Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/323830363a3431323a3a2f33322d3438203d3e20323732333538.roa
File:                     323830363a3431323a3a2f33322d3438203d3e20323732333538.roa (raw, json)
Hash identifier:          oKjSEU4AwDZxCPFLxLZdzOU8iAancVqUs6VxrTWC2i8=
Subject key identifier:   FE:CE:83:C6:1C:54:5E:0C:D6:CD:54:83:5F:6E:87:39:09:57:51:0D
Certificate issuer:       /CN=890FD2EB8D28500CDEB8826AF284541F8E136F16
Certificate serial:       3D82740B18680679AE33F807602084B2B639FF9C
Authority key identifier: 89:0F:D2:EB:8D:28:50:0C:DE:B8:82:6A:F2:84:54:1F:8E:13:6F:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/323830363a3431323a3a2f33322d3438203d3e20323732333538.roa
Signing time:             Sat 12 Jul 2025 00:25:00 +0000
ROA not before:           Sat 12 Jul 2025 00:20:00 +0000
ROA not after:            Sat 11 Jul 2026 00:25:00 +0000
asID:                     272358
IP address blocks:        2806:412::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:82:74:0b:18:68:06:79:ae:33:f8:07:60:20:84:b2:b6:39:ff:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890FD2EB8D28500CDEB8826AF284541F8E136F16
        Validity
            Not Before: Jul 12 00:20:00 2025 GMT
            Not After : Jul 11 00:25:00 2026 GMT
        Subject: CN=FECE83C61C545E0CD6CD54835F6E87390957510D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:ee:a6:e1:cc:b4:96:40:40:cd:63:45:d7:
                    fe:37:f6:b3:82:ab:fb:ca:0b:b2:3c:99:49:4e:78:
                    a7:71:76:f0:22:bb:88:0e:13:01:49:fb:37:b1:1f:
                    a7:5a:98:92:02:4c:21:08:59:6d:bf:cc:1d:3f:5e:
                    d4:2b:b3:13:fe:0e:42:9a:3f:83:b8:96:d8:b1:79:
                    01:af:c2:da:f4:06:a6:3c:35:c2:f0:63:39:81:6d:
                    90:bd:cd:59:ea:09:5a:ee:76:5c:08:99:b5:5e:2e:
                    4a:e5:f7:3b:3b:86:e8:db:11:d4:0b:2f:b9:16:de:
                    e7:63:60:68:ae:45:99:be:e2:2b:53:f8:61:06:be:
                    ca:1c:a1:80:6d:15:e5:42:c4:15:bc:9c:23:58:3f:
                    1d:8b:9b:b5:be:4e:d4:e3:07:f8:68:40:82:0e:a3:
                    ca:97:07:4e:26:d7:ef:cb:6f:f3:70:35:20:9c:0e:
                    6a:8a:6c:ad:3a:d4:54:b0:8a:c0:b9:60:00:f6:38:
                    0d:88:7e:31:76:48:d1:9a:ae:86:9d:8b:9b:ab:87:
                    a1:bb:22:4c:e5:96:d5:92:22:1a:2f:8e:84:a8:a5:
                    0e:56:2f:ab:d7:ce:67:4a:0c:f4:e7:5a:b6:79:75:
                    94:84:f0:be:6b:58:92:bb:94:7c:67:2f:f0:6c:ff:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CE:83:C6:1C:54:5E:0C:D6:CD:54:83:5F:6E:87:39:09:57:51:0D
            X509v3 Authority Key Identifier:
                keyid:89:0F:D2:EB:8D:28:50:0C:DE:B8:82:6A:F2:84:54:1F:8E:13:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/890FD2EB8D28500CDEB8826AF284541F8E136F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A82DA04B9F4F85C6C14F75917B0DBE894596C4E3434433F70AD31E8FCF262FED/0/323830363a3431323a3a2f33322d3438203d3e20323732333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:412::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:83:32:cb:32:cd:25:d8:b3:62:e1:a8:92:e5:01:19:6e:dd:
         7d:a5:e3:ec:5f:52:e9:fd:fe:8a:b0:27:c3:40:fc:ed:28:ba:
         8b:e6:ee:5e:67:19:3a:fa:dd:0f:0d:b5:d0:d5:24:6f:4d:b9:
         84:b1:dc:42:c4:5c:db:40:0d:05:87:44:6f:91:61:e5:d2:ba:
         72:89:f1:44:1b:cd:25:e7:07:54:ea:2a:63:c9:8f:da:e3:06:
         90:b9:51:31:7f:83:8c:a4:42:da:48:c5:8b:b4:ee:04:5b:ad:
         7b:ab:7b:98:a8:b5:a9:13:4c:c5:42:b3:10:66:3f:06:f2:a4:
         47:54:5b:df:35:ae:06:cb:87:04:59:f7:1a:4f:7d:f8:18:cd:
         6a:cb:55:55:ba:7e:51:41:4e:14:02:0f:d2:42:cc:fb:da:fe:
         92:64:da:14:33:e4:47:b3:59:07:57:b6:52:5b:d7:65:0d:39:
         bc:b5:58:09:c3:9b:e6:dd:52:a6:1b:2d:b5:92:46:39:2c:5f:
         ae:4d:c6:07:86:7c:53:df:14:62:ec:cd:e3:17:14:05:35:8f:
         08:20:ea:30:66:88:39:08:c2:9e:65:08:4c:ae:0e:6f:48:3c:
         4a:2d:60:e7:1c:25:a8:26:2d:ce:e8:91:3f:88:35:bd:a5:b9:
         34:7b:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:01:53 2025 by rpki-client