Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a3a2f33322d3332203d3e20323732333932.roa
File:                     323830363a3432333a3a2f33322d3332203d3e20323732333932.roa (raw, json)
Hash identifier:          aQ+fGvrIGtdQBiXSg55vCtPS1kOfoTlmtP5GjoWnWp8=
Subject key identifier:   4D:23:02:17:FE:37:8A:66:19:F0:D3:31:A7:BC:75:E8:60:75:73:E1
Certificate issuer:       /CN=A2E4158981CDF250DCA3053985B97F1CEBAF18AA
Certificate serial:       51A03CD2B034A35C72583E440D4ACCAAED5C94DF
Authority key identifier: A2:E4:15:89:81:CD:F2:50:DC:A3:05:39:85:B9:7F:1C:EB:AF:18:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a3a2f33322d3332203d3e20323732333932.roa
Signing time:             Tue 03 Jun 2025 19:20:56 +0000
ROA not before:           Tue 03 Jun 2025 19:15:56 +0000
ROA not after:            Tue 02 Jun 2026 19:20:56 +0000
asID:                     272392
IP address blocks:        2806:423::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:3c:d2:b0:34:a3:5c:72:58:3e:44:0d:4a:cc:aa:ed:5c:94:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E4158981CDF250DCA3053985B97F1CEBAF18AA
        Validity
            Not Before: Jun  3 19:15:56 2025 GMT
            Not After : Jun  2 19:20:56 2026 GMT
        Subject: CN=4D230217FE378A6619F0D331A7BC75E8607573E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:d6:f1:98:55:11:93:55:b8:8c:57:34:76:
                    c0:26:95:d8:7d:d1:35:d1:59:3a:79:33:2c:ec:53:
                    15:cc:31:f0:dd:12:c0:41:e8:85:2a:12:d2:e6:8e:
                    7d:d9:8b:af:64:ad:d4:61:a2:0c:ff:31:29:c4:35:
                    78:6c:48:97:27:44:74:b4:44:04:48:ad:fc:a1:fe:
                    c8:76:db:b9:ff:ed:51:02:3a:09:c1:79:d3:8f:10:
                    22:4c:ba:38:52:cf:99:46:0a:bc:fe:32:dc:dd:11:
                    b8:a5:d7:23:d3:69:b2:a4:c6:db:0c:b1:1a:bf:58:
                    ab:98:90:a9:dc:f0:74:69:d7:d9:59:48:df:02:e5:
                    8d:c8:4a:bd:c8:a9:57:85:69:01:7d:75:c6:40:96:
                    32:df:3b:cf:7e:0a:c3:f1:49:a6:42:c4:b9:1a:bd:
                    fc:4d:55:df:a0:18:ba:ec:77:13:6d:db:bf:7a:a5:
                    7b:d3:23:16:1f:fe:9a:b8:f2:3d:7d:13:6e:75:84:
                    53:cd:43:6b:29:5d:52:3d:24:bb:4a:b3:83:78:68:
                    34:e8:21:60:55:c7:c3:c0:2c:2d:41:35:22:b1:a0:
                    d9:4e:60:e8:e8:93:5f:d6:88:24:2d:3b:3b:92:8e:
                    ef:4a:79:12:31:a2:e6:ab:05:fa:86:d7:2b:82:38:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:23:02:17:FE:37:8A:66:19:F0:D3:31:A7:BC:75:E8:60:75:73:E1
            X509v3 Authority Key Identifier:
                keyid:A2:E4:15:89:81:CD:F2:50:DC:A3:05:39:85:B9:7F:1C:EB:AF:18:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a3a2f33322d3332203d3e20323732333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:423::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:88:83:3d:fe:c2:cb:42:7d:a9:fa:87:cf:69:97:61:25:d1:
         3c:53:75:76:a5:98:d1:2f:3c:ba:c9:77:b1:87:b5:a4:90:6b:
         1d:d2:76:15:f1:98:8f:1f:09:84:79:00:ab:ca:42:18:a4:64:
         d0:a8:6a:41:cb:ee:32:01:e9:32:74:75:88:0c:53:13:b4:a6:
         40:82:c8:31:03:53:05:6d:97:3b:9a:22:63:19:a7:d0:f8:83:
         58:ff:2d:b3:56:de:c7:95:ab:0a:a2:f4:df:5b:9b:31:3d:c5:
         fe:32:7e:35:91:49:37:af:47:09:28:54:bc:42:5d:71:cc:ef:
         16:9f:5e:5a:bd:1b:dc:15:3b:c0:23:8e:7f:7e:a2:c1:30:47:
         a0:48:9c:64:d9:7b:00:d7:f6:ad:ee:5f:c3:73:c4:9a:c3:93:
         ea:56:28:ba:de:ad:40:0e:67:23:cc:5b:25:1d:ad:48:cb:56:
         7d:b0:df:20:8f:ed:95:ee:9c:92:21:2b:8f:4e:b8:c8:c7:50:
         be:85:48:fe:fc:e4:3b:45:eb:77:81:91:5b:7c:b9:46:a2:b6:
         0a:80:1e:eb:5b:85:59:70:48:55:79:c9:2a:31:83:93:53:09:
         d8:05:b6:a1:08:d3:6c:da:5b:05:c8:51:8f:e3:de:af:b0:af:
         e5:98:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:04:55 2025 by rpki-client