Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/323830363a3432373a3a2f33322d3332203d3e20323732343031.roa
File:                     323830363a3432373a3a2f33322d3332203d3e20323732343031.roa (raw, json)
Hash identifier:          s7gkxScuCLKP3oGI19XwnzVfhzqUXr/nJcfguH+EXUQ=
Subject key identifier:   22:CE:AE:3C:09:86:04:11:7D:9C:16:3A:2C:72:50:F2:F4:51:0E:55
Certificate issuer:       /CN=DA5600F7492F4B1FEAF3C10AF2568FDB92A07365
Certificate serial:       5B3F2C03607EE992B04A7B343908175B0E6012AE
Authority key identifier: DA:56:00:F7:49:2F:4B:1F:EA:F3:C1:0A:F2:56:8F:DB:92:A0:73:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/323830363a3432373a3a2f33322d3332203d3e20323732343031.roa
Signing time:             Tue 08 Jul 2025 11:24:46 +0000
ROA not before:           Tue 08 Jul 2025 11:19:46 +0000
ROA not after:            Tue 07 Jul 2026 11:24:46 +0000
asID:                     272401
IP address blocks:        2806:427::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3f:2c:03:60:7e:e9:92:b0:4a:7b:34:39:08:17:5b:0e:60:12:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5600F7492F4B1FEAF3C10AF2568FDB92A07365
        Validity
            Not Before: Jul  8 11:19:46 2025 GMT
            Not After : Jul  7 11:24:46 2026 GMT
        Subject: CN=22CEAE3C098604117D9C163A2C7250F2F4510E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:6e:fe:79:34:3e:94:ea:5c:cd:c1:aa:3a:
                    a9:99:e6:5e:2d:34:1d:96:3f:96:a2:fd:f0:f0:e5:
                    bc:93:12:6d:e6:50:33:c3:89:46:ad:d1:ed:2f:47:
                    f6:b8:3b:2b:f1:e5:7e:38:cd:0d:d6:6a:d3:0c:a6:
                    cf:68:0e:36:27:38:cc:02:c6:c2:eb:c6:8a:34:06:
                    06:75:ef:09:5c:c1:de:9d:f7:dd:76:53:d0:bf:e5:
                    97:51:c5:1b:58:22:8e:c8:9c:9e:91:bb:32:66:d4:
                    df:d3:b7:7d:f6:e8:2c:1a:7d:78:64:cc:45:0e:ac:
                    b9:30:b0:70:15:fd:c9:38:cb:3e:06:be:27:46:46:
                    d0:16:bb:9e:fd:08:11:ef:ba:61:88:8a:38:c8:9e:
                    08:b0:22:4f:25:4e:ee:8e:88:11:5c:e8:b5:f6:23:
                    b5:69:96:c6:08:7f:db:02:4e:34:44:96:9f:4a:b3:
                    2b:59:5c:54:f0:9b:01:17:aa:f3:54:6b:f9:72:a1:
                    93:fa:bc:39:94:63:94:3c:98:af:66:8d:b9:0c:d7:
                    76:50:7c:47:0a:1a:8d:b5:e7:6c:d0:ce:0a:e1:a8:
                    fb:58:c1:7c:b2:30:7d:79:5a:8c:7f:15:0e:e9:91:
                    39:61:dd:8d:33:a3:d3:b5:d3:c6:dd:57:12:17:e2:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:AE:3C:09:86:04:11:7D:9C:16:3A:2C:72:50:F2:F4:51:0E:55
            X509v3 Authority Key Identifier:
                keyid:DA:56:00:F7:49:2F:4B:1F:EA:F3:C1:0A:F2:56:8F:DB:92:A0:73:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/323830363a3432373a3a2f33322d3332203d3e20323732343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:427::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d3:43:11:d4:32:e0:c5:d2:1d:60:32:40:07:ba:34:6f:39:
         72:17:a6:0c:0e:a9:41:29:9a:8d:72:c4:88:49:01:f0:1c:75:
         f2:46:97:49:69:64:8e:2f:e8:7c:85:14:7e:2e:ed:6e:1e:de:
         41:cb:52:9e:dc:9b:d8:b1:64:b7:d6:86:52:37:6a:28:f1:64:
         19:eb:ad:e3:f4:9a:35:da:6b:eb:11:39:35:90:5c:bd:aa:f5:
         43:75:39:a7:ab:c1:63:7c:a4:d0:c8:2e:74:4a:58:ea:62:d3:
         0d:1a:29:3c:48:ec:b9:34:47:84:12:4c:32:b6:ee:22:b0:bd:
         b5:73:e4:e1:c3:8e:47:c0:03:1e:fb:28:89:0f:1d:a5:e7:7a:
         d3:ed:fd:35:b5:a8:12:7f:32:c1:f5:b0:61:5d:2b:a6:88:6d:
         4c:3e:15:bd:46:a2:dd:76:73:72:80:36:3f:5a:df:8a:d9:17:
         d0:84:c0:9b:7b:f0:9a:a7:8b:96:78:8f:a0:b9:6b:14:10:0c:
         de:79:0d:71:fd:4c:4d:ca:14:a8:b6:02:17:6a:1c:b9:76:ad:
         56:da:c4:12:c7:83:77:a6:a2:30:92:cc:4c:d7:60:6f:ea:8e:
         17:25:07:4e:f2:83:aa:f4:e0:1a:23:28:23:ea:02:5d:25:c5:
         32:58:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:27:46 2025 by rpki-client