Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa
File:                     323830363a3231373a3a2f33322d3332203d3e203238333934.roa (raw, json)
Hash identifier:          YwL4tX48tgkk1JS6xyhw0Kpgda78vxjOXzPDonSxSbc=
Subject key identifier:   CA:55:D3:EB:E2:30:31:25:C2:35:8C:38:32:47:82:F9:ED:5A:17:C1
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       659397CAC2961EF40F21668BA1591AC7DFE623D9
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa
Signing time:             Mon 22 Jun 2026 19:48:48 +0000
ROA not before:           Mon 22 Jun 2026 19:43:48 +0000
ROA not after:            Mon 21 Jun 2027 19:48:48 +0000
asID:                     28394
IP address blocks:        2806:217::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:93:97:ca:c2:96:1e:f4:0f:21:66:8b:a1:59:1a:c7:df:e6:23:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jun 22 19:43:48 2026 GMT
            Not After : Jun 21 19:48:48 2027 GMT
        Subject: CN=CA55D3EBE2303125C2358C38324782F9ED5A17C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:a5:c0:4c:5b:a6:58:8c:c3:73:e1:d0:e3:
                    d2:6d:bc:58:ae:65:6e:1e:19:91:e0:a2:43:b5:6b:
                    51:03:d5:db:e9:3f:45:68:ae:5d:25:54:40:c4:a0:
                    81:55:96:35:28:98:5e:96:d8:58:ee:c9:98:72:6b:
                    41:b2:8e:68:14:45:8d:3f:f2:c7:4d:42:19:61:fb:
                    23:97:5c:fb:d7:27:37:11:df:2a:26:cf:c2:ad:14:
                    64:e0:64:47:6d:52:f9:dd:e4:5d:7d:a0:20:68:59:
                    32:3e:83:5f:b8:50:1e:d2:b7:b7:fb:37:6a:ce:c8:
                    df:79:b9:04:ed:b0:87:e6:21:d8:9a:89:f0:4d:52:
                    72:df:01:db:bf:f7:c2:86:29:c5:b4:c2:c4:23:7f:
                    d9:a3:f4:eb:20:6b:16:e0:a8:85:c2:7a:9c:a1:e2:
                    26:e3:3c:f1:d0:ad:e6:bd:54:ed:08:dd:be:8d:40:
                    2f:dd:0e:4b:16:bb:50:10:cb:8c:f8:60:e5:a6:a5:
                    58:60:72:8f:f1:f7:65:c6:98:e1:d8:1e:6c:2c:8c:
                    39:43:95:9c:52:60:fa:ae:e3:5f:97:cd:2f:ca:72:
                    57:fa:d7:5b:ec:e2:8d:64:71:a1:1e:8c:d2:4c:d8:
                    cc:4f:23:db:3a:d1:09:b3:8a:e9:11:e0:46:ab:4d:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:55:D3:EB:E2:30:31:25:C2:35:8C:38:32:47:82:F9:ED:5A:17:C1
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:217::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:54:64:48:16:99:68:bd:bf:6c:40:7c:6e:c0:ab:35:9c:f0:
         8e:33:c8:6f:d0:fe:ed:e4:fe:f4:ac:f3:ce:0b:86:af:a5:48:
         89:d4:e2:38:8f:3b:41:83:64:2d:d2:03:58:80:b4:e9:52:0b:
         81:16:c2:b8:59:08:fc:9d:97:cf:64:11:7d:fb:61:f3:2f:60:
         95:e5:c2:92:81:0a:16:4e:3e:2d:d7:14:c0:0c:5c:3d:de:75:
         48:05:a9:cb:14:f5:8f:51:23:55:a5:9f:7c:85:05:06:bc:86:
         ea:a8:20:57:47:8d:0d:c0:c2:e1:4f:c9:8e:24:1c:0a:5f:b1:
         58:d4:5d:cf:98:db:31:11:6f:69:54:f6:65:8c:8c:b9:47:4e:
         73:d5:45:c3:85:bb:2c:8c:dd:ff:14:47:7b:7c:1b:28:12:16:
         c4:6f:87:37:ae:62:39:b9:86:fc:4f:23:b9:21:30:6e:a1:ca:
         32:4c:4c:da:e8:74:b6:57:04:78:6f:f2:50:eb:c7:3a:f1:23:
         90:4c:3b:75:96:df:de:4a:40:30:29:e4:1d:0f:48:07:ea:38:
         ba:12:20:cb:02:b3:a6:88:ff:4f:6d:79:43:0c:ab:f3:14:a0:
         f7:e8:4e:d5:20:ec:8e:47:40:5a:b9:94:b1:ca:c8:aa:19:00:
         6d:62:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:46:00 2026 by rpki-client