Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/323830363a3431333a3a2f33322d3438203d3e20323732333632.roa
File:                     323830363a3431333a3a2f33322d3438203d3e20323732333632.roa (raw, json)
Hash identifier:          3gei3c3TJdAEt3+8CEVzip+xVBL8sD0wxQZ5kOaWLIc=
Subject key identifier:   15:C5:1D:DC:F6:D2:24:22:A9:AC:23:FC:25:60:BE:A1:D4:52:54:91
Certificate issuer:       /CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
Certificate serial:       26E115B58A3DAC6B1177F359EC13BF0A19E21E37
Authority key identifier: 54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/323830363a3431333a3a2f33322d3438203d3e20323732333632.roa
Signing time:             Tue 26 Aug 2025 17:41:04 +0000
ROA not before:           Tue 26 Aug 2025 17:36:04 +0000
ROA not after:            Tue 25 Aug 2026 17:41:04 +0000
asID:                     272362
IP address blocks:        2806:413::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e1:15:b5:8a:3d:ac:6b:11:77:f3:59:ec:13:bf:0a:19:e2:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4
        Validity
            Not Before: Aug 26 17:36:04 2025 GMT
            Not After : Aug 25 17:41:04 2026 GMT
        Subject: CN=15C51DDCF6D22422A9AC23FC2560BEA1D4525491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:a5:f4:b2:4f:a4:47:98:a3:b4:c8:1c:52:
                    78:8d:f0:0c:c2:d3:fa:8d:71:83:ae:61:76:99:00:
                    2d:95:8e:17:cd:b7:ba:82:b6:e5:45:81:95:0f:ec:
                    d4:1e:cd:86:57:d7:3f:8f:ee:f8:51:5d:3b:4f:71:
                    90:80:17:98:b9:f5:15:86:32:41:af:98:80:95:f1:
                    3f:90:a2:b3:73:bc:f2:0e:b0:e8:3f:04:62:0b:44:
                    29:a4:1f:12:08:27:96:fa:34:d5:a7:f1:1e:5b:a7:
                    60:a2:3e:d5:59:cf:54:0f:3f:6e:26:2f:0a:48:06:
                    38:c6:32:1d:dd:6c:75:d1:88:f8:18:b9:07:a1:d0:
                    61:4a:bb:eb:e2:b2:0e:f8:9c:21:19:e3:ae:37:14:
                    7d:1f:3e:eb:c0:95:d1:61:ca:fb:44:9a:59:77:b1:
                    26:17:2a:3d:6a:d8:d9:c7:35:38:9f:03:ad:37:d9:
                    da:bf:2d:e9:c4:75:6a:e3:c1:d5:3c:7d:5e:7c:ab:
                    80:e0:a7:ba:e9:8c:2d:9d:13:0b:a9:b5:87:73:fc:
                    49:7d:a4:0c:7e:e1:cd:a3:98:16:50:3f:16:6a:d8:
                    4a:52:19:07:7c:04:1f:3d:a8:11:95:98:da:ca:d1:
                    14:7f:a0:91:d5:70:dc:5e:c4:23:25:be:af:08:40:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:1D:DC:F6:D2:24:22:A9:AC:23:FC:25:60:BE:A1:D4:52:54:91
            X509v3 Authority Key Identifier:
                keyid:54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/323830363a3431333a3a2f33322d3438203d3e20323732333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:413::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:da:99:16:7d:c8:9b:75:73:81:07:f5:03:17:bb:be:bc:90:
         3f:10:4b:c5:58:7f:43:df:e9:eb:7d:6e:d5:89:23:72:04:0e:
         e1:51:66:5f:2a:cd:cf:cd:d9:5f:36:a6:b5:cc:b4:04:18:f6:
         71:2a:11:f4:81:b7:f1:18:87:a1:b1:1a:e3:86:ab:ce:19:96:
         d5:b5:8c:66:3d:1a:83:a7:15:4d:92:d5:8c:de:24:5a:2e:16:
         19:8e:05:37:fe:38:cc:43:69:2c:2f:6d:7c:9a:67:13:53:74:
         b7:f7:16:07:15:29:8c:77:60:1d:ff:8d:82:cd:0f:09:c1:12:
         10:6b:c3:e1:9d:b8:95:15:11:04:bb:59:28:18:b5:a3:c1:34:
         3f:0f:8d:40:76:47:70:e1:29:f8:2a:67:bc:08:3c:99:16:e7:
         0e:68:ff:91:80:d6:e1:3f:e0:9e:cf:08:1e:47:95:e3:a0:c0:
         01:12:e0:49:9c:9c:ff:35:fb:23:f5:26:3b:6c:9c:62:f3:26:
         fe:9c:82:71:f5:2d:4b:e9:26:b2:b6:0f:84:79:4a:1d:4f:c7:
         8f:f0:8c:37:5b:c7:f7:db:59:9a:02:10:6d:52:7e:a7:b5:08:
         fa:ee:bd:3d:dd:03:27:80:4c:e5:86:e1:64:b2:8e:48:ad:ea:
         b8:e1:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:03:21 2025 by rpki-client