Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a373030303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a373030303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          ks9q6Qi7RC9VhOF0EWhGRco8VtD+DxvP6twMnSQ8Urw=
Subject key identifier:   99:FA:15:39:A9:03:DD:C5:73:89:76:88:BB:A2:EB:05:BF:6E:50:8E
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       21DAE342D3C310AC5B0FBBB12C6FF0331D27D410
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a373030303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 23 Oct 2025 21:30:00 +0000
ROA not before:           Thu 23 Oct 2025 21:25:00 +0000
ROA not after:            Thu 22 Oct 2026 21:30:00 +0000
asID:                     28451
IP address blocks:        2806:3f9:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:da:e3:42:d3:c3:10:ac:5b:0f:bb:b1:2c:6f:f0:33:1d:27:d4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Oct 23 21:25:00 2025 GMT
            Not After : Oct 22 21:30:00 2026 GMT
        Subject: CN=99FA1539A903DDC573897688BBA2EB05BF6E508E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:44:14:3d:16:6c:4d:12:6f:0e:f6:8b:a3:
                    3e:7f:ef:75:44:f7:0e:5f:90:71:65:2b:4e:c0:5c:
                    30:33:27:70:09:65:9f:a5:98:91:7f:99:3f:16:b3:
                    d7:be:0c:0e:e2:e3:e7:37:46:0e:94:ca:67:06:ea:
                    c3:df:2b:f5:3a:b1:dc:cb:19:f8:b4:09:df:ed:fc:
                    16:48:c2:6b:56:30:91:71:cd:ca:78:aa:53:6f:bb:
                    f1:28:45:e2:4a:7d:4f:e6:82:09:51:a9:30:39:59:
                    dd:c8:b8:52:e0:4f:76:50:c7:11:33:ac:de:bf:c4:
                    63:9a:79:69:af:f3:dd:95:ba:01:a0:9e:a9:14:d6:
                    89:8c:a8:3f:b8:45:4d:1f:86:5b:ef:ce:de:e2:6f:
                    64:69:50:ff:1a:82:f6:4a:bb:ce:fb:14:48:49:e3:
                    9c:4a:b4:fc:90:49:ac:d8:21:f8:9f:6b:1e:9d:a7:
                    96:f0:03:c7:16:35:5c:90:2b:c4:3c:75:1c:2a:31:
                    09:e5:c1:ae:b4:9a:40:0f:09:b2:9b:da:fe:68:da:
                    73:2d:d8:40:8f:ae:e8:9b:f0:97:ea:07:a4:16:9f:
                    e2:7c:d0:7a:0a:06:ec:4f:0a:54:8d:1b:20:28:51:
                    9f:df:ac:d3:83:f4:4f:b6:fa:92:ef:95:1c:b1:b6:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:15:39:A9:03:DD:C5:73:89:76:88:BB:A2:EB:05:BF:6E:50:8E
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a373030303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:7000::/38

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:10:ac:99:85:bf:c5:eb:16:db:ac:74:bb:96:ce:79:04:
         95:b5:c1:ac:2f:2c:22:cc:59:c9:05:5f:16:71:6d:d4:f3:0a:
         f2:7a:13:69:a0:30:b7:49:17:cc:8b:61:62:70:4b:fb:e6:cc:
         c3:11:5e:8d:f2:50:4a:1a:b6:c2:3c:5c:d6:1d:1f:66:2b:a7:
         6b:53:f9:41:dd:b8:02:40:7c:89:19:b4:bb:5a:06:bf:ea:3f:
         c5:d4:08:ce:8d:1f:7d:a7:09:2d:f2:70:b1:33:5e:7a:96:4d:
         c2:16:7f:2f:d3:1f:c2:4c:46:9b:af:68:45:d1:0e:ec:05:aa:
         23:bf:9f:c8:d1:64:ca:93:25:90:f7:c1:9e:c7:ce:ef:15:2e:
         15:9a:64:12:05:16:03:11:c9:20:2a:db:96:a8:12:c5:bf:e7:
         db:6c:08:ab:41:51:52:09:27:84:cc:74:55:00:f7:60:5e:81:
         40:b2:bb:8c:ec:a6:be:bb:e3:5b:8c:49:e9:01:83:ab:94:f9:
         2c:b4:43:a8:bc:42:68:eb:4c:ac:50:f5:95:c6:df:0a:78:b6:
         0f:e4:d0:59:73:93:b7:ea:f4:42:73:74:3b:65:28:0d:19:2f:
         eb:84:ca:59:a6:a6:4b:d5:e4:ff:23:59:b5:fa:21:4a:9f:16:
         ea:4f:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:23 2025 by rpki-client