Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/323830363a3265353a3a2f33322d3438203d3e203632353530.roa
File:                     323830363a3265353a3a2f33322d3438203d3e203632353530.roa (raw, json)
Hash identifier:          ezTeqIcKB/hEUcWKYGkeqDYdJIBgQVMKQK6Ho62KWaQ=
Subject key identifier:   0D:50:BC:73:A4:DB:53:B7:2D:9A:BE:D2:72:E1:2B:84:F7:18:B2:AC
Certificate issuer:       /CN=B58A91D7FD2F1B52629EB7C1361419BF83601DB1
Certificate serial:       012194B1B541D34A11E988402F92853C35E49AB7
Authority key identifier: B5:8A:91:D7:FD:2F:1B:52:62:9E:B7:C1:36:14:19:BF:83:60:1D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/323830363a3265353a3a2f33322d3438203d3e203632353530.roa
Signing time:             Sat 12 Sep 2026 04:35:00 +0000
ROA not before:           Sat 12 Sep 2026 04:30:00 +0000
ROA not after:            Sat 11 Sep 2027 04:35:00 +0000
asID:                     62550
IP address blocks:        2806:2e5::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:94:b1:b5:41:d3:4a:11:e9:88:40:2f:92:85:3c:35:e4:9a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58A91D7FD2F1B52629EB7C1361419BF83601DB1
        Validity
            Not Before: Sep 12 04:30:00 2026 GMT
            Not After : Sep 11 04:35:00 2027 GMT
        Subject: CN=0D50BC73A4DB53B72D9ABED272E12B84F718B2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:90:58:4e:af:ed:9d:08:e8:8b:6c:09:7c:
                    7b:a2:a5:74:cf:9f:36:d1:8c:44:e9:cf:09:20:5c:
                    7e:77:9d:7e:2b:d2:d0:80:f1:34:37:a1:b6:79:3a:
                    12:aa:26:35:00:c7:6e:f6:c8:37:85:57:c9:59:39:
                    61:ba:33:63:87:30:29:ee:9f:99:84:4e:df:87:a1:
                    a4:20:59:fd:22:cb:4c:48:72:fa:4a:e5:ce:8b:f7:
                    85:3d:ea:56:48:a9:03:8c:15:a8:99:5b:28:2b:fb:
                    0d:d3:32:db:c4:61:36:93:90:55:bb:ec:01:fb:8f:
                    b1:7e:03:16:bc:46:70:2a:3a:79:25:39:37:3c:ed:
                    52:cb:8b:8e:43:db:8e:04:75:48:0d:34:15:6b:aa:
                    f8:7b:61:7c:76:11:89:3a:ce:b2:a0:38:8b:3f:47:
                    79:82:2b:6e:e8:86:13:1d:29:27:d2:5c:30:1f:87:
                    50:cb:33:b7:e7:57:1b:cd:a1:5c:47:a5:ef:fa:73:
                    c9:50:12:a8:29:49:91:fd:0f:3c:0e:a4:76:a9:14:
                    8c:4a:1f:4c:fb:45:25:97:69:38:04:1c:01:b2:28:
                    11:c1:e2:8f:4a:2b:9e:8e:a7:16:18:91:3c:c1:71:
                    f2:de:c9:d6:fd:02:d8:90:0e:8a:f8:6f:58:97:26:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:50:BC:73:A4:DB:53:B7:2D:9A:BE:D2:72:E1:2B:84:F7:18:B2:AC
            X509v3 Authority Key Identifier:
                keyid:B5:8A:91:D7:FD:2F:1B:52:62:9E:B7:C1:36:14:19:BF:83:60:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/323830363a3265353a3a2f33322d3438203d3e203632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2e5::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:9c:25:f5:9a:41:dc:cc:b1:e5:13:f8:88:d4:2a:75:20:
         f7:ca:1e:bd:a2:62:47:02:91:ed:28:ce:1e:ed:c5:6a:6a:85:
         c2:b0:f6:6f:42:e5:d2:96:9d:51:9d:e8:99:0a:8e:ad:c5:ab:
         e7:93:c4:4a:ba:72:b8:66:db:a2:07:d3:17:ab:6c:69:9b:5c:
         a3:64:f7:b3:0d:22:69:0e:57:a6:d1:ed:c9:2b:49:ef:3a:b7:
         04:c1:61:d0:89:c6:dd:c1:91:1a:f2:20:72:49:71:b9:b3:cd:
         16:20:4d:53:aa:97:b7:00:4a:84:63:43:84:c2:51:56:f9:8b:
         e4:9f:2b:fd:d2:60:d6:73:36:24:66:7e:2b:d7:41:e0:02:a7:
         ac:3c:07:2d:ea:a3:60:21:ac:7f:95:29:99:30:9c:72:74:8b:
         d9:81:a1:52:5d:63:ef:40:a9:4f:40:d0:b0:ce:a7:ec:a3:2f:
         f2:07:a6:f6:d4:62:96:d6:32:20:a8:60:4d:6f:80:15:5d:68:
         75:96:53:21:6e:45:43:a7:c8:a2:c5:1a:25:95:4d:1b:ca:fb:
         16:cd:ac:be:5a:2e:a7:5a:8a:f2:f2:6b:ee:ab:a4:af:fe:84:
         30:70:ef:c7:f7:82:bb:a8:b6:26:64:fa:dc:ae:16:91:e6:38:
         62:8b:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:59 2026 by rpki-client