Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/323830363a3366633a3a2f33322d3438203d3e20323730323134.roa
File:                     323830363a3366633a3a2f33322d3438203d3e20323730323134.roa (raw, json)
Hash identifier:          oKa1vPX40Yd7Wv8Y/6rYCmktEIUEG/qVUP7Rb+SEpZQ=
Subject key identifier:   B2:76:D2:9D:80:D1:D7:F1:16:E7:ED:6C:9B:09:51:DC:AF:71:B0:C8
Certificate issuer:       /CN=97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F
Certificate serial:       49394D58F694AC7357EBAAE27A7AC54AF44C51C4
Authority key identifier: 97:A6:77:D0:EA:B5:A1:65:2A:DD:B3:7B:11:F0:9E:71:E6:BD:E9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/323830363a3366633a3a2f33322d3438203d3e20323730323134.roa
Signing time:             Wed 27 May 2026 03:40:00 +0000
ROA not before:           Wed 27 May 2026 03:35:00 +0000
ROA not after:            Wed 26 May 2027 03:40:00 +0000
asID:                     270214
IP address blocks:        2806:3fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 00:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:4d:58:f6:94:ac:73:57:eb:aa:e2:7a:7a:c5:4a:f4:4c:51:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F
        Validity
            Not Before: May 27 03:35:00 2026 GMT
            Not After : May 26 03:40:00 2027 GMT
        Subject: CN=B276D29D80D1D7F116E7ED6C9B0951DCAF71B0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:e7:2d:0d:c2:15:d4:fb:63:bc:4c:84:f4:
                    aa:32:33:16:aa:a8:f9:50:dd:cb:d3:85:ed:1a:c2:
                    e8:4b:6e:ba:a0:1f:af:7e:56:1e:81:73:60:55:51:
                    03:ce:d7:17:e4:69:24:a0:6b:2b:3e:2a:c1:cf:36:
                    a3:21:2b:ca:cc:dc:a1:a3:6f:5b:29:49:43:d6:8e:
                    9b:18:67:6c:d9:cd:62:3b:95:79:67:33:be:94:db:
                    d2:61:8c:16:3f:7f:fd:2f:da:2b:ce:2c:5e:9a:af:
                    e1:b3:26:43:81:ec:94:ea:89:de:0a:a4:8c:96:3d:
                    0e:5c:97:96:50:14:a1:20:c4:77:47:2e:c7:27:67:
                    94:43:b8:c2:37:b0:f7:51:c7:3d:59:41:63:60:57:
                    8e:07:8b:9a:d2:b9:03:22:85:af:8c:7d:d9:8f:a8:
                    96:1f:5f:a7:af:32:5b:25:82:d8:2d:c4:30:36:60:
                    33:ae:b6:ca:e8:f3:f5:92:68:57:f3:96:0f:61:ed:
                    ba:26:35:e0:bc:04:27:65:a6:89:3d:3e:bd:b1:fc:
                    40:f9:e5:17:dd:61:cb:43:f0:13:7e:c8:6c:3c:a6:
                    69:35:7f:b3:4f:bd:20:0a:9b:5b:d4:8c:e8:5f:85:
                    62:f4:42:ca:26:11:47:b0:8e:d9:5b:f8:76:21:c3:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:D2:9D:80:D1:D7:F1:16:E7:ED:6C:9B:09:51:DC:AF:71:B0:C8
            X509v3 Authority Key Identifier:
                keyid:97:A6:77:D0:EA:B5:A1:65:2A:DD:B3:7B:11:F0:9E:71:E6:BD:E9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/323830363a3366633a3a2f33322d3438203d3e20323730323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:c0:d6:7c:30:f3:d1:47:0f:d4:7b:57:96:00:26:71:1a:fc:
         ef:45:db:45:96:af:2d:cf:64:99:ce:55:85:d1:4c:24:b9:df:
         bd:81:81:a6:85:b6:48:83:bd:5e:65:49:db:97:fd:5b:66:13:
         6a:41:1f:1d:b0:65:1d:2e:8d:64:7b:10:a7:b3:a7:eb:29:41:
         29:8d:a7:80:61:53:d2:3e:64:eb:e6:96:f7:2f:bf:1d:31:67:
         c2:98:5e:f8:08:43:e7:de:73:68:f0:09:81:33:c7:53:b6:0a:
         25:5c:e1:8f:54:81:62:d8:ca:77:a8:09:7b:cc:6c:cb:2f:2e:
         b6:eb:9d:e5:04:b6:fa:39:72:cd:f4:ec:bc:e8:b6:f7:3c:eb:
         d4:9d:60:57:59:79:55:df:c6:33:d7:3e:a5:4e:08:a8:58:89:
         ae:c0:c4:ca:58:1d:bb:f3:e5:e8:bb:83:3c:15:d7:be:2b:7c:
         cd:7a:fb:3c:28:96:57:43:8d:86:58:a7:ad:9a:5b:0c:56:2c:
         d5:c5:d7:3b:d1:6b:84:b6:78:34:6e:06:c8:7e:03:db:73:84:
         ca:61:58:ff:91:3c:4c:ee:ab:42:09:b2:a4:a0:2f:58:e4:8f:
         d4:d7:20:6a:0f:33:8f:5d:04:35:55:7d:1c:4f:52:51:b8:db:
         43:55:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:02 2026 by rpki-client