Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa
File:                     323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa (raw, json)
Hash identifier:          CZuAJ4PW7zhL/XeYz5E4jLSq+4yDH/z7qnY6Wl5kavc=
Subject key identifier:   56:20:D2:A1:BD:A2:65:57:8C:AE:D3:E3:B4:A3:2F:3B:4D:21:55:40
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       54DA542757C0312C75CB4C549C5ADA804E34E673
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa
Signing time:             Tue 08 Sep 2026 03:34:27 +0000
ROA not before:           Tue 08 Sep 2026 03:29:27 +0000
ROA not after:            Tue 07 Sep 2027 03:34:27 +0000
asID:                     265622
IP address blocks:        2806:3a3:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:da:54:27:57:c0:31:2c:75:cb:4c:54:9c:5a:da:80:4e:34:e6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Sep  8 03:29:27 2026 GMT
            Not After : Sep  7 03:34:27 2027 GMT
        Subject: CN=5620D2A1BDA265578CAED3E3B4A32F3B4D215540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:f7:98:8e:23:86:8d:b6:68:a4:c6:df:6f:
                    06:85:b5:48:4c:63:e4:56:00:03:3d:05:5b:9d:86:
                    d4:a8:b0:92:19:5c:32:0a:c8:3a:87:3d:11:9b:aa:
                    98:1d:bb:a9:3c:fb:da:97:b9:5f:0e:93:dc:d0:24:
                    2a:93:7d:98:1a:a5:e5:78:60:41:22:c7:2b:98:80:
                    65:6a:1d:6d:98:f9:cd:fc:da:1d:1f:0d:64:ac:b1:
                    8f:7f:74:b1:4b:c2:4d:cd:4c:2b:cd:20:22:e4:7b:
                    b7:e8:cb:48:c8:0a:34:49:6a:21:0d:8a:6a:a5:07:
                    85:18:13:2a:15:85:f4:7e:0d:b9:78:dd:66:0a:4f:
                    6a:a7:d9:40:7c:29:30:42:ec:1d:33:ad:b0:df:08:
                    43:c7:88:97:f1:e8:95:10:91:07:42:33:0e:66:0a:
                    a4:92:c4:00:f3:0f:94:3b:ab:87:0d:6f:1c:d2:28:
                    39:aa:41:9a:da:51:a1:ec:85:07:98:90:1b:71:ef:
                    f8:b0:8a:d7:23:a0:53:f7:19:84:45:15:59:95:3e:
                    19:67:66:9f:77:c7:bc:50:44:d9:38:00:1d:7b:9a:
                    15:24:20:54:d6:86:32:1e:55:de:df:02:6e:f5:55:
                    7a:f3:73:62:27:af:ca:95:52:b0:d7:cf:9a:be:7b:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:20:D2:A1:BD:A2:65:57:8C:AE:D3:E3:B4:A3:2F:3B:4D:21:55:40
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a363030303a3a2f33352d3335203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:2f:2b:98:0e:72:47:9b:a7:cf:62:b0:70:17:98:74:07:
         6f:23:ea:2b:3d:23:9f:7b:5c:34:bf:9a:be:3f:a2:12:68:ab:
         e3:31:84:e8:d9:d9:5a:dd:42:53:17:71:93:69:55:cd:70:64:
         43:3a:02:8f:f1:e4:cd:c4:5d:5b:6c:49:63:0e:ca:db:1d:60:
         3d:58:af:ba:06:04:cf:75:ae:d2:04:bb:00:a8:06:1e:f9:ee:
         e5:c1:e2:6d:7a:5a:3c:46:e9:16:25:ac:de:2d:f4:10:46:b9:
         57:78:4d:21:d4:e6:b0:c0:c1:9a:2e:41:9f:46:af:7a:b4:69:
         4e:70:fa:c9:4a:73:c5:cc:2d:6c:80:17:ab:10:d5:87:e1:ba:
         7a:1d:8f:99:9a:31:e2:3e:ac:57:dc:1e:99:c0:ad:57:62:d5:
         ce:18:dd:b7:3c:9b:87:9b:21:62:ca:53:74:0f:39:41:58:f3:
         d9:f6:ce:00:89:9d:a0:1f:45:ef:5d:0c:03:66:49:f9:40:48:
         98:8c:be:fe:e5:12:2c:c6:c7:1e:0c:01:a6:32:49:ce:d9:6b:
         09:21:22:24:df:0e:12:74:3c:16:1f:a0:15:fd:8a:6d:f1:f7:
         10:d6:09:fc:85:b1:69:7e:16:5f:52:77:41:2e:26:b4:37:41:
         53:f5:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:21:05 2026 by rpki-client