Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33322d3332203d3e20323635363232.roa
File:                     323830363a3361333a3a2f33322d3332203d3e20323635363232.roa (raw, json)
Hash identifier:          Lcp3SXYClcxKtMwc/mLVa207CL+mCrCL0trA5xfmQUc=
Subject key identifier:   63:F4:97:C8:A9:9F:A9:FA:EB:1F:A1:B3:30:3D:DC:3D:E6:81:63:3A
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       08DE6B0856E9E01E4653D5695967D052D79FEA1B
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33322d3332203d3e20323635363232.roa
Signing time:             Tue 08 Sep 2026 03:34:26 +0000
ROA not before:           Tue 08 Sep 2026 03:29:26 +0000
ROA not after:            Tue 07 Sep 2027 03:34:26 +0000
asID:                     265622
IP address blocks:        2806:3a3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:de:6b:08:56:e9:e0:1e:46:53:d5:69:59:67:d0:52:d7:9f:ea:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Sep  8 03:29:26 2026 GMT
            Not After : Sep  7 03:34:26 2027 GMT
        Subject: CN=63F497C8A99FA9FAEB1FA1B3303DDC3DE681633A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:40:17:fd:1e:0f:9e:ba:99:e4:9d:86:48:
                    0e:a0:ae:aa:ff:3b:c4:da:21:d7:0c:c2:73:d3:01:
                    b4:d0:4c:06:5f:6f:f9:e1:a2:cc:aa:0d:80:eb:0a:
                    3a:72:81:a0:58:07:f9:43:e6:ff:1d:e7:46:ba:8e:
                    ca:84:49:84:4a:3d:14:5d:b2:3b:15:90:7a:1a:d4:
                    a1:ed:ea:56:2c:0b:a6:e9:81:df:8b:e4:86:6d:fe:
                    18:89:93:1a:c1:a2:b5:fc:a6:16:fa:89:f4:aa:31:
                    9a:40:64:30:4c:09:e4:0a:db:d5:64:9f:a6:95:d9:
                    72:59:b9:6d:f5:8a:5c:dd:a0:37:81:be:47:cd:0e:
                    a3:89:0f:23:8b:24:d8:33:5e:2c:f3:50:61:9d:f3:
                    34:30:b3:28:4d:20:73:41:03:f3:8c:59:71:b4:1f:
                    a0:57:56:25:45:89:92:a1:31:0d:3c:74:91:d4:56:
                    91:b9:1b:a3:a9:6f:64:cc:1c:96:55:7f:8b:53:8a:
                    0a:40:e9:9a:8a:9f:84:a1:f6:60:49:c2:02:35:0a:
                    db:1e:e7:34:1f:e7:73:51:7e:36:24:85:24:16:74:
                    36:9b:97:94:45:a0:3f:51:cd:d3:71:7c:be:0c:cf:
                    c7:52:2c:25:23:f5:3c:46:e6:17:e2:ee:a2:33:cd:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:97:C8:A9:9F:A9:FA:EB:1F:A1:B3:30:3D:DC:3D:E6:81:63:3A
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33322d3332203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:52:48:b2:66:7c:64:a7:41:ac:04:a3:69:e2:4e:9f:a4:76:
         9e:d1:ad:3c:6d:44:04:07:ee:42:2f:24:a9:6c:fa:1c:cd:7d:
         0e:b0:5b:5c:3b:03:6c:1b:8a:e9:a8:a6:68:69:e4:82:d2:2a:
         2c:fb:aa:5f:c9:6f:40:88:04:b3:c8:4d:0b:72:9b:b7:b8:d6:
         b7:93:d9:a7:16:0c:44:ee:a2:d9:bf:ac:53:01:34:7c:8a:b6:
         bc:77:e7:27:cb:01:9e:eb:b0:6e:6d:9b:80:c7:17:15:37:23:
         99:9f:90:55:ad:02:db:5b:5a:30:fa:39:3e:8c:eb:97:2b:f2:
         9e:ae:92:37:35:89:42:62:ec:3b:71:b9:5a:c1:c4:00:39:5a:
         45:48:26:85:73:36:27:58:9f:5f:e4:aa:4f:a8:0d:38:6b:6c:
         1a:d8:bc:df:74:13:21:23:8c:5c:f1:8f:21:b9:40:c5:68:97:
         d4:42:cf:7b:fa:eb:b6:d0:f5:73:a1:18:60:53:8b:08:b0:0a:
         14:2c:ea:44:d4:4c:c1:00:cf:7a:5c:88:90:b8:92:a0:b6:07:
         bb:07:15:2f:1d:8f:7e:b3:32:a9:ca:91:37:78:53:9f:46:e4:
         28:68:57:e8:23:8c:d6:46:3c:fa:ea:4b:83:65:88:96:13:79:
         98:84:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:21:06 2026 by rpki-client