Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C52A88D72316C40BA7C935D2E03770408DEAA2E0BCD2D22512004458F9F0FC2/0/323830363a3333653a3a2f33322d3332203d3e20323635353733.roa
File:                     323830363a3333653a3a2f33322d3332203d3e20323635353733.roa (raw, json)
Hash identifier:          t5Hhd4SQnaGA+p8EMokMcnFfI9y+4lrAxeKy/QtT+Qw=
Subject key identifier:   53:52:8D:7E:D3:3F:EC:0F:9A:30:52:DD:A7:24:54:AD:6E:B7:A3:97
Certificate issuer:       /CN=7FDEF345D05282B0CD7C35755677C3314BC32C86
Certificate serial:       1D3E8042D05AD6B44AB065CBD5A5335A46A62A16
Authority key identifier: 7F:DE:F3:45:D0:52:82:B0:CD:7C:35:75:56:77:C3:31:4B:C3:2C:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FDEF345D05282B0CD7C35755677C3314BC32C86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C52A88D72316C40BA7C935D2E03770408DEAA2E0BCD2D22512004458F9F0FC2/0/323830363a3333653a3a2f33322d3332203d3e20323635353733.roa
Signing time:             Sat 11 Jul 2026 18:30:00 +0000
ROA not before:           Sat 11 Jul 2026 18:25:00 +0000
ROA not after:            Sat 10 Jul 2027 18:30:00 +0000
asID:                     265573
IP address blocks:        2806:33e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C52A88D72316C40BA7C935D2E03770408DEAA2E0BCD2D22512004458F9F0FC2/0/7FDEF345D05282B0CD7C35755677C3314BC32C86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C52A88D72316C40BA7C935D2E03770408DEAA2E0BCD2D22512004458F9F0FC2/0/7FDEF345D05282B0CD7C35755677C3314BC32C86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FDEF345D05282B0CD7C35755677C3314BC32C86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3e:80:42:d0:5a:d6:b4:4a:b0:65:cb:d5:a5:33:5a:46:a6:2a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FDEF345D05282B0CD7C35755677C3314BC32C86
        Validity
            Not Before: Jul 11 18:25:00 2026 GMT
            Not After : Jul 10 18:30:00 2027 GMT
        Subject: CN=53528D7ED33FEC0F9A3052DDA72454AD6EB7A397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:4d:01:f2:4f:61:db:f5:3d:d2:29:a6:13:
                    ad:98:b0:0d:8d:6b:9a:f5:9a:57:1c:e1:93:ae:5b:
                    f9:ce:ec:c2:d5:af:3b:93:42:56:a6:4e:af:d6:61:
                    7a:29:14:b5:0a:29:26:9c:df:a9:08:03:fb:3f:20:
                    b3:b5:c2:af:95:fe:e2:08:0a:11:70:17:4e:69:05:
                    85:d7:6c:b1:70:b9:23:69:b6:3a:93:61:10:23:75:
                    0d:12:a5:82:c2:f2:8b:4e:80:4a:ca:b2:e8:83:78:
                    c7:e0:7d:b6:15:c8:32:9e:0c:1e:7b:73:62:ab:72:
                    25:44:d6:df:37:5d:b5:b5:79:d2:75:e9:aa:b6:b4:
                    a7:33:54:eb:f2:6b:dc:f5:21:c9:70:cc:39:5e:2a:
                    1d:89:2f:e0:c3:14:7a:94:34:71:68:cc:66:3e:9d:
                    e1:96:85:16:11:e2:ec:a1:24:36:2d:a3:2a:f9:98:
                    fd:c1:a2:49:94:81:08:fe:ef:e6:df:be:e7:29:42:
                    b6:72:8a:11:1c:1a:8c:4b:25:7c:e8:26:2e:40:fd:
                    f0:64:15:e3:17:84:1d:5b:30:3f:59:32:7e:d8:56:
                    b6:04:1e:f3:88:2f:30:1d:ab:1c:73:15:83:80:1b:
                    a6:92:5c:93:84:12:2b:3b:00:67:21:8d:47:d1:c6:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:8D:7E:D3:3F:EC:0F:9A:30:52:DD:A7:24:54:AD:6E:B7:A3:97
            X509v3 Authority Key Identifier:
                keyid:7F:DE:F3:45:D0:52:82:B0:CD:7C:35:75:56:77:C3:31:4B:C3:2C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C52A88D72316C40BA7C935D2E03770408DEAA2E0BCD2D22512004458F9F0FC2/0/7FDEF345D05282B0CD7C35755677C3314BC32C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FDEF345D05282B0CD7C35755677C3314BC32C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C52A88D72316C40BA7C935D2E03770408DEAA2E0BCD2D22512004458F9F0FC2/0/323830363a3333653a3a2f33322d3332203d3e20323635353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:33e::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:bc:37:93:f8:fa:d1:30:f4:4d:4d:42:05:6a:f0:91:21:
         e7:6b:a1:4d:09:d2:9c:b8:ef:76:b6:f7:19:1d:9a:45:0b:e5:
         79:d2:1d:2b:48:0a:ac:b5:cf:6e:51:e5:39:f5:67:fd:2a:1b:
         33:f8:e6:a7:7d:08:5b:fa:99:47:86:7b:1b:2e:4d:ec:a8:06:
         0a:c4:22:de:78:fe:49:87:31:a0:d5:7b:52:04:c7:60:37:e0:
         d2:38:d0:7f:a3:73:b3:0c:bb:a7:49:23:59:81:3b:de:82:86:
         da:e0:37:91:65:4c:b0:f6:7a:b4:e5:91:e5:d3:6a:b1:bb:c0:
         57:87:5f:ec:cb:74:f2:3e:ef:66:c7:4e:5f:a0:9c:9c:88:88:
         74:04:36:4d:18:29:ed:37:8e:c7:e7:ef:96:d6:34:35:c4:c5:
         37:e0:17:cd:24:3d:83:d8:1e:8d:b3:1c:46:b0:fc:0f:2a:2b:
         7e:b3:32:c8:ab:8c:33:36:38:47:90:75:1a:eb:e1:85:a0:a3:
         ab:3b:b5:b1:64:19:c8:e7:63:38:61:84:f1:9b:7f:d8:8f:fb:
         93:26:74:ab:87:e9:c3:1a:7a:fd:bc:a9:6d:2f:fe:41:8d:8b:
         fa:ab:a1:59:55:db:9d:93:9f:90:38:89:82:73:f2:80:3f:f4:
         e4:67:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:58 2026 by rpki-client