Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/323830363a3432393a3a2f33322d3438203d3e20323732343035.roa
File:                     323830363a3432393a3a2f33322d3438203d3e20323732343035.roa (raw, json)
Hash identifier:          04uNrjD9SyoFrwTu2gLzy2dGE0C+WA5gVuPESuhnxDs=
Subject key identifier:   50:57:C8:96:92:57:5D:D2:B2:31:96:45:46:16:98:B1:EB:A8:14:42
Certificate issuer:       /CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663
Certificate serial:       2D027EB7C1A7C9453C6DE4A8512377B5DCEC61D2
Authority key identifier: EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/323830363a3432393a3a2f33322d3438203d3e20323732343035.roa
Signing time:             Fri 25 Jul 2025 01:26:37 +0000
ROA not before:           Fri 25 Jul 2025 01:21:37 +0000
ROA not after:            Fri 24 Jul 2026 01:26:37 +0000
asID:                     272405
IP address blocks:        2806:429::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 01:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:02:7e:b7:c1:a7:c9:45:3c:6d:e4:a8:51:23:77:b5:dc:ec:61:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663
        Validity
            Not Before: Jul 25 01:21:37 2025 GMT
            Not After : Jul 24 01:26:37 2026 GMT
        Subject: CN=5057C89692575DD2B2319645461698B1EBA81442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:c1:17:fb:ff:d5:f1:e1:cb:f0:11:eb:94:
                    e7:14:a1:ae:f3:47:de:4c:81:83:cf:85:df:d6:16:
                    23:a2:6b:38:e5:49:c9:fa:cf:47:3c:b4:3a:17:62:
                    0a:c6:04:17:8b:a1:58:21:ea:97:ff:58:70:56:5b:
                    43:f8:32:76:f5:a1:06:29:ac:fe:53:11:85:fc:a0:
                    79:f4:b9:44:18:f5:06:55:75:51:c2:67:b4:b0:8c:
                    b3:74:a7:bc:71:64:4a:79:8f:8d:ca:78:4a:3a:f3:
                    d9:72:38:4d:98:e8:63:a9:62:cf:82:ad:44:90:76:
                    18:f7:94:ec:e2:cf:1b:50:98:53:58:4d:f8:6d:8c:
                    e0:cb:a8:0c:ee:65:e8:b7:1a:58:b2:4f:41:d4:d5:
                    2b:bc:91:cf:c9:3e:13:76:51:6b:ad:65:bf:0f:85:
                    28:be:b8:3e:0d:f5:59:7d:17:51:ec:7e:84:8f:02:
                    e2:28:82:78:e4:9f:2c:68:08:a3:e9:d1:aa:87:f4:
                    4d:b8:be:1b:40:b9:59:48:13:ce:e7:7a:41:d0:93:
                    0c:1a:ce:70:d0:9f:ca:2a:b1:4a:bc:d8:81:aa:15:
                    f0:41:52:1e:80:e8:19:8b:46:1e:3a:60:38:7a:d5:
                    90:36:76:2d:d0:00:95:0a:ca:df:c4:6b:77:60:e8:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:57:C8:96:92:57:5D:D2:B2:31:96:45:46:16:98:B1:EB:A8:14:42
            X509v3 Authority Key Identifier:
                keyid:EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/323830363a3432393a3a2f33322d3438203d3e20323732343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:429::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:97:83:3a:66:e4:b6:9a:d7:62:82:24:39:9a:79:32:90:
         0d:5c:fe:e5:33:65:0f:aa:c9:b6:a1:69:7f:30:e2:14:b7:f7:
         f3:da:f2:ac:db:50:63:ce:14:a3:2f:69:ac:e7:87:5f:35:8b:
         12:21:4a:f5:03:23:35:7e:18:6a:9b:6f:49:fa:35:23:0c:cf:
         ab:83:e7:13:9c:65:6e:bd:43:69:b1:ed:89:e6:c3:17:3d:24:
         3b:8c:11:c6:ea:5e:c1:1d:8c:d6:56:1d:77:c0:29:22:76:77:
         9e:d0:d7:6c:8d:9f:f2:bc:3f:c3:cd:b4:df:38:2d:89:a8:05:
         26:7e:8d:7b:e2:3f:4f:49:ff:69:b7:b8:a8:f9:27:f2:12:5c:
         48:7d:95:2e:2d:dd:53:11:2d:d6:43:b5:f6:77:5a:e1:a4:b0:
         72:04:33:d1:cb:1c:7c:5e:68:cd:e4:07:d4:50:e9:58:bf:5d:
         8f:78:92:43:e1:f7:69:b5:16:d1:4a:0c:05:b5:ab:8f:d3:a1:
         77:23:59:35:10:2d:1c:c5:9a:f0:0a:93:26:ce:52:a7:24:5c:
         49:69:d2:12:69:ea:c4:9c:26:ff:3f:af:3a:4c:76:cf:f8:b4:
         b0:68:c2:9b:d8:cb:63:c5:d2:18:29:19:2d:37:3c:21:41:cb:
         b8:76:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:20:01 2025 by rpki-client