Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/323830363a3361313a3a2f33322d3438203d3e203238333934.roa
File:                     323830363a3361313a3a2f33322d3438203d3e203238333934.roa (raw, json)
Hash identifier:          VQ1rp2fuCJFgsIHiFbT/ZZ91bUZtgu1ks35dAn2z79U=
Subject key identifier:   35:9C:0D:B2:CA:69:80:9D:ED:DE:AB:84:7B:96:83:EC:7E:70:0A:7D
Certificate issuer:       /CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
Certificate serial:       3277D2EC66BA717C0D196CC1185A672133EAE9C8
Authority key identifier: EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/323830363a3361313a3a2f33322d3438203d3e203238333934.roa
Signing time:             Tue 22 Jul 2025 01:26:05 +0000
ROA not before:           Tue 22 Jul 2025 01:21:05 +0000
ROA not after:            Tue 21 Jul 2026 01:26:05 +0000
asID:                     28394
IP address blocks:        2806:3a1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 09:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:77:d2:ec:66:ba:71:7c:0d:19:6c:c1:18:5a:67:21:33:ea:e9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
        Validity
            Not Before: Jul 22 01:21:05 2025 GMT
            Not After : Jul 21 01:26:05 2026 GMT
        Subject: CN=359C0DB2CA69809DEDDEAB847B9683EC7E700A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:cc:0e:5a:c4:77:7a:a3:ff:2b:b3:8e:03:
                    a9:db:68:b5:c0:ae:a5:65:e8:4b:cc:01:28:95:84:
                    0f:ea:ad:79:b7:7d:7f:b7:f3:bd:ad:92:d5:c8:96:
                    d7:6c:93:d0:74:19:dc:d9:1d:45:b7:1e:40:97:0a:
                    b3:e4:ad:82:bd:02:2b:fe:9c:7b:37:d5:9f:f3:c5:
                    33:5f:f7:f0:bb:a7:6f:28:16:fc:80:e6:51:a5:6c:
                    07:d1:3b:c5:10:1e:eb:7a:6b:ff:4d:24:52:9b:fa:
                    e6:c8:af:77:d9:1a:21:ae:9b:4a:e9:73:ba:ba:de:
                    e3:2d:a0:e1:4d:fc:e2:41:25:86:ae:e9:59:09:4c:
                    e1:64:2e:2c:1e:32:51:d0:20:81:ea:d4:54:d2:b1:
                    64:0e:84:85:15:c7:69:e4:60:4b:98:b3:12:28:8e:
                    b8:5d:e7:a4:1f:e3:c8:14:8f:1f:ce:69:07:06:09:
                    75:48:fa:b9:1d:ea:dc:3a:75:5e:6e:bf:1f:fb:0d:
                    66:9b:71:78:e1:a9:be:33:ab:63:4c:cf:50:a5:fd:
                    21:71:96:69:f7:d3:6f:50:47:0b:d9:e9:72:51:30:
                    c4:d7:39:5d:47:b3:57:24:2d:0f:5b:c5:93:6f:cb:
                    a6:43:32:bd:bd:b5:4b:00:cf:d4:df:e8:58:dd:d0:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9C:0D:B2:CA:69:80:9D:ED:DE:AB:84:7B:96:83:EC:7E:70:0A:7D
            X509v3 Authority Key Identifier:
                keyid:EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/323830363a3361313a3a2f33322d3438203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a1::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:40:e5:87:9c:7b:c9:ad:44:1f:62:fc:ef:dd:83:29:de:
         51:72:33:be:c9:5a:36:3f:fe:a7:3a:5b:d1:7e:b7:79:53:48:
         e3:80:8f:ee:eb:2e:67:4e:a0:8c:82:0c:15:a7:81:2a:61:e4:
         4f:a0:7d:7a:87:70:a8:b8:60:b8:2c:dd:90:9c:ff:fc:86:a3:
         dc:44:84:7b:9c:39:38:12:bc:fb:71:89:0e:72:de:25:4a:e9:
         80:1f:80:dd:47:dd:02:c4:9b:f7:d3:00:5d:fe:28:f9:01:8e:
         9b:07:42:0e:9c:a5:fb:0e:d8:68:cf:6c:b6:ba:11:b0:c3:ab:
         76:31:3c:d0:dc:fd:80:1c:e6:3a:c4:96:2d:c8:71:93:08:f6:
         c0:13:c9:c6:ab:41:9f:07:7d:17:46:fd:cd:dc:d0:46:c4:00:
         a8:69:59:07:94:10:d6:b4:7a:99:69:a4:ed:df:55:96:a8:8e:
         7a:77:96:86:b6:5c:76:5d:4e:1c:80:74:2c:39:b3:80:1b:79:
         97:27:e5:e5:23:ad:e3:44:ec:33:75:11:44:6d:dd:3f:04:c4:
         54:8f:57:3b:7e:69:ef:a4:ca:86:ad:81:eb:19:62:29:7a:0d:
         c6:e6:ae:87:6a:86:91:7d:77:da:4e:9c:f3:95:7e:bf:56:93:
         99:8a:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:27:09 2025 by rpki-client