Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/323830363a3363353a3a2f33322d3332203d3e20323730313437.roa
File:                     323830363a3363353a3a2f33322d3332203d3e20323730313437.roa (raw, json)
Hash identifier:          2j4PsAgQ3xi2n/pKeSfhrgpBs4N0q3mCGZVFPJQFpDk=
Subject key identifier:   20:37:C0:DC:78:D0:07:09:7D:64:D5:5A:0F:AD:35:04:B6:DA:98:27
Certificate issuer:       /CN=1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9
Certificate serial:       07CE0362BFF91CE2B1AA00C183D1553210963A2F
Authority key identifier: 1E:DF:07:91:8A:1D:03:A6:D1:9C:DE:9F:A0:DD:7E:1D:CF:4F:C3:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/323830363a3363353a3a2f33322d3332203d3e20323730313437.roa
Signing time:             Mon 28 Sep 2026 22:05:00 +0000
ROA not before:           Mon 28 Sep 2026 22:00:00 +0000
ROA not after:            Mon 27 Sep 2027 22:05:00 +0000
asID:                     270147
IP address blocks:        2806:3c5::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ce:03:62:bf:f9:1c:e2:b1:aa:00:c1:83:d1:55:32:10:96:3a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9
        Validity
            Not Before: Sep 28 22:00:00 2026 GMT
            Not After : Sep 27 22:05:00 2027 GMT
        Subject: CN=2037C0DC78D007097D64D55A0FAD3504B6DA9827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:54:3a:10:30:5a:20:b8:76:52:9a:d3:21:
                    a8:50:76:ee:33:28:f3:e8:e3:5c:7e:37:70:4e:14:
                    ca:83:37:e8:37:ad:af:22:89:d9:bc:41:3a:bb:6c:
                    c6:e5:db:bb:cb:9b:e3:73:d1:0e:8b:f2:e8:6e:d5:
                    41:f6:23:85:22:7e:e7:0e:03:d3:19:f6:c2:7c:50:
                    e7:a6:af:79:c2:3c:97:01:ae:11:ba:52:65:94:b8:
                    74:2c:a1:03:ca:6c:f8:cc:5e:cd:c6:cb:d4:f1:7b:
                    9c:f7:97:09:34:14:1b:03:3c:15:58:67:06:b8:b8:
                    8d:ee:99:18:28:b9:2e:5a:3e:f6:2a:4d:5c:a7:e6:
                    ee:4a:cf:2a:f5:3d:c9:a5:f8:ec:03:b4:3a:01:31:
                    9d:f6:a0:e9:08:4a:cf:e5:f7:5a:cb:99:9a:ee:7d:
                    f2:e6:c4:f8:41:96:0c:76:14:02:5c:3b:a2:61:20:
                    2b:a3:8a:95:fd:33:77:d3:1f:3c:40:82:3e:87:11:
                    bf:e0:7f:10:5e:ae:fc:13:c7:74:80:cd:04:7e:da:
                    6b:c0:31:cd:48:bc:87:c5:75:53:04:6a:ff:5f:fa:
                    c4:45:e2:65:41:fd:94:62:ba:4f:4f:a6:f4:45:83:
                    96:e9:22:8b:77:a6:db:a2:3d:fa:a5:8b:2f:8a:67:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:37:C0:DC:78:D0:07:09:7D:64:D5:5A:0F:AD:35:04:B6:DA:98:27
            X509v3 Authority Key Identifier:
                keyid:1E:DF:07:91:8A:1D:03:A6:D1:9C:DE:9F:A0:DD:7E:1D:CF:4F:C3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/323830363a3363353a3a2f33322d3332203d3e20323730313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:92:d8:ca:60:92:f7:81:88:54:2a:eb:14:8a:a5:88:7a:
         ad:0b:d6:3b:9e:9b:b7:8f:d3:ca:64:45:ae:0b:ce:c4:62:49:
         7c:34:9d:25:fe:92:d9:0c:04:9f:16:c1:16:37:3f:a5:83:e5:
         ad:27:bc:63:d9:f1:44:f7:6d:3b:c3:c6:2b:89:95:95:29:2e:
         5e:d8:3a:ab:ab:9d:a3:17:6f:f3:94:a4:27:9a:f2:b4:e2:48:
         f3:1c:ea:31:03:1a:e0:66:a4:59:29:8f:23:93:d6:84:e6:8b:
         c4:5d:e5:f2:46:82:57:92:80:bb:1b:5d:ba:26:6e:4f:ea:24:
         ce:25:ef:1f:15:05:cf:b6:16:9b:ca:6c:d7:6f:67:0e:8a:e0:
         75:3d:64:6b:db:f4:1a:99:ad:00:98:ca:fd:89:07:ce:ff:3a:
         e1:6a:ae:b7:c8:c2:76:f8:ea:c9:1e:22:d2:73:05:11:40:1d:
         db:90:1e:28:fa:c2:ff:29:b8:1c:39:25:51:84:a5:fc:27:2b:
         62:7d:47:3e:8c:d5:85:43:02:e4:55:89:b6:db:70:28:9f:0e:
         58:5d:87:3a:57:ec:08:25:25:25:28:fd:c7:10:62:40:ec:82:
         6b:88:5e:ae:43:1a:f0:96:d8:ff:7c:f6:d4:90:3c:c2:94:ec:
         e9:fd:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:39:29 2026 by rpki-client