Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/323830363a3366353a3a2f33322d3438203d3e20323730313837.roa
File:                     323830363a3366353a3a2f33322d3438203d3e20323730313837.roa (raw, json)
Hash identifier:          VFAlc0cePVLu4upHkJORWa3QVlOImUDpD1tBIBNFF7Q=
Subject key identifier:   72:FE:A8:59:3A:B5:86:1A:36:29:1D:5B:61:A4:52:33:7C:16:EF:9A
Certificate issuer:       /CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
Certificate serial:       0FBCD40F17632394F730D2139AF86624FD4D56BE
Authority key identifier: 20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/323830363a3366353a3a2f33322d3438203d3e20323730313837.roa
Signing time:             Mon 25 Aug 2025 17:45:00 +0000
ROA not before:           Mon 25 Aug 2025 17:40:00 +0000
ROA not after:            Mon 24 Aug 2026 17:45:00 +0000
asID:                     270187
IP address blocks:        2806:3f5::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bc:d4:0f:17:63:23:94:f7:30:d2:13:9a:f8:66:24:fd:4d:56:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
        Validity
            Not Before: Aug 25 17:40:00 2025 GMT
            Not After : Aug 24 17:45:00 2026 GMT
        Subject: CN=72FEA8593AB5861A36291D5B61A452337C16EF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:29:2c:92:44:5f:c3:f4:c6:2b:dd:dd:5b:
                    ea:6b:c3:cc:89:18:67:5d:63:0b:af:70:22:30:7e:
                    01:44:37:8c:46:7b:40:f7:dd:95:80:a1:b7:67:44:
                    e1:76:9b:83:06:4f:e1:60:75:e7:78:8d:79:93:48:
                    28:48:27:8d:47:f0:1a:41:1e:b8:28:fd:c7:0b:ac:
                    00:56:73:6f:97:a6:7f:c2:73:a0:04:e7:c3:b9:77:
                    43:32:a7:ea:de:77:50:95:40:21:50:76:74:15:56:
                    43:0b:43:3d:88:ad:86:ed:b1:64:b6:ef:6b:c7:a4:
                    ff:35:69:ab:c5:3f:f3:de:db:b0:6a:18:59:fc:da:
                    df:91:5b:96:30:44:d1:53:2d:00:8d:55:a4:2b:d5:
                    c0:5a:57:ca:ce:01:1c:24:22:4e:80:5e:18:af:e8:
                    8c:08:c2:8e:fa:68:9d:a3:b3:c4:2a:97:ec:98:dd:
                    19:53:63:ed:37:a2:45:e7:23:e6:c4:64:10:d0:f7:
                    cb:85:3f:9b:9a:90:e2:2f:62:85:33:f3:4d:f3:f9:
                    a0:6d:93:18:ed:54:13:71:0b:18:4a:34:24:26:54:
                    3f:49:b8:9f:ed:11:b3:4e:95:16:17:fa:e7:21:31:
                    0b:83:ee:2a:fc:20:aa:69:1d:0c:e1:32:5e:de:70:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FE:A8:59:3A:B5:86:1A:36:29:1D:5B:61:A4:52:33:7C:16:EF:9A
            X509v3 Authority Key Identifier:
                keyid:20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/323830363a3366353a3a2f33322d3438203d3e20323730313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f5::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:b4:cf:e2:b7:ce:55:ac:ec:16:11:c6:e8:ce:2b:c3:b1:
         e7:5f:07:ed:46:c9:7a:a6:ba:87:a4:0d:f9:43:1e:9d:36:dc:
         70:f5:58:c8:cc:5e:65:13:60:e8:58:10:cf:2b:0d:b3:26:61:
         f4:ec:46:37:24:3c:53:92:51:70:56:74:63:a0:2c:55:0b:56:
         5a:68:f8:a4:55:65:54:01:a4:bf:3f:70:f2:5c:ba:b9:78:c9:
         43:1c:ce:59:38:33:fe:53:12:d3:5f:fe:8a:e2:1f:17:c8:22:
         dc:29:4b:ac:de:a9:01:8b:9c:b6:09:0c:33:ad:6b:70:e0:36:
         3d:b3:25:cc:70:45:4b:35:69:e9:f4:bc:d1:03:5d:17:ca:e6:
         81:b3:9c:d0:4c:bf:c7:fe:bc:c4:26:a5:dc:51:82:ff:47:b0:
         89:e9:da:77:aa:8a:fb:3d:3e:c9:b3:30:de:49:c9:c7:4a:11:
         02:fe:20:9a:7e:49:7e:c5:56:5a:e6:a0:11:c4:fa:3e:b3:21:
         25:53:ae:7a:47:3b:7a:b6:8e:61:39:42:af:07:83:7e:4b:8a:
         e8:24:36:35:51:25:18:ec:c4:9f:c3:cd:65:fe:89:96:6e:e7:
         e6:53:e4:b0:02:bd:c7:94:0c:c8:b9:ad:bd:85:b2:f2:a5:37:
         22:22:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:51:00 2025 by rpki-client