Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33332d3333203d3e20323633373530.roa
File:                     323830333a396261303a3a2f33332d3333203d3e20323633373530.roa (raw, json)
Hash identifier:          Ttp74rbaV53+/30EvY+7MhaO1tf3Ss2mBCFFNzJ+/bo=
Subject key identifier:   63:F7:4B:A8:B4:3C:31:61:12:61:78:79:C0:41:1E:07:5B:51:E2:CE
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       34E2D0EE34E1E00669741B7FEA8C7A985804DE6F
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33332d3333203d3e20323633373530.roa
Signing time:             Fri 03 Oct 2025 13:49:26 +0000
ROA not before:           Fri 03 Oct 2025 13:44:26 +0000
ROA not after:            Fri 02 Oct 2026 13:49:26 +0000
asID:                     263750
IP address blocks:        2803:9ba0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e2:d0:ee:34:e1:e0:06:69:74:1b:7f:ea:8c:7a:98:58:04:de:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Oct  3 13:44:26 2025 GMT
            Not After : Oct  2 13:49:26 2026 GMT
        Subject: CN=63F74BA8B43C316112617879C0411E075B51E2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:47:2f:96:1b:18:4c:ea:89:4e:a8:e0:22:
                    99:fe:28:d2:f0:38:74:21:11:1d:d7:83:61:c9:80:
                    80:23:da:a6:52:f0:3f:49:ff:96:9a:64:14:cf:89:
                    cf:61:42:a5:c2:70:a3:d2:bc:8e:f3:3c:65:77:72:
                    bc:2d:7d:47:bf:4d:3b:23:a3:43:9f:be:19:8e:45:
                    53:5f:ae:68:3e:33:60:6a:b6:45:da:5d:1a:b2:65:
                    be:89:2d:fe:7b:e3:7c:24:6e:f5:f8:87:92:1e:a7:
                    86:c2:ce:0f:be:16:5c:78:63:f8:7f:93:a2:85:ac:
                    fd:0f:e1:05:bc:5e:bb:a3:f2:dd:2a:12:3a:28:7a:
                    10:28:13:4e:b4:b6:3b:d9:f2:40:b6:43:50:27:3f:
                    7f:a1:55:b3:5d:94:72:46:6d:1a:d9:08:be:e3:e6:
                    14:26:a6:66:e1:c5:34:06:a2:1a:ee:cf:e6:aa:af:
                    ee:2b:69:58:30:45:f9:81:20:88:73:93:b8:ea:6b:
                    be:99:98:ee:c7:d7:09:d8:42:25:25:a7:cb:54:71:
                    55:c5:0f:c8:35:37:15:ff:1e:ed:fc:2d:9c:35:74:
                    34:dc:17:59:75:82:92:94:0a:98:98:07:22:49:a9:
                    45:d8:34:8a:fd:75:49:ba:62:25:9b:0e:32:52:ae:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:4B:A8:B4:3C:31:61:12:61:78:79:C0:41:1E:07:5B:51:E2:CE
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33332d3333203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:19:7d:74:a5:8d:ae:f5:fe:34:16:a3:bc:ed:ed:ff:b1:ed:
         ab:58:38:d0:e2:aa:cf:d7:c8:ff:f8:57:00:6b:ff:6d:54:34:
         77:db:2c:b1:26:6b:82:3f:d9:a6:80:06:61:b2:c2:00:0f:fc:
         3e:90:53:d8:6d:10:09:c2:58:12:b1:19:2d:76:5d:be:95:81:
         5a:da:18:d2:49:53:14:1e:1d:9a:df:4f:1a:ca:ea:a1:99:9d:
         1e:4e:6f:dc:1c:6f:c4:a0:c8:0c:15:05:43:8a:a2:d1:c2:ca:
         57:00:10:79:4d:66:19:d7:60:0f:fd:35:f0:f1:91:d3:12:6c:
         1b:d5:7e:55:63:d8:ea:c8:76:49:73:c0:55:26:15:66:53:26:
         73:7f:35:f5:71:04:48:d5:a6:b9:71:52:d9:69:67:de:81:b5:
         5e:9b:a3:56:57:31:fd:db:ab:3c:94:fe:05:4f:c9:b9:2f:84:
         b7:58:ad:eb:a6:d9:15:96:53:9c:7d:0d:93:6f:21:14:cc:2e:
         09:76:a0:db:05:be:dd:93:fd:8b:5e:ca:7e:f9:80:6f:1e:eb:
         f1:4a:70:0f:3b:c2:f6:5f:5d:b5:fd:98:9e:25:76:20:14:c2:
         31:c2:72:59:43:89:50:71:c6:e2:98:e4:0c:59:86:8e:a0:f1:
         18:49:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:36:26 2025 by rpki-client