Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a366330303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a366330303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          0u9YWsJhfO/mbj/R8oor9lsQkyAdPkmSqNo6S4Yp4vY=
Subject key identifier:   C4:92:A5:2B:79:39:C9:68:1F:B4:FE:75:55:E4:C5:28:3A:5B:9C:F7
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       35DA039B3640BC2ECA81D9827B05E90F2A696D16
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a366330303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 23 Oct 2025 21:30:02 +0000
ROA not before:           Thu 23 Oct 2025 21:25:02 +0000
ROA not after:            Thu 22 Oct 2026 21:30:02 +0000
asID:                     28451
IP address blocks:        2806:3f9:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:da:03:9b:36:40:bc:2e:ca:81:d9:82:7b:05:e9:0f:2a:69:6d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Oct 23 21:25:02 2025 GMT
            Not After : Oct 22 21:30:02 2026 GMT
        Subject: CN=C492A52B7939C9681FB4FE7555E4C5283A5B9CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:43:3c:cf:ea:73:bf:bc:a2:9f:ff:4c:1c:
                    21:e0:12:f5:28:91:fb:1e:34:c6:f0:5e:c0:69:a0:
                    c4:4b:ce:e0:ae:9a:62:bf:24:ea:c1:c8:52:de:27:
                    da:b0:31:31:d6:ad:81:3e:24:49:37:b5:3a:c8:a6:
                    1a:29:bb:b7:3b:c5:b9:94:34:4c:af:5b:19:54:ab:
                    0f:99:c7:f2:bd:a9:02:6d:c5:11:fe:d6:73:29:da:
                    99:0f:00:bc:d4:67:ce:be:43:df:38:32:0e:2d:fa:
                    21:6d:a9:03:91:bb:12:a2:a9:ed:34:10:15:3a:74:
                    14:53:0c:14:9b:59:ee:d0:89:1e:a5:e6:98:57:9a:
                    29:57:bd:60:7b:39:4a:06:18:b6:4f:d3:a2:37:1f:
                    c4:13:b1:13:29:93:da:b8:37:e3:65:26:1f:28:79:
                    56:ba:fd:35:9a:25:f7:02:a8:b1:ed:29:2a:ed:68:
                    26:b7:07:8d:88:9c:02:16:ab:63:f1:56:f7:53:ad:
                    3b:fa:e7:90:fe:03:25:8c:1f:e3:bb:aa:44:f7:ff:
                    a6:5b:03:90:51:38:d2:63:1f:73:48:30:00:14:0a:
                    14:ac:62:4c:24:a9:03:f2:3c:ab:23:44:b5:ef:14:
                    80:44:e7:4c:b7:45:11:3b:3d:99:53:18:6d:be:4d:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:92:A5:2B:79:39:C9:68:1F:B4:FE:75:55:E4:C5:28:3A:5B:9C:F7
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a366330303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:6c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:bb:d4:e4:6d:6b:b6:7a:09:c5:c2:56:9b:52:c4:61:bd:
         08:a6:fe:3c:0c:44:88:09:c7:ac:1f:65:aa:2d:24:1c:09:54:
         5f:9f:a9:67:df:51:ad:16:07:90:6e:6f:cf:31:e8:5e:ba:75:
         fa:39:9f:b7:ee:78:15:c3:e8:f8:8d:83:91:11:74:ea:0a:6e:
         72:7b:80:89:b4:16:ab:0c:c0:3c:ae:fc:95:c8:09:fa:cd:fa:
         30:d6:b5:7f:75:54:28:98:42:37:7a:be:8b:2a:cf:4e:f6:18:
         8c:d3:a0:ef:a3:88:68:11:23:f2:49:64:1b:eb:25:c0:90:a8:
         10:00:a0:4d:a7:a9:81:b8:d6:38:28:75:f6:67:a8:c0:9f:14:
         ec:97:5d:24:93:d0:71:2c:8d:b5:47:2d:84:6d:ed:f6:46:d2:
         ad:b3:70:24:c9:83:0f:e7:59:09:f8:63:74:a1:d6:22:14:ba:
         6f:f1:0f:19:2b:ef:75:ae:04:fb:4a:59:eb:df:ac:a7:dd:45:
         17:f7:bd:60:ec:12:cb:97:e4:e6:aa:40:7e:99:58:13:2b:14:
         55:00:9b:73:f9:07:7b:3c:06:0e:e4:da:03:ab:14:64:0b:39:
         82:c3:d1:da:7b:b1:c2:eb:37:b4:9e:e3:51:46:cb:2f:d6:c8:
         d8:68:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:25 2025 by rpki-client