Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa
File:                     323830363a3362323a3a2f33322d3332203d3e20323730313131.roa (raw, json)
Hash identifier:          9C1mI/J0IriMApGDAB83HJ6Cc7KorBCxPD91TKSvhsQ=
Subject key identifier:   38:71:A3:9A:AF:D5:DD:18:7D:2F:4E:36:19:4D:A8:02:B9:51:57:FF
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       14C1E8E85C4C9F242664ACE000CF5E8DFAA6BB84
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa
Signing time:             Wed 20 Aug 2025 17:05:00 +0000
ROA not before:           Wed 20 Aug 2025 17:00:00 +0000
ROA not after:            Wed 19 Aug 2026 17:05:00 +0000
asID:                     270111
IP address blocks:        2806:3b2::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c1:e8:e8:5c:4c:9f:24:26:64:ac:e0:00:cf:5e:8d:fa:a6:bb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Aug 20 17:00:00 2025 GMT
            Not After : Aug 19 17:05:00 2026 GMT
        Subject: CN=3871A39AAFD5DD187D2F4E36194DA802B95157FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:29:38:9b:a0:3c:ab:64:83:a4:c4:ce:71:
                    38:dc:28:51:86:ad:8d:1b:d4:f3:98:64:fc:9c:bf:
                    0a:26:ff:75:0a:45:33:d2:f4:db:3e:ff:51:96:ac:
                    1a:f6:7a:8b:c6:e0:3f:5f:00:3d:10:58:b3:61:2e:
                    12:43:e4:0c:78:67:22:85:33:4c:62:ec:09:4a:8a:
                    84:44:a5:cb:dd:f2:f8:93:38:28:e3:3e:c8:8b:8a:
                    b6:d3:59:5f:dc:5e:f5:27:18:95:61:43:66:ba:d8:
                    83:ed:e3:91:cd:86:08:49:f9:f4:37:f2:12:35:bf:
                    b3:45:d4:1e:2f:69:53:68:46:23:ac:41:18:ba:74:
                    37:3d:86:48:f9:d1:b5:7d:44:f5:ea:02:dc:86:e9:
                    5d:31:eb:a5:68:a5:02:b4:7a:1b:b2:d8:92:0c:2e:
                    46:f4:11:e1:32:d9:b0:ee:c2:84:33:c3:a6:5d:d6:
                    b6:37:c4:71:83:9b:48:85:2b:62:9b:af:e0:06:2f:
                    1d:e2:42:68:3e:ae:bd:bc:be:09:dd:81:a3:ac:9a:
                    6b:cf:41:87:76:f0:17:79:09:39:ec:b3:a7:91:f7:
                    0c:17:fd:c0:b0:80:08:82:6a:79:17:5f:b7:cf:df:
                    d7:04:30:da:a4:5b:72:e0:eb:9c:3d:76:67:e7:71:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:71:A3:9A:AF:D5:DD:18:7D:2F:4E:36:19:4D:A8:02:B9:51:57:FF
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b2::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:39:2e:16:9c:d6:d1:bd:ab:b3:dc:8d:99:b0:f5:7f:37:f5:
         fe:c4:73:3c:8a:12:92:44:ba:8b:bc:ee:ed:32:61:96:82:9e:
         63:f6:30:44:30:84:f9:e7:91:ec:98:07:ea:a1:ee:1e:4b:ec:
         34:d7:b1:50:4a:1b:76:0a:09:d7:65:fd:d7:8c:24:0e:50:1b:
         e2:11:ce:e2:c5:b7:72:b5:7b:99:6c:d5:93:94:0c:9b:f3:d7:
         ed:7f:ce:a3:ad:31:e8:1b:69:32:46:36:2e:b7:ba:9b:8a:cc:
         c9:1d:0b:4c:3c:ac:c0:01:16:18:40:d5:41:8b:6e:48:af:f4:
         c5:ef:79:50:de:fa:f7:43:20:e9:b5:6f:4d:5e:dd:b6:2f:1e:
         a5:37:f6:ae:55:c8:33:62:6b:4c:47:ab:ba:c1:a3:36:b7:fa:
         1e:5d:22:17:9c:98:55:a6:49:af:23:cb:8a:59:d3:7c:d3:ec:
         12:55:4f:16:ef:61:4f:ac:cd:c6:4a:d4:53:13:cd:b8:6c:03:
         66:ae:34:e7:23:e8:ef:e7:a2:35:71:8d:35:df:4f:19:f6:02:
         05:9e:34:48:cd:e5:d2:4f:3e:2e:db:cf:d2:62:82:03:c4:71:
         e5:52:19:22:53:d8:05:61:ce:32:df:bc:f3:5b:b4:19:61:a1:
         44:50:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:44:09 2025 by rpki-client