Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/323830363a3431333a3a2f33322d3438203d3e20323732333632.roa
File:                     323830363a3431333a3a2f33322d3438203d3e20323732333632.roa (raw, json)
Hash identifier:          yh3UQc5eK2n3FqiAucYQZ0OpUDaraww1CioRJgfe1mA=
Subject key identifier:   94:97:6A:90:F6:38:6C:D8:E8:2A:DB:59:26:27:42:C2:7C:F7:E5:C6
Certificate issuer:       /CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
Certificate serial:       77FB0923602B06EBCB2BBEF3CF6B711F2C072916
Authority key identifier: 54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/323830363a3431333a3a2f33322d3438203d3e20323732333632.roa
Signing time:             Tue 28 Jul 2026 17:51:17 +0000
ROA not before:           Tue 28 Jul 2026 17:46:17 +0000
ROA not after:            Tue 27 Jul 2027 17:51:17 +0000
asID:                     272362
IP address blocks:        2806:413::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:09:23:60:2b:06:eb:cb:2b:be:f3:cf:6b:71:1f:2c:07:29:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
        Validity
            Not Before: Jul 28 17:46:17 2026 GMT
            Not After : Jul 27 17:51:17 2027 GMT
        Subject: CN=94976A90F6386CD8E82ADB59262742C27CF7E5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:9a:14:1d:12:3e:a7:6f:f2:a9:97:34:a9:
                    52:4c:22:11:3c:49:f3:53:e0:a4:1b:85:82:9b:f8:
                    0b:f5:be:1d:3c:ac:f5:b8:32:91:19:77:00:02:cd:
                    50:00:51:11:69:32:6a:a0:9c:79:fe:0f:9f:4c:6b:
                    44:02:4d:ce:7a:9a:24:bc:e1:c3:b4:6e:d5:51:22:
                    67:82:95:21:13:c1:95:5b:ec:73:8d:fb:55:3b:7e:
                    0b:99:22:f0:38:64:f2:8c:fb:27:f6:8d:4a:b5:3c:
                    8f:0d:31:47:52:8a:d9:2e:c8:b7:2e:27:c6:4d:f0:
                    74:6d:23:8c:1b:57:d3:73:3c:0d:e5:4c:55:36:56:
                    a6:f7:11:71:1c:55:a2:4c:02:d4:d6:53:9e:26:4e:
                    a0:f4:b5:8d:5e:1e:2f:00:6b:63:79:93:0c:da:22:
                    b3:47:27:44:fe:63:d6:25:5c:e5:94:f4:b8:6a:e0:
                    b8:b8:64:9a:c7:ee:fa:17:b1:5f:97:4f:94:8c:de:
                    01:9c:c0:3e:79:24:82:36:2a:13:9d:a1:5a:91:0f:
                    ab:68:f3:5b:83:98:fb:1f:f1:f6:2f:12:1f:60:75:
                    34:9f:f6:2d:bf:36:22:57:c1:81:38:d9:23:07:88:
                    19:a4:e9:54:35:49:97:25:77:c1:75:00:e7:e1:b5:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:97:6A:90:F6:38:6C:D8:E8:2A:DB:59:26:27:42:C2:7C:F7:E5:C6
            X509v3 Authority Key Identifier:
                keyid:54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/323830363a3431333a3a2f33322d3438203d3e20323732333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:413::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:90:cf:12:2b:b0:54:9e:e4:17:3e:69:43:7f:a6:3c:00:f6:
         e5:c3:70:a0:f9:fa:f8:c3:8f:aa:d7:58:90:45:81:19:2e:55:
         42:9f:1e:69:32:9f:49:f7:29:85:96:2d:25:37:9e:41:72:14:
         5f:70:93:7b:62:78:d6:05:04:31:dd:12:65:95:12:54:fd:80:
         ef:9d:2b:d7:0a:78:13:8a:a2:93:60:36:e9:83:00:4d:e7:10:
         bb:91:70:22:1b:d3:d2:7d:3c:4a:06:b7:d0:35:7d:29:2b:79:
         e8:ad:72:15:67:bd:22:aa:58:29:47:2e:da:9a:4b:db:ac:ef:
         31:92:91:8d:3d:79:91:a7:8c:61:0c:07:b2:77:96:05:18:7d:
         26:ef:2a:1e:65:33:24:bc:be:89:d3:ab:78:be:bb:98:12:ee:
         c6:ac:46:82:2c:11:07:99:54:d5:e1:f4:07:70:e3:bf:89:9d:
         e1:66:a0:c0:dd:8b:6d:da:1b:58:3b:16:2a:a2:05:18:e1:33:
         3e:f3:ae:d4:69:cd:49:ec:cd:5c:bd:ed:21:41:69:14:d4:1d:
         96:53:51:d4:08:a7:6d:d3:12:76:fe:46:5e:98:d2:4c:be:03:
         96:dc:18:d5:92:de:ff:82:22:c2:2d:97:cc:9c:8c:cf:ab:1e:
         7b:aa:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:21:18 2026 by rpki-client