Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a343030303a3a2f33352d3335203d3e20323635363232.roa
File:                     323830363a3361333a343030303a3a2f33352d3335203d3e20323635363232.roa (raw, json)
Hash identifier:          sXFlvu2b9VphXxPh+cQDUbeEiCq/9iX3lY0+Ieqm3kM=
Subject key identifier:   E5:EC:11:92:4B:24:0E:8B:64:6F:46:59:89:91:ED:1A:2E:8C:0D:0A
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       5BA6B848BA23512B27037F6C3A94530659F74DB8
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a343030303a3a2f33352d3335203d3e20323635363232.roa
Signing time:             Tue 07 Oct 2025 03:20:03 +0000
ROA not before:           Tue 07 Oct 2025 03:15:03 +0000
ROA not after:            Tue 06 Oct 2026 03:20:03 +0000
asID:                     265622
IP address blocks:        2806:3a3:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a6:b8:48:ba:23:51:2b:27:03:7f:6c:3a:94:53:06:59:f7:4d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Oct  7 03:15:03 2025 GMT
            Not After : Oct  6 03:20:03 2026 GMT
        Subject: CN=E5EC11924B240E8B646F46598991ED1A2E8C0D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:07:78:9f:fb:ee:ba:c0:f3:be:0a:80:52:
                    9b:60:c7:28:77:42:09:24:60:53:11:58:69:cc:d2:
                    02:33:19:74:a1:c8:6f:e1:41:48:4f:a2:5f:ea:92:
                    35:66:84:8a:ac:a5:17:7f:6d:01:d7:61:33:6b:a0:
                    ed:13:39:20:1e:02:40:f0:43:69:0e:3e:ea:74:ba:
                    80:df:64:89:24:22:01:95:23:83:07:d4:66:6f:0a:
                    04:24:60:6c:81:00:81:79:f9:d4:5a:ba:13:46:1d:
                    27:e6:db:6a:a1:19:9b:04:8f:95:07:30:0f:2b:c6:
                    6c:71:db:92:72:04:f7:f6:8e:e1:9a:fd:cd:4f:01:
                    68:b9:fe:48:41:b6:50:82:88:21:26:84:d0:42:6e:
                    9f:8a:78:f6:79:f6:e7:bb:6a:5a:f6:21:d7:b6:6e:
                    13:8c:ed:3d:fe:56:73:8d:91:23:59:8c:0e:bc:37:
                    7a:b9:a1:a8:cd:0a:6f:e2:7c:ae:f4:d6:ee:64:1f:
                    57:09:fa:c6:77:32:af:44:51:fc:aa:1f:b0:29:00:
                    56:cd:94:72:be:15:7d:b1:22:78:1d:61:70:7e:a5:
                    81:24:e8:13:18:32:dd:3b:bb:6c:18:4a:a7:47:e0:
                    23:fc:2d:84:f0:b1:34:5e:ee:3f:f0:cd:c3:ce:3c:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:11:92:4B:24:0E:8B:64:6F:46:59:89:91:ED:1A:2E:8C:0D:0A
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a343030303a3a2f33352d3335203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         63:13:cc:5b:64:cf:da:9b:b3:f0:43:eb:58:84:28:f2:0f:b5:
         5c:c1:6d:81:d9:04:84:21:c2:9a:56:e7:c2:bd:8a:6e:4a:4d:
         11:6c:a9:62:bc:1c:56:e9:52:df:05:03:10:81:eb:62:8f:b0:
         1f:18:d9:74:a9:16:2d:1e:3f:0c:03:ad:37:28:37:bd:c3:31:
         68:5f:2d:3a:b6:6f:cb:aa:73:09:06:10:b4:9e:21:1b:c5:47:
         c3:c1:b4:5f:84:d9:a5:7a:72:fe:9d:df:66:7f:2b:6d:3c:20:
         89:1c:1b:70:e3:13:95:f9:3f:b9:28:74:12:15:72:b4:0b:3d:
         d4:98:bf:de:61:f5:b1:24:6d:72:a1:d2:44:2f:3a:48:f6:f5:
         f8:f0:0d:86:ca:57:e0:0d:55:fe:9b:f3:54:15:c6:39:37:5e:
         99:f3:a5:79:83:b8:89:81:9c:17:ba:08:80:d2:d7:f6:a0:52:
         23:0b:73:28:e3:b1:70:55:4d:43:78:ca:4e:12:8f:75:e9:d7:
         96:3e:68:77:cd:10:13:21:b2:23:bf:f0:0a:db:d0:4c:ac:f1:
         b2:1e:54:bc:b9:f0:8d:d3:a3:37:6d:2f:f1:09:ec:6c:c6:89:
         5e:f1:6c:5a:4d:fd:6c:9a:48:fd:58:a1:95:51:38:e2:9c:38:
         df:e2:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:23:58 2025 by rpki-client