu 22 Oct 2026 21:30:04 +0000
asID:                     28451
IP address blocks:        2806:3f9:5c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:12:2e:30:96:db:35:90:25:83:f4:ab:26:17:e6:47:cb:5e:22:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Oct 23 21:25:04 2025 GMT
            Not After : Oct 22 21:30:04 2026 GMT
        Subject: CN=A351785E93DA7AF927E155624C8878AA15B80E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:34:08:d0:04:df:77:f4:a2:21:03:49:70:72:
                    30:d0:ef:b3:4a:01:73:85:e3:e7:20:1a:d3:00:c8:
                    e7:c0:6c:fc:36:44:84:a8:25:36:ce:2d:f1:42:fc:
                    51:83:80:40:7f:d8:4b:83:79:ff:af:04:81:39:22:
                    ae:08:8c:09:aa:15:9c:cd:2b:b7:10:46:ed:75:f4:
                    70:4e:bf:5c:a8:70:8e:c5:22:d8:e0:f4:eb:0a:89:
                    16:5f:9d:6a:08:4f:c9:f7:e2:5a:9e:00:e5:a7:d5:
                    14:73:cf:03:e1:5d:a0:d8:21:6a:a0:7b:8d:d8:db:
                    e7:cd:da:c6:38:3f:bd:9d:fc:e1:ba:08:78:2e:60:
                    9a:64:ad:a6:68:6a:86:5d:7e:ca:77:81:06:60:83:
                    b3:82:fd:3c:c5:2e:a1:19:6c:d9:5d:65:53:0d:a3:
                    4d:7e:fc:9d:61:a6:76:13:82:c7:d4:b2:2e:c1:3b:
                    81:b8:70:1a:7b:c8:c3:a3:6f:ba:c5:3c:ba:88:24:
                    33:cc:77:48:f9:df:dd:c5:bb:d9:cc:53:de:59:0a:
                    33:b1:08:06:59:4f:f8:ca:5b:00:a1:53:b0:7c:4e:
                    8f:f9:2e:2b:62:f0:14:80:30:67:3a:cc:4a:e4:1c:
                    94:28:d1:59:4d:ff:b5:6b:fc:87:6f:85:53:0f:68:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:51:78:5E:93:DA:7A:F9:27:E1:55:62:4C:88:78:AA:15:B8:0E:57
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a356330303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:5c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         0e:c6:bc:b3:1b:b9:b4:86:43:1d:ed:90:9c:a8:82:46:ae:a6:
         52:b9:82:5f:09:9d:8f:c6:80:31:8c:6f:3a:ac:80:f3:1c:24:
         e2:3d:d7:5b:c1:d3:35:91:44:e5:c6:61:13:ee:84:2e:ab:de:
         62:ea:9b:96:12:af:5a:53:5d:fc:cd:6e:0c:ed:71:4e:e1:91:
         ee:be:51:1a:60:50:ab:84:dc:91:d7:3c:16:d4:dc:59:1f:f4:
         8c:f4:1d:f3:74:43:68:86:76:46:14:2e:bd:c4:dd:da:af:8b:
         04:be:48:cb:55:f8:55:a9:27:83:34:b8:63:a1:72:5d:6b:84:
         19:fb:8c:6a:4f:a1:fc:4e:6d:1b:a9:4c:7f:0e:86:58:63:a7:
         ad:ed:24:8f:19:8e:b7:a7:8e:ef:22:f0:93:fa:42:d6:63:20:
         e7:df:50:ac:41:3d:05:ff:e9:43:eb:d5:cd:62:1b:37:4a:f0:
         47:35:13:79:ec:83:05:67:0e:fe:73:42:60:68:b6:e0:e4:01:
         17:00:5b:a9:88:0d:a2:c3:93:d3:8a:f5:af:ee:64:41:a6:4d:
         ab:05:fd:99:a7:d5:b1:f5:08:c2:2c:a3:77:58:29:b7:42:f2:
         9e:eb:7b:99:0b:d6:26:f5:4f:e8:4d:11:a3:d0:29:89:f1:2c:
         46:e9:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:19 2025 by rpki-client