Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa
File:                     323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier:          7BzA4zGXOCYF8wxFg5QFpbyaIO3oDzLXdIduLHPE/YQ=
Subject key identifier:   2D:8D:60:65:77:C6:D7:2E:2C:75:DF:FC:50:42:F0:AD:B7:75:42:F5
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       3C9191CDDAF36608A9BDC43C02F8D60E14B1282D
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa
Signing time:             Thu 23 Oct 2025 21:30:03 +0000
ROA not before:           Thu 23 Oct 2025 21:25:03 +0000
ROA not after:            Thu 22 Oct 2026 21:30:03 +0000
asID:                     28451
IP address blocks:        2806:3f9:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:91:91:cd:da:f3:66:08:a9:bd:c4:3c:02:f8:d6:0e:14:b1:28:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Oct 23 21:25:03 2025 GMT
            Not After : Oct 22 21:30:03 2026 GMT
        Subject: CN=2D8D606577C6D72E2C75DFFC5042F0ADB77542F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:19:2b:c6:6a:bc:13:7a:31:d3:a6:e4:24:
                    b8:2b:04:a6:4e:27:39:ff:e0:7b:3e:78:11:d1:93:
                    9b:37:b8:1f:b8:10:6f:b3:26:40:7e:52:12:3a:96:
                    4b:01:4c:d3:13:09:b1:2d:7d:55:48:af:04:e3:61:
                    48:fa:ae:0d:b3:29:4e:b7:34:74:51:fb:86:89:ae:
                    3f:92:61:a5:60:0f:e8:9d:80:5d:31:b7:d5:67:da:
                    ed:e8:a0:67:da:68:5f:32:6e:f7:d3:18:34:ee:f4:
                    30:ef:5a:bb:78:53:57:b9:ee:bd:9f:4a:99:19:3b:
                    89:58:52:a8:21:87:20:15:eb:7d:30:12:7e:44:c5:
                    18:69:cd:41:91:5d:49:47:e5:3b:69:2f:97:60:71:
                    a3:d1:e0:3f:af:d5:8f:ef:7f:a8:08:81:64:d3:c3:
                    6e:65:5a:f0:65:81:ff:69:0f:6e:35:fb:29:15:46:
                    d0:3f:e6:94:39:2c:53:1e:49:9e:83:90:62:17:16:
                    bd:df:dc:ee:98:05:b7:5e:78:72:fe:03:5f:ce:42:
                    29:6b:7f:42:81:8a:e6:63:13:f5:7e:71:aa:16:30:
                    d7:ba:47:e4:b1:97:df:08:b9:94:62:36:af:1a:e4:
                    b4:f8:b2:6d:d9:f9:fc:38:4a:28:19:2c:bb:1d:0b:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8D:60:65:77:C6:D7:2E:2C:75:DF:FC:50:42:F0:AD:B7:75:42:F5
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a376330303a3a2f33382d3338203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:7c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:fb:21:34:37:fe:b0:2f:c9:89:c0:7e:dc:32:94:0f:8a:
         53:b3:14:1a:3d:9a:ba:6d:76:f7:b1:9f:a8:e5:aa:fb:a2:bf:
         b8:19:2b:ed:63:62:32:63:1a:98:25:1d:79:c4:3a:fb:92:59:
         83:16:25:76:08:7a:dd:aa:9d:ec:23:1a:ca:25:f4:13:37:d6:
         2f:98:d5:94:d1:70:01:ba:f3:95:94:80:8e:d3:1e:03:5c:f1:
         db:0c:eb:af:ae:81:4b:29:be:e7:ad:94:a6:a3:0c:39:fc:a9:
         ba:37:f8:a6:53:92:1e:cd:fa:19:14:4d:03:55:6d:7b:5d:ad:
         c9:bd:89:16:0e:d2:4d:d9:0a:3e:35:25:eb:ee:14:a9:e2:4b:
         35:d5:e1:d8:f6:d9:a1:7f:ca:fd:53:7f:9f:38:37:3f:6f:2e:
         97:49:d3:1a:bb:6d:14:de:cf:96:fd:bb:8f:c7:d8:9a:2d:8f:
         52:e6:0a:b6:56:44:06:46:3d:22:91:d6:18:25:df:0d:3a:db:
         7b:b2:39:15:1d:7d:42:05:06:38:98:ae:04:0a:15:11:02:5f:
         f8:a6:d7:26:0d:93:1f:52:d8:0a:80:ec:b0:b6:d8:87:35:8a:
         a5:35:a3:01:50:d5:43:b6:09:b5:f5:40:54:38:28:81:05:b7:
         82:62:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:24 2025 by rpki-client