Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          btVUYETLzzNX8D5eqjhLwgKCltrl4ERjz1lUDMdcU7w=
Subject key identifier:   5E:78:6B:DF:CE:EC:3C:26:24:F2:EC:B8:AF:38:7C:56:79:36:67:75
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       241DDDB030C43368110472E1C6D442FF7AB6CC5E
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 02 Mar 2026 18:32:24 +0000
ROA not before:           Mon 02 Mar 2026 18:27:24 +0000
ROA not after:            Mon 01 Mar 2027 18:32:24 +0000
asID:                     270165
IP address blocks:        2806:3eb::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Mar 2026 04:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:dd:b0:30:c4:33:68:11:04:72:e1:c6:d4:42:ff:7a:b6:cc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Mar  2 18:27:24 2026 GMT
            Not After : Mar  1 18:32:24 2027 GMT
        Subject: CN=5E786BDFCEEC3C2624F2ECB8AF387C5679366775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0f:45:1c:32:d8:31:d5:41:fa:ec:61:69:91:
                    9c:0c:f3:fb:ea:fb:51:58:04:32:66:e2:79:22:13:
                    6d:2d:c6:fc:6d:c8:54:45:5d:b3:58:b1:4b:56:bc:
                    c8:4d:d9:5e:03:7d:8f:04:15:16:d8:21:95:49:f0:
                    10:8a:19:ca:aa:cb:2c:29:c4:31:13:6d:af:3b:d8:
                    d0:93:f6:25:a8:5c:26:0a:4c:de:89:a5:2f:f4:28:
                    ca:73:f3:a3:ca:2e:d6:cf:33:53:44:f2:74:b5:fd:
                    06:48:6e:c9:b4:4f:29:72:78:1e:fd:c8:ef:ea:6a:
                    8f:00:26:b9:9c:f0:6a:b9:61:4a:b4:58:15:ba:88:
                    6f:7d:f6:20:89:4f:6d:e7:11:88:79:3c:3a:d2:76:
                    cf:10:41:f3:7b:c6:e4:b3:78:f1:98:a7:d2:1f:a8:
                    5b:1e:21:c7:bd:b2:68:a2:73:05:6d:94:e3:c9:80:
                    70:f8:7f:3b:8a:e0:fd:70:eb:ae:7c:43:da:70:96:
                    b2:b7:6b:55:6f:cd:0a:7d:aa:e0:5b:09:c7:d8:11:
                    ee:ca:7c:b4:07:5a:17:98:a3:ac:0b:12:c1:67:d3:
                    49:04:98:5d:f4:c9:05:b8:4e:f7:c8:30:25:f9:85:
                    c9:c6:b2:07:a0:f5:37:1e:0a:5d:af:ff:86:58:cf:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:78:6B:DF:CE:EC:3C:26:24:F2:EC:B8:AF:38:7C:56:79:36:67:75
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb::/39

    Signature Algorithm: sha256WithRSAEncryption
         84:42:5d:7d:c9:78:1c:db:8f:12:2b:d8:d2:d1:1b:53:3c:2d:
         35:ff:09:87:bf:c2:18:fb:a3:75:2a:57:1d:a5:7a:f2:97:66:
         7d:31:b8:08:6d:2a:8c:45:e7:45:4e:50:f9:a6:65:1f:49:0c:
         6c:f4:8e:36:36:19:60:63:ba:61:3c:d5:c2:07:8b:86:d6:71:
         b0:aa:57:6a:95:76:82:95:be:e0:f4:60:64:79:ec:30:33:fa:
         68:ff:02:01:b2:0c:b7:6c:a7:4d:05:e3:d1:35:c8:f1:bf:32:
         4d:e9:37:71:79:aa:16:93:a7:45:6a:39:3f:76:8a:01:5e:82:
         b7:6d:4d:4b:29:a2:0e:73:f7:c3:a0:bd:aa:85:aa:b2:ef:95:
         80:38:72:d1:25:94:17:8b:fa:23:72:2e:39:18:38:22:d2:ac:
         32:f1:5d:d3:a7:6f:79:60:4a:cf:b1:35:8f:b6:77:ff:cc:cd:
         c7:92:33:6a:92:bb:1c:80:88:c0:25:93:89:05:57:70:2b:77:
         10:7e:35:59:b0:a6:45:54:63:29:d7:f4:c8:38:62:3b:a9:da:
         4a:40:84:8b:8a:b3:c5:cf:3c:b1:e7:13:05:59:f4:ae:2f:18:
         a0:5b:b7:66:77:10:f8:21:19:4a:22:67:0f:37:27:08:e2:dc:
         1a:cf:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:43:46 2026 by rpki-client