Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a363030303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a363030303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          14xvT1JkpvKO0YHn/DMw3RqJ1RHnSZhkwebLK8T/6Ds=
Subject key identifier:   79:97:26:65:B9:E3:F1:0F:57:A6:85:30:8E:DC:E1:94:C4:EA:ED:47
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       6925EA63E65B782F0CD1D514B51D2430C62D5A99
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a363030303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 23 Oct 2025 21:30:01 +0000
ROA not before:           Thu 23 Oct 2025 21:25:01 +0000
ROA not after:            Thu 22 Oct 2026 21:30:01 +0000
asID:                     28451
IP address blocks:        2806:3f9:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:25:ea:63:e6:5b:78:2f:0c:d1:d5:14:b5:1d:24:30:c6:2d:5a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Oct 23 21:25:01 2025 GMT
            Not After : Oct 22 21:30:01 2026 GMT
        Subject: CN=79972665B9E3F10F57A685308EDCE194C4EAED47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:3b:5f:98:c6:53:b7:6b:79:46:27:07:29:
                    2d:e7:63:1b:7c:36:2c:37:08:b1:4b:ed:4b:f6:5e:
                    cc:5b:19:f7:02:c7:f5:80:e3:af:f4:c6:31:8f:1c:
                    68:e2:04:a2:e2:db:00:8e:c1:2c:8c:13:4c:75:c0:
                    ae:51:97:a0:1f:74:b7:78:30:f1:ee:a0:c3:53:37:
                    56:ab:1d:36:7b:bd:b0:47:06:cc:94:92:41:a7:0f:
                    fb:d1:7b:d9:3c:b7:85:7e:6e:2f:5c:34:8e:a6:3c:
                    5d:fd:fa:e5:c7:84:56:6f:c6:93:17:40:ee:e6:e2:
                    8f:02:69:b0:8d:83:d8:57:55:4e:4e:fa:4f:c2:72:
                    aa:f8:cb:0d:d9:b1:19:88:b0:8e:a4:92:73:b5:aa:
                    0c:13:57:f6:d3:22:42:64:2c:b5:e3:18:32:e9:cc:
                    60:a0:c5:ad:cf:f8:18:dc:b6:45:1c:46:5b:55:e4:
                    b1:3a:03:35:fe:e3:f6:6f:d0:8c:dd:52:d1:8f:9b:
                    fe:d6:32:50:91:ba:e9:82:78:47:a5:f4:45:8c:06:
                    3e:8f:45:b8:38:2a:63:22:a2:21:26:34:a6:92:48:
                    aa:46:b9:5a:0b:e8:03:9a:9f:17:01:3e:49:f1:0f:
                    82:0e:8e:3b:ac:c3:41:62:94:4b:7f:54:84:97:8e:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:97:26:65:B9:E3:F1:0F:57:A6:85:30:8E:DC:E1:94:C4:EA:ED:47
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a363030303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:6000::/38

    Signature Algorithm: sha256WithRSAEncryption
         08:97:a6:f1:ae:23:f5:d5:f3:ac:71:f5:a0:66:e9:03:2c:40:
         17:1b:07:a3:77:61:db:c7:58:03:af:6e:e4:52:59:e4:dd:fb:
         ea:86:68:af:b1:6d:90:0c:81:73:cc:cc:84:af:37:97:d3:79:
         fc:11:1e:b4:7c:31:49:ed:7f:33:bd:0b:8d:74:e2:d6:0f:96:
         b6:98:70:9f:53:a4:0d:39:f5:c0:bf:5f:40:58:df:d3:43:60:
         2a:1b:68:20:91:d6:23:24:84:f4:4c:5d:2f:cd:61:79:1e:b6:
         66:12:45:27:37:e6:62:94:f5:da:c2:ac:4e:fa:90:d9:14:e9:
         ec:e4:4f:8b:a6:a4:10:cf:ba:05:88:02:d5:73:95:6b:01:6c:
         ca:c4:f2:2b:03:6e:4f:d9:ae:44:6f:a1:1c:b3:7b:ed:3b:ef:
         df:e4:6f:06:77:e1:c6:4c:ad:5e:df:74:ea:88:ba:ef:f1:1e:
         be:c5:70:e6:1c:77:c9:80:60:a2:3e:f1:b0:92:cb:ea:f6:2b:
         e3:a1:ae:a7:8c:9c:72:95:24:ac:13:ba:94:a2:12:52:da:1a:
         96:fb:5d:4c:68:d1:8e:0b:c1:9a:73:7e:b5:0c:97:20:62:90:
         05:1a:43:e7:36:61:b0:bd:52:57:65:28:1d:96:8d:13:25:20:
         21:71:89:30
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUaSXqY+ZbeC8M0dUUtR0kMMYtWpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4QUMwNjcwNjUwNjhFMDlDQjY1MUMzNDY3OTVFOEMw
NzUzRDNEQjAeFw0yNTEwMjMyMTI1MDFaFw0yNjEwMjIyMTMwMDFaMDMxMTAvBgNV
BAMTKDc5OTcyNjY1QjlFM0YxMEY1N0E2ODUzMDhFRENFMTk0QzRFQUVENDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeDtfmMZTt2t5RicHKS3nYxt8
Niw3CLFL7Uv2XsxbGfcCx/WA46/0xjGPHGjiBKLi2wCOwSyME0x1wK5Rl6AfdLd4
MPHuoMNTN1arHTZ7vbBHBsyUkkGnD/vRe9k8t4V+bi9cNI6mPF39+uXHhFZvxpMX
QO7m4o8CabCNg9hXVU5O+k/Ccqr4yw3ZsRmIsI6kknO1qgwTV/bTIkJkLLXjGDLp
zGCgxa3P+BjctkUcRltV5LE6AzX+4/Zv0IzdUtGPm/7WMlCRuumCeEel9EWMBj6P
Rbg4KmMioiEmNKaSSKpGuVoL6AOanxcBPknxD4IOjjusw0FilEt/VISXjvvDAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUeZcmZbnj8Q9XpoUwjtzhlMTq7UcwHwYDVR0j
BBgwFoAU/4rAZwZQaOCctlHDRnlejAdT09swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjAwNkZBREMyNDc2RTQ1MDkxRjM3N0NFNzEyMTM4RkZB
RjZCMUFBNzhDQjY4ODIxNUNFN0I0QTZCQjg0M0FFLzAvRkY4QUMwNjcwNjUwNjhF
MDlDQjY1MUMzNDY3OTVFOEMwNzUzRDNEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjhBQzA2NzA2NTA2OEUwOUNC
NjUxQzM0Njc5NUU4QzA3NTNEM0RCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYwMDZGQURDMjQ3NkU0NTA5MUYzNzdDRTcxMjEzOEZGQUY2QjFBQTc4
Q0I2ODgyMTVDRTdCNEE2QkI4NDNBRS8wLzMyMzgzMDM2M2EzMzY2MzkzYTM2MzAz
MDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzODM0MzUzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
AigGA/lgMA0GCSqGSIb3DQEBCwUAA4IBAQAIl6bxriP11fOscfWgZukDLEAXGwej
d2Hbx1gDr27kUlnk3fvqhmivsW2QDIFzzMyErzeX03n8ER60fDFJ7X8zvQuNdOLW
D5a2mHCfU6QNOfXAv19AWN/TQ2AqG2ggkdYjJIT0TF0vzWF5HrZmEkUnN+ZilPXa
wqxO+pDZFOns5E+LpqQQz7oFiALVc5VrAWzKxPIrA25P2a5Eb6Ecs3vtO+/f5G8G
d+HGTK1e33TqiLrv8R6+xXDmHHfJgGCiPvGwksvq9ivjoa6njJxylSSsE7qUohJS
2hqW+11MaNGOC8Gac361DJcgYpAFGkPnNmGwvVJXZSgdlo0TJSAhcYkw
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:25 2025 by rpki-client