Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/323830363a3435393a3a2f33322d3438203d3e20323734343031.roa
File:                     323830363a3435393a3a2f33322d3438203d3e20323734343031.roa (raw, json)
Hash identifier:          jXVFQHdxHT9Rd3cWipDATzbx8ZIsueZcPrOT5Sdks6Y=
Subject key identifier:   B7:7D:7B:7C:9D:2F:DC:9E:88:B3:18:3E:2C:96:85:04:7B:6B:EE:57
Certificate issuer:       /CN=26307F9C03ED95E10C8A368F80E2A31DDA963AEE
Certificate serial:       5A6D42380CAC41C73CF1D3D98FE78E0529FD1D25
Authority key identifier: 26:30:7F:9C:03:ED:95:E1:0C:8A:36:8F:80:E2:A3:1D:DA:96:3A:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/323830363a3435393a3a2f33322d3438203d3e20323734343031.roa
Signing time:             Thu 20 Aug 2026 16:05:00 +0000
ROA not before:           Thu 20 Aug 2026 16:00:00 +0000
ROA not after:            Thu 19 Aug 2027 16:05:00 +0000
asID:                     274401
IP address blocks:        2806:459::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Sep 2026 22:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6d:42:38:0c:ac:41:c7:3c:f1:d3:d9:8f:e7:8e:05:29:fd:1d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26307F9C03ED95E10C8A368F80E2A31DDA963AEE
        Validity
            Not Before: Aug 20 16:00:00 2026 GMT
            Not After : Aug 19 16:05:00 2027 GMT
        Subject: CN=B77D7B7C9D2FDC9E88B3183E2C9685047B6BEE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:71:b9:0e:c2:7d:de:fe:96:ff:f6:d7:0b:
                    d7:8c:f3:e2:e8:91:08:1e:1e:0b:76:bf:0a:97:5c:
                    78:7e:c3:00:aa:80:8b:c7:fa:11:ed:3b:45:b8:03:
                    99:9d:ea:ef:17:56:5f:ce:34:94:6a:11:11:a9:c4:
                    1b:9d:42:ff:7e:04:6c:03:3d:c8:e6:03:94:76:9d:
                    0f:68:24:05:ca:91:6b:5a:a8:52:97:8e:ff:23:91:
                    d5:09:44:2b:87:df:09:aa:a4:cb:06:ab:b2:c1:b2:
                    1d:22:de:b1:d4:53:de:ab:c4:10:98:9a:3c:19:ad:
                    82:35:ef:fb:86:21:45:fa:41:12:8e:5a:aa:58:c7:
                    6e:fb:82:f1:b6:d9:93:f3:68:28:68:97:01:a1:3d:
                    7a:ed:6f:91:18:3c:e8:b2:bc:b4:82:dc:2d:a0:5b:
                    51:cc:f7:b6:18:44:a9:03:bb:bb:e7:21:f8:7c:9d:
                    55:22:27:df:bc:b6:47:cc:21:1e:70:aa:48:3f:5f:
                    56:62:da:0b:10:7e:fc:d6:b9:f8:25:d8:8e:89:83:
                    7b:9b:45:2d:1b:12:30:6b:7e:db:9b:45:56:a8:ac:
                    b0:ee:8a:21:b8:69:d2:03:01:24:b8:75:d3:87:28:
                    7f:37:1b:8f:7c:cb:9e:8a:be:13:98:cc:7c:61:42:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:7B:7C:9D:2F:DC:9E:88:B3:18:3E:2C:96:85:04:7B:6B:EE:57
            X509v3 Authority Key Identifier:
                keyid:26:30:7F:9C:03:ED:95:E1:0C:8A:36:8F:80:E2:A3:1D:DA:96:3A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26307F9C03ED95E10C8A368F80E2A31DDA963AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6791171259B4F194846E25E739BB21D4CF1D7AA9889EC8A32504701B48787B/0/323830363a3435393a3a2f33322d3438203d3e20323734343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:459::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:81:46:c9:e8:9e:da:c9:63:d6:96:76:c7:b5:4b:67:17:da:
         d7:2e:8c:22:4e:b0:af:a6:a0:26:90:20:0c:49:90:cb:f5:f1:
         75:41:2f:d3:a9:ee:bb:8e:f5:51:dd:55:4e:53:58:43:b6:f8:
         76:ce:e1:08:8a:81:0e:8e:33:18:03:92:10:1f:1d:58:86:5a:
         62:a7:bc:d7:8a:d7:06:fc:42:79:05:37:cd:ea:08:e5:63:c8:
         fc:1a:1e:c1:98:2a:ba:35:0b:27:24:39:31:5f:10:13:84:b0:
         0c:8a:2b:c7:14:fa:88:cd:44:66:b2:25:17:eb:35:39:87:3d:
         37:3d:c9:c5:07:e3:25:42:ce:9e:b5:9d:5e:79:22:49:fe:50:
         30:7f:9f:97:f7:95:0d:e2:bb:49:5c:72:29:ac:3f:18:6a:05:
         ee:e5:95:88:34:dd:2f:70:ba:d6:43:43:8e:89:b2:f5:62:ac:
         63:51:ce:3d:e4:fa:fa:45:af:b7:82:49:e8:3b:bf:5f:2b:29:
         4d:7c:f0:2c:f0:78:ac:6b:ff:9c:24:06:e8:3c:2c:43:d5:b9:
         23:44:72:33:95:d1:59:9f:2e:24:cc:c1:45:4f:7b:28:48:46:
         a8:34:0b:7f:12:92:cd:b7:a1:40:78:c7:73:e8:fd:ed:41:94:
         49:75:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:48:09 2026 by rpki-client