Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a383030303a3a2f33342d3334203d3e20323635353239.roa
File:                     323830363a3238633a383030303a3a2f33342d3334203d3e20323635353239.roa (raw, json)
Hash identifier:          I513ryVqp1HZ57rQKQOjdgV7RWygk3loKg93g6rMqWE=
Subject key identifier:   61:94:C9:9A:E5:15:FA:56:3E:12:EF:49:38:E0:B6:25:87:11:48:34
Certificate issuer:       /CN=42FB55A41791F87502D72CC216E456680D5D80C0
Certificate serial:       72AF8A039761D05B7590E82577D07A5C426F8D5D
Authority key identifier: 42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a383030303a3a2f33342d3334203d3e20323635353239.roa
Signing time:             Tue 01 Jul 2025 14:40:00 +0000
ROA not before:           Tue 01 Jul 2025 14:35:00 +0000
ROA not after:            Tue 30 Jun 2026 14:40:00 +0000
asID:                     265529
IP address blocks:        2806:28c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:af:8a:03:97:61:d0:5b:75:90:e8:25:77:d0:7a:5c:42:6f:8d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42FB55A41791F87502D72CC216E456680D5D80C0
        Validity
            Not Before: Jul  1 14:35:00 2025 GMT
            Not After : Jun 30 14:40:00 2026 GMT
        Subject: CN=6194C99AE515FA563E12EF4938E0B62587114834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:f9:08:ca:49:3b:2d:20:00:20:f5:df:85:
                    d2:02:d5:c6:c5:ab:05:d5:2a:01:17:ce:68:80:13:
                    d1:c2:7a:68:60:27:a2:98:92:49:e0:9d:e0:e0:62:
                    70:c0:4c:9f:7d:ea:33:a0:73:25:36:b6:f5:fc:b6:
                    d7:fb:51:3a:65:18:d4:00:d0:c3:11:90:cf:34:bd:
                    63:ae:f2:d6:b7:d9:00:20:6e:20:39:ce:6f:60:35:
                    a6:02:fd:77:e1:dd:92:16:cc:83:6e:c2:f0:26:b3:
                    6a:f3:05:44:9a:49:c7:cc:b9:6a:d2:72:01:29:e9:
                    a8:b4:79:c5:3f:5f:67:cb:48:93:02:7f:1b:e8:71:
                    80:e2:dc:1b:d3:69:78:f1:89:50:57:a6:dc:66:76:
                    a7:ee:31:a5:1d:da:9e:f5:0b:b7:e2:75:8b:c3:4b:
                    94:95:24:37:99:0d:f6:5f:32:f3:d7:78:81:7c:8e:
                    e0:e0:07:58:34:9d:86:11:1b:06:02:8d:d4:07:a3:
                    b2:9b:20:03:cc:de:b0:bb:d9:00:87:1c:17:72:8c:
                    54:8e:48:33:4e:d7:ae:00:7f:a1:38:e9:c9:88:d4:
                    d2:61:5c:91:a6:a8:23:ea:1c:e0:52:81:de:73:f2:
                    bf:40:db:ce:1c:fb:63:44:f6:43:0d:5d:03:2b:85:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:C9:9A:E5:15:FA:56:3E:12:EF:49:38:E0:B6:25:87:11:48:34
            X509v3 Authority Key Identifier:
                keyid:42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a383030303a3a2f33342d3334203d3e20323635353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:28c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:79:af:7b:35:13:2f:37:da:a9:2e:de:26:20:9f:6a:7c:45:
         3f:11:00:04:90:03:1d:94:d6:a3:69:e5:9d:ac:3e:fb:32:7b:
         b8:e9:74:17:0c:e0:b2:79:8d:7a:e3:59:3a:40:3e:81:18:b7:
         00:ae:06:78:94:c0:da:fb:e9:b8:b5:41:e8:ef:92:e3:a8:8a:
         a0:51:fd:e1:de:4f:52:77:14:b7:0c:bf:fc:a5:7f:86:3f:d2:
         41:c6:3f:bb:ed:40:ff:e6:a2:2a:95:0a:cd:a8:49:31:65:21:
         61:a0:e2:84:35:4a:7a:6a:6d:35:5f:2a:b2:50:5e:b5:2a:6b:
         c1:9c:87:34:66:32:b7:3e:37:12:12:39:6f:bb:aa:fb:34:bf:
         fc:c9:12:32:86:03:90:81:1c:57:c3:99:c4:07:5e:d9:91:fa:
         0a:f4:c6:d7:04:65:1b:a9:d5:0e:f9:2e:77:f8:5b:c5:ce:4a:
         ef:c2:a1:bd:0c:fe:07:1b:61:04:38:3f:07:3c:12:52:19:ce:
         1a:3e:cd:bc:92:30:22:bc:39:f7:ae:56:62:9a:fb:bc:a7:fc:
         43:a5:fb:f3:d5:d4:46:1c:13:11:f1:0d:d1:56:b1:21:28:31:
         8e:76:b2:cc:86:50:e1:64:3a:77:21:0a:cc:67:ed:d5:c7:2f:
         6d:1e:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:37:08 2025 by rpki-client