Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/323830363a3238323a3a2f33322d3438203d3e20323635353039.roa
File:                     323830363a3238323a3a2f33322d3438203d3e20323635353039.roa (raw, json)
Hash identifier:          aGwMn/jkWoYln1It0pytz7+CSSaV3nT4r5yYspkudCk=
Subject key identifier:   2C:BC:8F:D9:AD:5C:4E:23:F5:02:8E:17:9A:54:72:FB:06:C0:D1:58
Certificate issuer:       /CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD
Certificate serial:       776AA4E9EFBAEB59FFE39FA143AB9E61DAD6B65F
Authority key identifier: 5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/323830363a3238323a3a2f33322d3438203d3e20323635353039.roa
Signing time:             Tue 04 Feb 2025 18:04:18 +0000
ROA not before:           Tue 04 Feb 2025 17:59:18 +0000
ROA not after:            Tue 03 Feb 2026 18:04:18 +0000
asID:                     265509
IP address blocks:        2806:282::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:a4:e9:ef:ba:eb:59:ff:e3:9f:a1:43:ab:9e:61:da:d6:b6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD
        Validity
            Not Before: Feb  4 17:59:18 2025 GMT
            Not After : Feb  3 18:04:18 2026 GMT
        Subject: CN=2CBC8FD9AD5C4E23F5028E179A5472FB06C0D158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:70:3d:8f:47:a9:79:7f:bd:79:48:63:36:
                    41:6d:c3:45:95:7b:ad:c7:29:56:3e:1b:f6:02:cc:
                    35:a8:9b:d7:8b:b4:37:ce:b9:6a:fe:84:c7:73:41:
                    0e:4e:0b:81:3b:36:7c:77:0d:db:90:07:08:1d:00:
                    b7:f9:b0:0c:76:f9:43:f5:59:a6:b4:8f:59:e9:ea:
                    cd:e5:f5:6e:87:86:ca:60:5c:2f:44:6d:a9:1f:e9:
                    39:bd:42:ce:6e:9d:b5:76:82:06:fd:63:3f:86:3b:
                    40:55:e8:25:07:7a:fc:31:08:22:15:4c:51:9a:c0:
                    6f:b3:6c:c6:7f:2d:ad:79:d8:d0:9c:94:d4:cc:25:
                    d1:ae:3e:7d:46:a8:29:98:ce:25:40:ad:28:dd:9c:
                    cd:30:96:b1:44:c2:85:37:05:39:3e:0a:2c:e2:57:
                    93:ce:d1:d7:12:c3:b6:e4:03:70:58:17:13:a6:6a:
                    67:4e:b5:6a:54:d7:d6:f9:e1:3d:66:bc:a1:a8:15:
                    91:9a:c1:69:f0:90:98:1d:a8:fa:78:28:9e:e6:23:
                    d1:3f:eb:e9:f4:62:a0:9a:1b:00:b9:3c:5a:64:36:
                    3e:8d:f4:d3:bd:44:d9:fe:b6:ae:29:24:bb:72:63:
                    ee:87:4f:ad:0d:90:b3:7e:47:02:9d:82:1b:ed:2f:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BC:8F:D9:AD:5C:4E:23:F5:02:8E:17:9A:54:72:FB:06:C0:D1:58
            X509v3 Authority Key Identifier:
                keyid:5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/323830363a3238323a3a2f33322d3438203d3e20323635353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:282::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:47:2d:43:f3:cf:d0:35:e9:00:73:0e:8e:9f:92:3d:0a:7f:
         f8:48:5d:78:6e:fa:a6:ce:c0:4c:1c:ff:6c:4c:02:18:7a:8c:
         6e:41:b9:78:ae:bd:3f:ab:83:b0:47:dd:9d:e8:fb:2d:ce:a9:
         cd:bd:93:39:ce:9f:44:f7:87:3a:b5:fa:6d:fe:bb:c5:c1:b7:
         3e:95:ff:5c:ae:86:76:74:0f:38:d8:75:e9:67:4f:c9:64:76:
         b0:53:45:b3:83:2e:fd:06:52:3b:2d:04:80:a5:c9:17:ab:43:
         2b:98:44:db:44:0e:e1:44:82:37:3a:6c:af:3a:64:d4:a9:19:
         b9:98:13:3c:80:dc:35:17:93:92:ec:d0:4c:b9:17:99:52:b1:
         cc:32:f7:b8:8f:bc:c3:e7:18:1d:ab:85:58:6f:6b:28:31:35:
         71:07:7d:9e:0a:f5:ee:57:d9:7b:75:dd:e9:b6:f0:df:6f:9b:
         14:69:54:70:ce:1f:f8:61:39:ff:c1:d7:70:31:8d:6f:92:14:
         ca:74:be:a3:93:e1:42:59:cd:af:39:1e:7b:5f:95:a0:5f:ed:
         d6:84:16:5a:c0:c2:ec:cd:2b:ed:32:9a:06:56:b1:ef:05:09:
         0a:c2:c4:cc:cc:54:e6:5b:58:f9:ff:82:79:d4:c7:0b:32:5b:
         89:80:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:05:32 2025 by rpki-client