Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/323830363a3435653a3a2f33322d3336203d3e20323734343130.roa
File:                     323830363a3435653a3a2f33322d3336203d3e20323734343130.roa (raw, json)
Hash identifier:          pmVjts1U3Plr3LdjtsUVn8N1Zs2GbhlVNLiVhijptAk=
Subject key identifier:   86:F0:C2:89:8C:D0:74:27:64:A7:DE:01:18:CA:8C:FF:15:84:F9:37
Certificate issuer:       /CN=ED527324A24F1D71B0AE52BC4750D2055C4FF045
Certificate serial:       2DFECE5D878486CEFBE699CE9D293F1BC48645DB
Authority key identifier: ED:52:73:24:A2:4F:1D:71:B0:AE:52:BC:47:50:D2:05:5C:4F:F0:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/323830363a3435653a3a2f33322d3336203d3e20323734343130.roa
Signing time:             Mon 17 Aug 2026 19:00:00 +0000
ROA not before:           Mon 17 Aug 2026 18:55:00 +0000
ROA not after:            Mon 16 Aug 2027 19:00:00 +0000
asID:                     274410
IP address blocks:        2806:45e::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.crl
                          rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 14:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fe:ce:5d:87:84:86:ce:fb:e6:99:ce:9d:29:3f:1b:c4:86:45:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED527324A24F1D71B0AE52BC4750D2055C4FF045
        Validity
            Not Before: Aug 17 18:55:00 2026 GMT
            Not After : Aug 16 19:00:00 2027 GMT
        Subject: CN=86F0C2898CD0742764A7DE0118CA8CFF1584F937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:4d:78:ca:2e:1e:0e:4b:a4:1c:78:91:40:
                    dd:a8:48:28:6f:66:58:d0:b3:45:5a:d1:77:a2:43:
                    33:47:b5:ac:fa:1f:b5:cf:2c:be:0a:b9:8c:2f:85:
                    0a:09:63:7a:67:58:e7:06:f7:f8:d8:25:57:44:2f:
                    80:70:40:0e:cf:61:e5:e1:32:c8:b9:32:2b:73:35:
                    e2:86:38:72:87:a1:c7:c1:94:a8:6a:c6:5a:a3:0a:
                    6c:f6:ad:10:af:a7:ec:d6:92:3a:a3:24:97:92:97:
                    9e:ed:88:a2:24:88:be:d6:f6:b5:97:88:1d:e5:b0:
                    c3:68:cc:84:40:f3:78:4b:8c:7b:92:72:b5:2a:5c:
                    ec:9b:61:08:9f:99:2f:04:fb:b5:e3:90:76:f9:df:
                    69:ca:cc:c1:bd:79:b0:53:ec:99:a6:6f:a7:2d:b3:
                    b1:a6:a6:8f:ca:96:d5:9d:d0:c0:7e:5f:35:58:d0:
                    38:5c:4e:73:60:71:73:91:aa:c7:d6:38:89:e0:0f:
                    34:f0:74:9d:ce:85:ef:6d:cb:71:5a:cf:96:fb:0e:
                    df:16:b7:8c:1e:9d:7d:f1:fa:ff:70:78:51:53:b7:
                    1c:f4:01:38:93:da:77:87:f8:60:c8:9c:7b:10:ae:
                    a1:77:82:f3:da:ba:27:75:e4:0c:2d:31:4a:f9:86:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F0:C2:89:8C:D0:74:27:64:A7:DE:01:18:CA:8C:FF:15:84:F9:37
            X509v3 Authority Key Identifier:
                keyid:ED:52:73:24:A2:4F:1D:71:B0:AE:52:BC:47:50:D2:05:5C:4F:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/323830363a3435653a3a2f33322d3336203d3e20323734343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:45e::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:52:a4:2c:fa:3c:56:48:37:52:e8:49:f8:9c:a8:d5:7e:09:
         a0:63:73:42:e8:8d:4b:41:fe:c1:d9:a6:a5:ea:aa:58:07:a0:
         fc:31:32:a1:47:dc:d4:10:ee:4d:a5:db:68:a1:5c:9c:c5:6e:
         56:36:55:f9:12:58:3e:9f:d3:76:de:bd:b4:90:21:2f:59:94:
         0b:8a:0d:f0:46:72:26:50:b2:c1:c1:a3:c8:82:ba:9b:6e:7a:
         fa:62:59:8d:29:00:ad:9a:51:59:89:6c:30:48:7f:dd:7c:9f:
         b1:cb:f2:ee:69:1a:f4:81:a6:c2:d1:08:53:bc:83:dd:55:20:
         22:7e:e8:d3:3c:48:0f:92:43:9e:90:03:62:ef:87:e5:b9:65:
         76:29:4c:a8:76:ea:38:9b:62:9e:25:02:12:4a:54:99:53:eb:
         30:a6:4f:55:e3:04:31:a5:33:5c:7c:f5:ba:71:9d:15:a3:13:
         8a:db:bf:49:af:27:d4:c8:3b:17:a4:be:c0:2d:8b:ef:88:ee:
         b2:54:a9:52:18:5d:4d:39:d6:d2:3e:dc:cf:30:0d:ed:c3:ba:
         f5:d4:53:1c:fb:63:56:fd:0b:4d:5c:65:59:62:70:15:b8:7d:
         9e:78:51:29:6a:f2:3b:07:3d:58:72:9d:99:59:7d:80:07:54:
         86:30:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 14:03:12 2026 by rpki-client