Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33352d3335203d3e20323635363232.roa
File:                     323830363a3361333a3a2f33352d3335203d3e20323635363232.roa (raw, json)
Hash identifier:          WcagTZs3kfc/DmI76obNHlnT09SOQsMV6iwgcWl2Abw=
Subject key identifier:   8A:AB:E9:5E:52:22:FE:2A:68:E1:4D:62:25:A1:C6:D3:A4:84:0E:76
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       5FB9CECC15CE4673F6922B1E0D6BA594A2731338
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33352d3335203d3e20323635363232.roa
Signing time:             Tue 08 Sep 2026 03:34:27 +0000
ROA not before:           Tue 08 Sep 2026 03:29:27 +0000
ROA not after:            Tue 07 Sep 2027 03:34:27 +0000
asID:                     265622
IP address blocks:        2806:3a3::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b9:ce:cc:15:ce:46:73:f6:92:2b:1e:0d:6b:a5:94:a2:73:13:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Sep  8 03:29:27 2026 GMT
            Not After : Sep  7 03:34:27 2027 GMT
        Subject: CN=8AABE95E5222FE2A68E14D6225A1C6D3A4840E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:03:4d:33:c9:08:b1:7b:2c:46:8c:aa:ed:
                    61:d6:a4:1f:ea:0e:db:fa:fb:7b:54:2f:d6:d1:3a:
                    d5:49:1a:4f:be:c8:21:c3:23:5f:8f:7b:96:f2:93:
                    0e:5a:b4:f5:bd:60:17:24:d0:89:2a:74:cb:da:5a:
                    14:b4:8d:2b:c1:a0:49:96:ca:8b:07:b8:1e:3e:34:
                    e6:d0:f5:4b:bd:02:15:04:33:23:74:21:71:b4:96:
                    9c:c2:e0:93:f7:ea:0d:bb:76:39:13:cd:40:8c:b4:
                    9f:f5:1e:58:d4:a3:8b:b5:dc:47:91:7b:3d:0c:5f:
                    3e:27:52:2e:c1:5d:f1:1b:32:56:4b:e9:6c:f6:69:
                    8e:e0:8a:49:ff:85:e9:5b:62:1a:88:59:76:3b:82:
                    c5:8c:c1:57:67:07:d0:66:99:22:7e:d3:7f:31:26:
                    bc:b9:a7:2c:6e:ef:f9:fa:65:c9:dc:82:58:2d:8c:
                    31:6e:a8:45:38:c4:04:e8:23:8f:52:b4:b9:44:b5:
                    75:72:08:24:90:7e:0c:8b:94:c9:59:8e:af:b2:80:
                    c8:f5:bd:0b:60:b7:14:67:6e:ca:63:30:7e:71:ad:
                    1a:23:99:40:78:1e:d9:4b:d3:08:98:88:3d:f5:74:
                    27:30:88:b3:bf:0b:32:bd:aa:05:6c:99:d7:aa:89:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AB:E9:5E:52:22:FE:2A:68:E1:4D:62:25:A1:C6:D3:A4:84:0E:76
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33352d3335203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3::/35

    Signature Algorithm: sha256WithRSAEncryption
         17:f3:88:af:9f:22:55:5b:98:7c:71:a3:2e:52:3c:7e:b4:91:
         43:7b:bd:9b:1d:d4:56:32:34:f7:24:05:ae:b3:02:ea:ba:a4:
         38:1b:93:9e:6b:cd:79:6d:65:a6:15:8d:e3:f8:3d:a9:c2:b4:
         e1:31:9e:54:a0:8b:26:bd:e5:6c:25:6a:e7:5f:fc:74:bf:03:
         04:e2:62:27:51:f8:2d:9b:c1:42:50:f1:7f:0d:b2:3d:44:74:
         34:07:6c:81:09:4e:86:ce:87:ea:69:8f:c9:49:c8:33:4d:cf:
         60:dc:b6:66:8f:f6:35:6e:a8:b0:ee:da:b3:3f:d7:53:02:c9:
         ad:76:ca:0b:60:9f:0a:28:0f:f3:37:97:33:b8:0a:e1:6c:23:
         fe:5e:d1:ed:0d:f6:4e:98:fd:0d:e2:59:71:b6:15:a8:b1:c1:
         de:51:cd:a2:32:60:89:23:12:8b:37:4a:6d:56:42:5f:53:be:
         bb:c6:67:e7:10:e2:83:22:c9:c3:2f:78:6c:e3:61:0e:84:a7:
         18:3b:80:4c:4f:e0:33:4b:a9:d0:99:9e:64:d1:dc:a0:88:e2:
         8a:8d:c7:10:2a:9a:6f:22:a2:96:ad:b4:67:c7:39:cb:3a:cc:
         fe:59:31:9c:72:1f:0f:b2:f5:84:49:aa:d2:32:c7:13:b0:55:
         7e:91:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:21:02 2026 by rpki-client