Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa
File:                     323830363a3231373a3a2f33322d3332203d3e203238333934.roa (raw, json)
Hash identifier:          FXknVxNPT5LYbdPpdHBuWLg+h+5sHKCVghfPHeZGevY=
Subject key identifier:   23:14:F9:14:89:19:BA:A5:94:9B:0D:A5:F6:7D:8B:68:FA:90:13:E4
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       5B5222EC75E17422F47823E2B27FFF5D90C4C978
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa
Signing time:             Mon 21 Jul 2025 19:25:59 +0000
ROA not before:           Mon 21 Jul 2025 19:20:59 +0000
ROA not after:            Mon 20 Jul 2026 19:25:59 +0000
asID:                     28394
IP address blocks:        2806:217::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:52:22:ec:75:e1:74:22:f4:78:23:e2:b2:7f:ff:5d:90:c4:c9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jul 21 19:20:59 2025 GMT
            Not After : Jul 20 19:25:59 2026 GMT
        Subject: CN=2314F9148919BAA5949B0DA5F67D8B68FA9013E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:a3:e6:24:82:b0:b3:1b:e1:16:dc:55:2f:
                    4f:34:9d:c7:31:ac:fb:0e:8f:4e:bf:8c:b6:39:f5:
                    24:46:1f:b6:e4:f8:25:92:62:5f:24:85:e3:d6:b5:
                    d6:ed:f4:46:64:1f:5c:ba:ed:91:d9:25:c7:d1:e1:
                    ed:e1:e7:67:54:85:f3:2c:3d:f6:b9:01:c1:b8:6f:
                    d2:44:7e:a1:5f:1a:34:35:f8:77:58:9c:3b:ed:4b:
                    e8:5a:9c:be:9a:70:f4:f1:e3:0f:f9:1d:f5:66:a9:
                    46:3c:be:e9:94:65:d6:68:5b:c3:4f:25:e4:f2:59:
                    c7:85:18:07:e1:99:f8:fa:f2:f4:a6:08:4b:2e:d7:
                    14:f5:ce:bc:36:07:7d:62:cd:d2:21:59:cc:7a:57:
                    4a:67:73:42:28:e8:3e:2d:7e:64:b0:a2:54:7a:50:
                    9f:72:5f:93:04:f1:2a:74:c5:85:6c:7b:71:b3:a7:
                    c8:68:8c:86:b6:56:a0:1b:52:80:bd:f4:93:af:3d:
                    bb:a4:d0:01:29:08:15:e0:bb:b7:50:92:9f:6a:e2:
                    ae:14:73:c9:41:3f:1b:21:35:c6:d1:f2:66:25:df:
                    e8:7d:1b:89:18:24:6a:0a:70:6e:b7:de:a6:e3:90:
                    99:40:67:c7:89:09:e0:1f:dc:2c:a6:af:56:c0:89:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:F9:14:89:19:BA:A5:94:9B:0D:A5:F6:7D:8B:68:FA:90:13:E4
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:217::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:1b:2a:0b:df:e3:74:dc:6e:28:a9:70:d4:e4:b7:d3:13:
         dc:62:bd:b6:87:60:e0:65:4b:1f:b0:cd:80:e8:90:f3:62:70:
         4e:09:30:78:66:3c:4c:a5:66:cf:8c:ca:f7:a5:01:e8:7e:68:
         6f:ac:a0:a3:4a:6a:87:3f:a1:2f:32:d7:46:61:8a:39:91:3c:
         bc:08:92:35:dc:54:6b:cb:ca:55:f5:14:9a:a6:30:67:72:bc:
         62:e5:64:23:be:c4:98:85:29:2e:97:7e:5b:45:49:22:ff:63:
         08:c8:35:80:37:65:e4:e6:3d:98:ed:fd:8b:c5:eb:96:ca:8a:
         0c:42:91:c8:c0:02:95:59:34:7c:40:95:a3:d8:10:6c:e8:5b:
         d4:3b:6b:91:bf:c4:81:8f:5a:04:7e:9e:57:f2:76:96:7b:f3:
         f2:57:63:19:7c:80:8b:0f:13:fd:54:8d:c0:4c:f1:a4:cb:1b:
         f9:63:78:37:a5:7c:e2:99:c1:c9:1a:90:9b:35:0d:b1:85:7c:
         55:59:cc:e9:cf:8c:6e:98:6e:37:f7:d9:94:72:ee:a5:e5:5e:
         0c:2c:a4:b0:6b:f7:4f:5e:eb:ae:14:7a:d2:dd:0f:ff:84:34:
         80:5c:76:4d:e4:40:e1:21:c8:3e:bf:a1:36:59:23:de:84:b0:
         35:cc:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:20:07 2025 by rpki-client