Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/323830363a3365663a3a2f33382d3338203d3e20323730313735.roa
File:                     323830363a3365663a3a2f33382d3338203d3e20323730313735.roa (raw, json)
Hash identifier:          xXGJcNblmIsGN47+cLX6QtPL4YwsQOZkd5Kp0BQ6roA=
Subject key identifier:   77:79:DE:8A:CD:30:DF:16:C8:E4:0D:C3:A0:51:FC:80:9E:60:F4:9C
Certificate issuer:       /CN=671B0B346C15C76F31C336CDF5159E93C72B2CF5
Certificate serial:       669A765F863190583A6DE56E4D2B7CE96F4F4022
Authority key identifier: 67:1B:0B:34:6C:15:C7:6F:31:C3:36:CD:F5:15:9E:93:C7:2B:2C:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/323830363a3365663a3a2f33382d3338203d3e20323730313735.roa
Signing time:             Mon 01 Jun 2026 15:25:00 +0000
ROA not before:           Mon 01 Jun 2026 15:20:00 +0000
ROA not after:            Mon 31 May 2027 15:25:00 +0000
asID:                     270175
IP address blocks:        2806:3ef::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9a:76:5f:86:31:90:58:3a:6d:e5:6e:4d:2b:7c:e9:6f:4f:40:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671B0B346C15C76F31C336CDF5159E93C72B2CF5
        Validity
            Not Before: Jun  1 15:20:00 2026 GMT
            Not After : May 31 15:25:00 2027 GMT
        Subject: CN=7779DE8ACD30DF16C8E40DC3A051FC809E60F49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:75:69:8a:45:9f:3b:97:ee:96:58:de:50:
                    ac:2d:a0:0e:16:9a:38:db:47:8e:ce:8b:a1:d1:b7:
                    aa:93:3a:97:f8:ec:6e:55:b3:4e:20:2b:b6:df:9b:
                    c5:8f:7e:bb:9e:47:b5:fc:09:1d:40:61:64:8a:75:
                    b8:bd:23:37:de:48:84:54:e1:95:68:31:d8:b4:73:
                    bc:b0:fb:85:98:8d:e4:b6:8b:6f:dc:2b:3f:e4:cb:
                    7b:b4:7f:cf:2d:d2:e3:7c:a5:0c:0d:b6:33:9a:19:
                    03:1e:12:10:38:1c:29:bf:0d:30:a0:9a:c0:48:67:
                    b5:c0:ee:58:ff:a3:5c:f4:a1:b2:a5:d9:6b:32:1d:
                    4d:b4:27:03:b2:c3:57:96:96:d0:5e:2d:c7:fb:28:
                    95:65:7d:91:70:2c:d4:4f:f6:92:20:2f:41:39:f4:
                    0d:05:b1:42:51:86:09:b9:62:04:b5:a3:59:4b:66:
                    e0:6c:16:59:e6:d8:12:ea:bd:ca:fa:15:7f:8f:bd:
                    1b:f1:ee:fc:10:e0:f5:37:0b:2e:73:3f:37:eb:bc:
                    1c:03:ce:48:4d:57:ee:e6:32:a4:e6:12:ec:a4:24:
                    42:51:22:88:e2:29:83:4e:c6:66:5a:a6:3e:05:7c:
                    41:ef:26:c6:c5:18:6c:ef:a4:de:4a:bc:b3:fd:11:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:DE:8A:CD:30:DF:16:C8:E4:0D:C3:A0:51:FC:80:9E:60:F4:9C
            X509v3 Authority Key Identifier:
                keyid:67:1B:0B:34:6C:15:C7:6F:31:C3:36:CD:F5:15:9E:93:C7:2B:2C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/323830363a3365663a3a2f33382d3338203d3e20323730313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ef::/38

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:2b:ba:a2:17:c7:d2:82:7d:cc:39:83:74:fe:aa:12:5b:
         a8:a6:4c:71:06:38:f0:30:59:64:3c:c4:9f:eb:92:5f:30:8f:
         a3:ee:6f:68:16:38:15:70:e5:80:b8:6d:38:25:2d:56:ba:5a:
         80:02:f4:25:99:4a:21:06:c8:27:c9:3e:81:44:12:d0:6e:9b:
         a9:38:73:86:f4:50:b5:f3:88:84:51:12:5a:9d:2f:fd:f8:14:
         b5:5d:0a:56:ae:4b:7f:8a:54:8c:0c:e1:f3:61:2d:5f:81:f6:
         95:64:b4:dd:1b:a2:76:76:b2:62:be:d5:8c:9f:54:c6:01:b5:
         e1:42:5a:11:50:bd:2a:0e:05:48:34:fb:05:9f:9d:43:8f:5e:
         e0:6f:f1:85:55:f8:c1:6e:54:6e:a6:30:8e:b0:21:42:ff:d5:
         66:cd:36:f4:d3:fe:83:d7:53:19:12:3a:5b:0c:2a:c8:ba:39:
         f3:61:f4:d7:ad:3d:46:0c:e4:4d:3a:af:d8:99:14:99:89:6b:
         38:36:4b:fb:dc:a3:34:3d:34:4a:ef:37:14:d7:50:59:2f:04:
         52:4b:29:23:1c:3a:b9:90:60:4f:50:81:fe:f3:91:81:8e:2b:
         7c:c1:d0:9e:5a:9b:36:78:31:b9:9c:eb:3b:b6:90:ea:21:19:
         04:21:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 12:12:05 2026 by rpki-client