Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a373830303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a373830303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          5u+5JTmoDcPfwbS9L8Y0MdNtu6XfjbZ690li4jZXSq4=
Subject key identifier:   02:4F:2A:D3:C1:BC:D9:24:6E:57:A1:95:5D:4B:0F:A2:BC:EF:91:A6
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       6D30A2CB8FBBA35C51496325D08769E2B88F5641
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a373830303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 24 Sep 2026 21:36:39 +0000
ROA not before:           Thu 24 Sep 2026 21:31:39 +0000
ROA not after:            Thu 23 Sep 2027 21:36:39 +0000
asID:                     28451
IP address blocks:        2806:3f9:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 23:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:30:a2:cb:8f:bb:a3:5c:51:49:63:25:d0:87:69:e2:b8:8f:56:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Sep 24 21:31:39 2026 GMT
            Not After : Sep 23 21:36:39 2027 GMT
        Subject: CN=024F2AD3C1BCD9246E57A1955D4B0FA2BCEF91A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:71:50:e5:b4:55:81:95:35:f4:b8:4e:f3:
                    c5:97:8e:72:a9:39:f8:c9:16:68:ce:b6:da:25:27:
                    13:73:0d:7f:6a:e3:c7:50:49:99:a1:ef:a9:e6:e1:
                    74:cf:dd:c2:18:06:ae:67:71:2c:cb:94:30:d6:1a:
                    66:79:bc:ce:4e:ff:f1:c6:a1:2e:a0:b8:24:26:27:
                    7b:30:7a:98:ce:3a:10:87:2a:92:6d:c5:e9:85:6d:
                    d4:72:40:49:e2:40:14:77:8e:54:44:a8:98:64:10:
                    57:bb:9e:57:2d:03:a7:97:f7:03:5c:d3:9f:1c:8e:
                    a5:85:49:51:22:db:55:18:04:4f:d1:16:87:f4:5c:
                    e6:4e:c2:74:86:f0:34:60:01:76:c1:63:3f:fd:ff:
                    1a:a1:4f:46:0f:94:67:80:ad:c8:bf:7b:47:9f:9a:
                    49:80:1a:f6:1d:85:94:d4:a2:5f:b1:e0:ae:16:df:
                    64:bb:4e:84:ac:67:eb:51:ba:e2:87:d8:92:58:98:
                    dc:65:ae:a9:fb:c8:d6:6e:7f:7c:bc:b7:cf:14:99:
                    55:f0:71:b3:b2:cc:3b:39:95:bc:cf:0e:db:78:fb:
                    f5:43:49:5d:3f:1a:f1:73:07:d4:97:ac:63:e7:e5:
                    56:91:1b:ce:3f:b4:89:e8:43:a3:cc:05:41:1f:e6:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4F:2A:D3:C1:BC:D9:24:6E:57:A1:95:5D:4B:0F:A2:BC:EF:91:A6
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a373830303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:7800::/38

    Signature Algorithm: sha256WithRSAEncryption
         48:27:b8:95:7a:74:63:91:5e:a1:02:2a:8a:44:ec:21:cc:51:
         26:d8:50:cf:ae:c5:05:2b:2d:5d:94:65:b3:54:54:82:64:b2:
         13:b4:fc:42:f9:24:4e:3e:46:ed:e9:c0:4d:9d:21:1c:7a:4d:
         44:3c:56:15:51:fd:a7:3d:d9:70:4d:d8:b4:88:22:3a:5a:0e:
         a7:1f:01:c3:16:cd:83:f6:32:6d:78:ca:85:29:47:2a:2c:7b:
         83:99:2c:3f:ef:69:d9:47:cb:e8:16:2d:5a:01:f1:6d:07:bd:
         f1:2c:b7:d9:e6:9e:72:1b:de:bc:b2:44:8e:84:97:ab:fa:a5:
         81:dc:0e:5c:67:ef:16:ed:36:cc:ed:e9:09:1a:ca:9f:01:5d:
         45:c7:8c:ea:e1:ab:94:4d:71:6e:a1:6f:11:c6:6a:22:89:d6:
         48:43:17:14:4d:d7:7e:1b:a7:a1:eb:12:95:6b:45:15:57:42:
         37:df:46:23:e6:61:9f:a6:ef:54:f4:9d:00:57:c7:09:d4:bd:
         29:54:5f:42:ee:c7:7e:c2:28:b8:cd:a5:5c:55:50:6d:95:3a:
         7f:0e:6c:92:fe:22:78:9b:dc:c6:e8:00:2e:d9:29:5c:84:c3:
         a7:61:ad:a7:02:23:41:3e:55:97:87:eb:68:83:db:7a:fd:7e:
         b7:75:93:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:12:36 2026 by rpki-client