Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa
File:                     323830363a3362323a3a2f33322d3332203d3e20323730313131.roa (raw, json)
Hash identifier:          /6soVP1CSMdy+aVwQQ2VtaIn0D29HJEmDD9ZB2b0WCY=
Subject key identifier:   05:1B:EE:74:11:98:D1:C6:A6:D3:2D:13:2A:2D:86:63:6E:F4:4C:ED
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       4EA48DEAF0602E16C2FACFE6D1415B21AE16C8B7
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa
Signing time:             Wed 22 Jul 2026 17:22:52 +0000
ROA not before:           Wed 22 Jul 2026 17:17:52 +0000
ROA not after:            Wed 21 Jul 2027 17:22:52 +0000
asID:                     270111
IP address blocks:        2806:3b2::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a4:8d:ea:f0:60:2e:16:c2:fa:cf:e6:d1:41:5b:21:ae:16:c8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Jul 22 17:17:52 2026 GMT
            Not After : Jul 21 17:22:52 2027 GMT
        Subject: CN=051BEE741198D1C6A6D32D132A2D86636EF44CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:69:8e:e3:11:8a:9f:99:80:0e:1b:d1:ed:
                    46:64:64:14:db:17:b0:93:de:3c:77:d5:14:0b:d7:
                    0a:70:f7:4c:33:ad:99:b7:4d:6b:af:9d:3e:49:96:
                    9c:65:bb:02:55:3d:97:6f:31:13:0e:5e:73:c4:ee:
                    f0:c2:18:05:d5:28:9c:39:07:bc:ea:50:4f:ec:29:
                    44:fa:f8:08:f6:98:e5:4e:25:30:97:80:12:c7:db:
                    b6:d8:77:0d:d0:4c:8c:f9:d5:be:6c:e9:fb:a0:bc:
                    67:c0:e1:79:4c:8e:af:1e:09:26:68:a9:df:f1:a6:
                    7a:65:cf:b2:d6:e0:60:8a:61:15:7e:e1:a8:44:95:
                    29:77:46:89:67:a8:78:d8:86:97:4b:c8:b5:93:45:
                    9c:c9:40:e1:e3:c2:71:38:4b:58:6c:5b:ef:bb:3a:
                    49:66:8a:0d:23:a3:9b:a1:ab:ee:70:31:6f:d9:29:
                    cf:b3:47:89:f7:36:96:be:e5:25:3b:7a:58:d3:79:
                    14:47:94:50:df:f6:ae:c1:1e:cf:b4:9c:88:98:c4:
                    12:d4:a2:dd:ae:51:de:3c:c3:b3:ec:41:ef:22:03:
                    b2:b5:42:a4:ab:14:dc:fb:e9:d9:99:81:23:17:de:
                    c2:3c:f8:f1:a8:e7:9c:b0:9f:fa:91:e5:2c:9b:ea:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1B:EE:74:11:98:D1:C6:A6:D3:2D:13:2A:2D:86:63:6E:F4:4C:ED
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/323830363a3362323a3a2f33322d3332203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b2::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:09:35:ab:ac:35:ff:7f:ce:72:31:df:f9:6c:e8:b3:ef:2c:
         94:43:72:96:78:58:4d:d9:39:b8:44:1c:70:93:4c:cf:ea:67:
         14:18:f2:e1:5d:35:53:c6:58:2b:c8:39:c9:a3:b3:8a:58:83:
         4f:77:b6:75:4f:f8:e9:c6:f7:97:11:5b:98:47:e0:22:8b:aa:
         95:06:04:f1:7b:86:f2:5a:37:b1:1b:d7:16:c8:d8:cd:36:f3:
         98:6c:40:df:a4:11:b8:28:21:6f:ba:e6:ed:dd:e8:61:6f:67:
         eb:b2:05:1a:53:4e:3b:da:1a:6e:a7:27:5f:34:9f:44:f9:a3:
         e9:58:7a:24:67:b5:f6:98:fd:ed:5d:ab:49:9e:19:73:4e:29:
         c4:3b:14:a8:88:e9:57:45:ed:11:a2:db:d9:70:d1:bd:74:c0:
         3b:6a:2b:60:60:76:45:37:c7:43:10:66:94:0f:17:c6:00:39:
         fe:36:29:1a:67:42:f0:a6:a5:ce:5d:ce:ac:ce:7c:07:09:62:
         52:66:aa:8b:2e:c1:48:80:66:11:0c:7e:57:8a:e3:91:a5:7e:
         cb:63:e2:51:51:75:b0:da:04:29:79:df:64:c2:8e:35:0a:ed:
         86:99:77:2d:9d:31:f6:ec:42:21:ef:f7:5f:af:82:85:ab:4b:
         d7:00:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:27 2026 by rpki-client