Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6230303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a6230303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          wBI6pzbPR3i8cMkh4wS2S9tYcDAJfIm8yPntDcAPpWA=
Subject key identifier:   3C:D1:01:2D:63:51:7E:1E:0B:9C:62:83:59:2C:7D:76:47:91:F4:9F
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       6DC94111B24DC4D8786553AD676240A98B8C4FEF
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6230303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Thu 03 Jul 2025 02:50:01 +0000
ROA not before:           Thu 03 Jul 2025 02:45:01 +0000
ROA not after:            Thu 02 Jul 2026 02:50:01 +0000
asID:                     273883
IP address blocks:        2803:4350:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c9:41:11:b2:4d:c4:d8:78:65:53:ad:67:62:40:a9:8b:8c:4f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jul  3 02:45:01 2025 GMT
            Not After : Jul  2 02:50:01 2026 GMT
        Subject: CN=3CD1012D63517E1E0B9C6283592C7D764791F49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:34:ba:99:7b:9f:9f:1d:a4:65:3e:27:a7:
                    70:dc:ed:e2:6b:49:e7:68:fa:ef:5f:0a:84:46:16:
                    71:e1:d5:3f:1e:a4:4e:b3:41:5b:5c:68:37:01:d7:
                    19:11:68:72:de:dd:5a:66:3e:f3:e4:d8:e5:34:1c:
                    25:22:8d:99:43:5b:ae:7a:0a:e1:24:03:ca:88:10:
                    6e:7f:45:95:dc:df:b5:fd:4d:98:0c:0f:c2:81:0b:
                    0a:6c:ba:09:6d:23:dd:59:3b:99:35:d9:1c:b9:61:
                    64:f3:ce:fb:b9:37:e3:49:56:9e:54:54:37:2e:4c:
                    53:2b:87:11:15:f3:4c:46:77:45:d9:18:40:9a:7a:
                    e9:11:a6:21:04:1a:13:60:35:6c:86:10:4d:ee:51:
                    96:4e:77:18:1b:29:63:b6:49:1a:0b:f9:9f:47:89:
                    b4:c6:b3:21:2b:c5:21:2f:b7:2e:66:0d:11:1d:6e:
                    69:32:b6:50:d3:50:f9:b9:ac:da:b6:46:a1:8a:49:
                    19:f5:65:0f:00:ea:51:3b:77:a4:70:ee:ec:b8:06:
                    62:80:f8:59:f9:44:b5:b6:ea:f6:23:da:b9:20:6c:
                    a3:23:58:a9:13:2d:5f:d8:03:d9:13:1f:9c:8b:bf:
                    c0:ec:69:6d:83:15:4a:3a:6d:42:11:e5:f3:3c:e4:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:01:2D:63:51:7E:1E:0B:9C:62:83:59:2C:7D:76:47:91:F4:9F
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6230303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:0f:c1:c6:32:8e:e3:76:e3:e8:89:f8:80:64:2a:a5:bb:af:
         07:ad:2a:58:55:d3:77:85:d7:06:60:52:ff:a0:2c:65:cc:f5:
         96:67:43:c1:c9:7a:03:a4:5d:0a:91:a8:98:df:d0:12:a1:01:
         5d:0b:9b:41:68:eb:32:02:41:84:9f:8c:94:8f:c3:48:79:0e:
         10:2e:dd:47:41:af:a3:d7:0a:93:2a:97:91:c9:34:d9:0e:19:
         00:bd:10:b3:9f:7f:d6:16:35:bc:cd:05:34:b1:1a:47:3b:71:
         b7:9b:2f:5c:26:2d:1a:1d:7c:67:1d:4e:6a:3c:26:f7:4a:1c:
         a3:e3:59:85:68:30:c0:04:09:a8:37:b4:8d:9a:5f:98:e4:bb:
         35:88:95:47:a2:a3:6c:2e:57:16:71:ef:dd:3e:50:c2:ed:5e:
         7c:52:ac:06:5f:68:80:91:4a:3c:f6:9d:f6:fa:8b:e0:e6:27:
         19:49:91:4c:9e:12:dc:bd:3b:38:e4:3f:d9:97:b4:3b:5a:3a:
         dc:79:4f:47:b2:c1:6d:eb:ff:15:fe:a8:79:48:62:d8:1f:7b:
         6c:49:00:d8:a8:55:d1:51:6a:d8:9a:0f:09:f9:42:5d:08:ec:
         61:b3:98:02:b2:7c:38:e4:ab:e4:ee:77:c3:8b:ed:dd:f3:15:
         97:79:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:43:00 2025 by rpki-client