Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3930313a3a2f34382d3438203d3e20323730313131.roa
File:                     323830363a3362323a3930313a3a2f34382d3438203d3e20323730313131.roa (raw, json)
Hash identifier:          wpXnoT7LAOCKwqNQIpR9rwInQUskTq/nzdLZsDGuy44=
Subject key identifier:   7F:AB:18:C0:A9:E8:E8:18:67:EA:85:19:7B:C8:8D:D4:B4:D0:3A:57
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       2690421004590AB451C6D8D1D4A0D05E560031A6
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3930313a3a2f34382d3438203d3e20323730313131.roa
Signing time:             Wed 22 Jul 2026 17:22:51 +0000
ROA not before:           Wed 22 Jul 2026 17:17:51 +0000
ROA not after:            Wed 21 Jul 2027 17:22:51 +0000
asID:                     270111
IP address blocks:        2806:3b2:901::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:90:42:10:04:59:0a:b4:51:c6:d8:d1:d4:a0:d0:5e:56:00:31:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Jul 22 17:17:51 2026 GMT
            Not After : Jul 21 17:22:51 2027 GMT
        Subject: CN=7FAB18C0A9E8E81867EA85197BC88DD4B4D03A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:25:17:23:a8:33:70:44:ae:b5:95:95:3e:
                    07:74:7c:1a:9d:15:22:45:d9:e0:e4:aa:c2:fd:3b:
                    f2:b3:97:d7:9b:2a:57:2a:c6:21:ff:92:28:68:a4:
                    0f:66:2c:2c:07:c1:dc:7a:ee:a3:c9:e2:4f:ae:48:
                    a8:56:4c:ed:12:92:1f:ca:82:bd:8c:0b:6b:e2:08:
                    f3:ff:56:52:87:e2:a6:11:5f:c5:c4:67:7d:01:87:
                    31:06:84:70:ef:4a:be:c1:7d:29:ba:84:b0:b4:e7:
                    51:db:08:88:0a:ab:2d:2b:9f:99:da:19:6e:7a:74:
                    c7:bc:22:d6:59:ae:d8:b1:24:6a:8f:58:cc:4e:ac:
                    51:85:dc:80:8f:ff:f8:c3:e0:62:44:b8:bc:82:76:
                    77:bd:dc:12:de:82:1a:78:44:4d:13:b8:4a:2e:b9:
                    6e:5a:66:9a:2b:b8:16:8a:e2:83:c7:e5:a5:21:22:
                    f5:07:ab:cd:d6:2a:4e:23:9e:ba:d5:b8:dd:dc:87:
                    54:25:35:62:bd:18:b3:c3:cc:bd:9e:18:22:ec:5e:
                    ee:ea:98:45:27:64:2f:0d:e4:9b:93:0b:e4:29:fb:
                    2d:29:03:36:21:6e:1b:25:ff:30:79:d1:e0:f5:c2:
                    0e:4f:de:5a:89:7c:ec:47:cf:c9:94:9e:53:db:67:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AB:18:C0:A9:E8:E8:18:67:EA:85:19:7B:C8:8D:D4:B4:D0:3A:57
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3930313a3a2f34382d3438203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b2:901::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:8b:c9:9d:e8:6c:67:74:df:fb:15:6a:ec:24:9c:a5:ca:ee:
         01:71:b3:52:ab:f3:f2:76:fc:47:d3:1c:81:b1:55:64:f5:9a:
         e5:14:a0:c8:97:b7:92:e1:a9:34:cd:4c:2d:26:c6:c4:64:2d:
         52:62:10:7e:1c:41:ec:f5:79:6b:70:72:ae:2a:9f:09:62:90:
         9d:0d:7a:ba:7b:b2:0e:0d:32:b8:7f:ba:68:48:72:16:c6:ce:
         5d:ff:b6:36:14:9b:f8:25:f7:69:4d:f5:d2:29:e3:c6:39:2d:
         0f:5b:2f:bc:d7:cc:23:1b:f2:e6:39:96:f6:46:e2:d1:96:bb:
         c8:2c:f6:6b:4b:17:fe:00:13:5b:ec:2b:28:32:f9:ba:fb:b7:
         28:71:14:c8:ce:7a:a7:06:be:4f:f5:8c:f0:5b:3f:9e:2c:60:
         df:d8:ab:59:8f:b5:7f:8c:ba:fb:c8:44:0b:5b:e1:ce:eb:cb:
         c9:1f:21:4f:e4:34:44:d6:75:3a:21:57:05:55:5e:2a:67:44:
         87:ef:af:8f:04:28:5e:7f:43:93:45:b6:df:7c:0c:6b:25:3a:
         80:45:cb:db:79:29:a1:4d:21:64:02:e2:27:cd:ff:1f:fb:9e:
         a8:75:ce:0e:63:b1:39:8a:ae:6d:6f:f6:b5:42:f5:7f:93:e6:
         e6:69:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:26:39 2026 by rpki-client