Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/323830333a353564303a3a2f33322d3332203d3e20323734313737.roa
File:                     323830333a353564303a3a2f33322d3332203d3e20323734313737.roa (raw, json)
Hash identifier:          YJX2u7xJghr4j02ST/hg2KajKMOYVlRsvIxKk+kP3uA=
Subject key identifier:   05:A4:B7:6B:B1:B2:11:A3:C9:26:69:56:B8:BD:F0:22:45:D9:D6:D2
Certificate issuer:       /CN=B0DD5D703412D70F06EE23B9D325EBBC109544C7
Certificate serial:       2A0C13FC6008113AD94AFD4CE7D3BE7CF4B69404
Authority key identifier: B0:DD:5D:70:34:12:D7:0F:06:EE:23:B9:D3:25:EB:BC:10:95:44:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/323830333a353564303a3a2f33322d3332203d3e20323734313737.roa
Signing time:             Mon 04 Aug 2025 17:05:00 +0000
ROA not before:           Mon 04 Aug 2025 17:00:00 +0000
ROA not after:            Mon 03 Aug 2026 17:05:00 +0000
asID:                     274177
IP address blocks:        2803:55d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0c:13:fc:60:08:11:3a:d9:4a:fd:4c:e7:d3:be:7c:f4:b6:94:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DD5D703412D70F06EE23B9D325EBBC109544C7
        Validity
            Not Before: Aug  4 17:00:00 2025 GMT
            Not After : Aug  3 17:05:00 2026 GMT
        Subject: CN=05A4B76BB1B211A3C9266956B8BDF02245D9D6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:64:01:f9:12:f1:b7:15:35:31:ef:91:5c:10:
                    8c:6b:64:01:44:c5:73:25:88:fa:ab:91:38:83:0e:
                    af:b7:18:fe:2c:8b:4b:fd:e6:ae:43:13:0e:57:ee:
                    f2:96:bd:31:7e:fb:9e:a7:c1:93:64:f6:d5:3a:56:
                    00:01:1e:75:74:48:d7:13:ea:4d:3a:b3:e7:c5:7f:
                    2b:bf:43:04:f4:65:07:cc:cf:ed:30:1e:8d:10:13:
                    68:d9:46:ee:06:ab:97:50:b4:19:5d:b6:6d:c2:1e:
                    76:92:46:72:1f:d4:41:89:46:c9:ec:0c:1c:bc:38:
                    69:bc:1a:5e:7d:17:5d:65:24:b3:8f:c9:8f:66:ca:
                    c7:60:c1:64:0d:a2:75:cc:50:c9:75:20:aa:73:1c:
                    93:4a:3f:86:9f:65:f4:f1:86:e1:f5:fa:4f:ed:53:
                    63:21:aa:ec:6d:8b:b5:42:5c:16:4b:8f:74:a3:89:
                    a8:e9:f1:de:9d:37:b1:8c:a0:e6:a1:65:f1:f3:12:
                    64:69:99:ca:3c:73:b1:9d:00:74:b1:68:26:77:38:
                    32:f9:a3:09:36:8d:9a:91:1a:3b:02:20:a0:6c:02:
                    c3:d2:c0:e7:6c:86:28:18:38:56:f5:7d:f8:64:dd:
                    e7:ea:8c:5d:9a:41:26:6e:a3:dc:bf:6b:00:62:b5:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:B7:6B:B1:B2:11:A3:C9:26:69:56:B8:BD:F0:22:45:D9:D6:D2
            X509v3 Authority Key Identifier:
                keyid:B0:DD:5D:70:34:12:D7:0F:06:EE:23:B9:D3:25:EB:BC:10:95:44:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/323830333a353564303a3a2f33322d3332203d3e20323734313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:55d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:29:5f:c7:c8:e0:34:35:4e:68:20:55:72:d2:84:94:ec:
         7f:24:bf:51:c7:1f:26:5f:c4:70:b6:7e:e7:4a:0f:99:67:29:
         0d:65:a8:5a:3b:de:d8:7b:86:80:43:f8:ce:be:50:66:2b:96:
         00:f9:93:fa:f5:46:17:2e:a9:78:0e:75:4c:25:4c:1a:ef:ba:
         a3:ce:21:1b:d5:43:38:ca:ec:c5:8f:84:7f:aa:7b:c8:cf:80:
         43:63:6e:b0:84:c1:12:f5:54:be:ec:74:26:c5:c4:9f:35:2f:
         a6:49:b5:c0:fe:fd:57:ed:a3:d1:1a:58:6c:9a:f1:18:bb:d1:
         40:64:1f:a3:6c:c5:86:6b:43:b7:91:58:be:be:5c:12:04:c3:
         9e:ba:2f:a5:98:56:0c:a2:f5:da:ac:27:2e:1c:74:15:8e:a9:
         2f:19:99:9d:73:45:68:25:4e:c2:8a:45:be:05:c5:87:c3:55:
         b6:4c:b9:56:82:9f:a7:2d:f5:81:09:77:6f:a2:f1:15:de:28:
         e5:4a:98:2e:a7:73:1b:cd:a6:60:d4:4e:7e:53:19:9b:7e:13:
         6a:4f:53:a7:d5:35:d4:82:79:04:b2:c6:89:70:5c:0d:8f:99:
         9e:ff:10:ad:27:52:65:7f:7d:34:59:c7:84:65:a5:52:70:4c:
         82:a9:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:32:09 2025 by rpki-client