Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3438203d3e203238333934.roa
File:                     323830363a3231373a3a2f33322d3438203d3e203238333934.roa (raw, json)
Hash identifier:          t8tQAxHK5SM0hJcnJTUNhCO83Gm9y+i54W9HMI+9QI0=
Subject key identifier:   47:2C:C2:35:A3:49:EF:A7:64:0F:03:96:83:4D:98:E6:6E:CE:50:30
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       5797CA5F687C41EEB7DCDE58066E8A6D655C7703
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3438203d3e203238333934.roa
Signing time:             Tue 22 Jul 2025 01:26:08 +0000
ROA not before:           Tue 22 Jul 2025 01:21:08 +0000
ROA not after:            Tue 21 Jul 2026 01:26:08 +0000
asID:                     28394
IP address blocks:        2806:217::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:97:ca:5f:68:7c:41:ee:b7:dc:de:58:06:6e:8a:6d:65:5c:77:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jul 22 01:21:08 2025 GMT
            Not After : Jul 21 01:26:08 2026 GMT
        Subject: CN=472CC235A349EFA7640F0396834D98E66ECE5030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:0c:eb:2f:5a:82:1e:6b:86:96:57:21:95:
                    d6:45:ee:84:1a:70:6c:75:bb:72:b0:c2:f6:6c:35:
                    26:c6:8e:af:21:96:00:e9:40:a9:bb:34:1d:cf:fd:
                    5a:42:5f:24:dc:32:99:01:f4:31:02:c7:b0:98:2d:
                    58:18:bd:ce:69:bd:4c:31:26:c8:a8:61:a8:cf:26:
                    c0:e8:34:cf:2c:36:a8:a3:cf:58:eb:a7:4d:ad:2a:
                    66:88:a9:b8:79:3b:c2:97:08:1d:46:95:59:5e:bb:
                    64:98:b1:e2:ba:d1:b0:1e:87:06:64:5e:4d:b2:55:
                    2e:b8:93:7c:fb:61:21:1f:92:c5:7c:8f:06:59:ef:
                    ee:42:cd:c7:82:e5:df:35:2f:15:f2:35:4b:a2:4d:
                    c1:f9:49:5e:7e:6a:92:db:df:0f:8e:d6:1a:5b:27:
                    e2:41:1b:6e:8a:75:9b:fc:73:32:42:03:d0:84:15:
                    20:ff:63:c8:35:e2:61:22:75:63:69:4c:24:2e:fb:
                    5c:71:44:fb:c2:eb:a2:77:f8:af:e9:61:78:b8:b3:
                    fb:6d:ba:82:d1:3c:97:c2:91:d1:0f:fc:2f:23:cb:
                    6a:23:7f:ab:c8:2b:c6:fe:c0:cb:80:b6:5c:a4:1b:
                    05:bf:b0:56:07:c3:42:0f:cb:a7:6a:b9:a6:47:7f:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:C2:35:A3:49:EF:A7:64:0F:03:96:83:4D:98:E6:6E:CE:50:30
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3438203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:217::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:41:09:ee:1f:43:4f:73:47:00:11:ae:91:9b:89:49:f6:d9:
         be:2b:b8:91:f0:b0:70:94:76:2b:83:50:72:b5:c4:49:5b:4c:
         0f:4f:47:8e:c8:51:da:48:39:c4:35:b9:80:cf:d3:b5:96:f7:
         90:b9:ff:88:62:da:df:e3:a6:fd:32:b1:49:c6:30:73:0c:49:
         0f:97:ed:1a:25:18:22:ee:8d:ed:b3:fd:bf:2b:fd:0f:1b:14:
         40:19:2f:0f:3b:9b:45:18:8c:6b:0e:fe:1f:70:3c:f4:91:d3:
         7e:36:ed:78:38:fc:8d:83:e1:72:8c:05:4c:2f:18:1b:d7:a2:
         7f:aa:3f:b0:6c:ff:34:04:73:a0:9d:0d:79:42:00:23:40:16:
         29:5f:42:27:65:db:98:4a:c4:67:b8:de:3f:25:13:b2:ec:dc:
         0c:de:5f:7f:6f:03:1f:5b:47:be:73:c8:98:eb:7a:76:61:c9:
         24:22:68:b8:e1:ec:1c:75:92:63:58:aa:3e:8e:93:91:34:e1:
         03:bf:97:a0:62:6d:69:c9:df:17:6b:a0:18:05:42:98:2e:77:
         6b:93:1e:90:3d:3c:d8:31:91:26:3c:d8:31:11:ce:3e:16:0e:
         c7:d3:88:97:da:2c:b4:aa:0b:41:9e:ae:a2:05:6b:6b:66:29:
         2b:88:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:20:12 2025 by rpki-client