Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6330303a3a2f34302d3430203d3e20323733383833.roa
File:                     323830333a343335303a6330303a3a2f34302d3430203d3e20323733383833.roa (raw, json)
Hash identifier:          FJXi880JW7MOxO/sKTj6sPvvbkcXuVkPy6xDPkpXFoI=
Subject key identifier:   D9:DC:97:36:07:71:75:B5:B6:07:A2:AA:4E:A3:8B:98:6B:CD:E1:BA
Certificate issuer:       /CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
Certificate serial:       19B4BC90D59040CB01C590E6265D4E6F79009729
Authority key identifier: FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6330303a3a2f34302d3430203d3e20323733383833.roa
Signing time:             Thu 03 Jul 2025 02:50:00 +0000
ROA not before:           Thu 03 Jul 2025 02:45:00 +0000
ROA not after:            Thu 02 Jul 2026 02:50:00 +0000
asID:                     273883
IP address blocks:        2803:4350:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b4:bc:90:d5:90:40:cb:01:c5:90:e6:26:5d:4e:6f:79:00:97:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6165EDE0618587777D4D1F276F1CAFA98A645B
        Validity
            Not Before: Jul  3 02:45:00 2025 GMT
            Not After : Jul  2 02:50:00 2026 GMT
        Subject: CN=D9DC9736077175B5B607A2AA4EA38B986BCDE1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:60:15:df:ee:31:01:7e:0b:5d:83:f7:de:
                    f3:30:c1:9c:d7:32:e8:db:16:60:a3:81:13:ad:3c:
                    2f:ae:d9:ce:36:43:b2:83:85:a1:95:86:60:91:53:
                    ca:df:c6:78:b6:c2:1c:79:de:e2:88:b4:02:b8:55:
                    91:b4:08:fc:c8:cf:7f:c7:c8:d4:ee:69:24:07:eb:
                    02:0c:5a:8b:81:73:61:c8:96:ef:17:79:86:c7:a8:
                    12:45:f1:e7:27:6d:a4:f8:1e:88:d9:00:c1:a5:03:
                    dd:c1:17:af:e7:bd:eb:03:ae:27:c1:e6:43:6d:20:
                    2e:25:92:5c:23:12:2f:95:b8:c6:3a:1f:95:db:b8:
                    b3:38:94:c5:3a:28:8a:0c:f1:d5:19:b7:2f:17:e5:
                    ae:fe:38:ea:da:ea:68:7e:ea:b9:ff:b7:08:8b:f4:
                    a6:42:a0:5b:33:dc:d9:2e:cb:bc:55:b8:55:3d:08:
                    0e:13:71:f6:55:46:0d:22:5f:69:96:37:a5:2c:95:
                    85:fa:38:34:c3:dc:b7:c3:cf:f8:1c:6e:8c:26:50:
                    ea:43:dd:fa:97:c0:57:86:3f:cd:90:84:6f:cb:ed:
                    68:a2:c3:d0:61:79:a0:78:af:50:bc:f8:4b:28:ab:
                    e5:3c:a7:27:43:b6:a6:92:80:ab:4c:96:f7:e1:45:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DC:97:36:07:71:75:B5:B6:07:A2:AA:4E:A3:8B:98:6B:CD:E1:BA
            X509v3 Authority Key Identifier:
                keyid:FC:61:65:ED:E0:61:85:87:77:7D:4D:1F:27:6F:1C:AF:A9:8A:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6165EDE0618587777D4D1F276F1CAFA98A645B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a6330303a3a2f34302d3430203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:38:d9:7c:3d:05:a6:27:47:54:2b:f3:5a:69:ae:57:c0:bf:
         ba:4b:c8:f7:67:0f:84:5d:e1:c3:b8:df:53:08:4b:03:13:2f:
         72:65:61:66:f8:c9:cd:86:b5:ce:d0:60:db:b5:64:90:95:8a:
         6f:0c:8a:f3:d8:62:4f:57:83:7e:9a:c3:7a:3d:d2:4d:1a:f9:
         a5:08:d8:57:60:00:e2:a8:90:64:32:4d:3b:10:69:ec:47:6d:
         76:cb:93:4c:03:9f:c3:5b:04:03:06:71:88:60:fb:0c:39:aa:
         19:72:8e:52:fe:7f:ef:7e:8d:35:aa:cd:ce:a8:bb:8a:d2:ca:
         ac:e1:72:46:1c:c4:76:56:95:e7:29:7b:1e:91:87:6f:b9:5f:
         f8:e8:df:05:71:c5:9b:a7:47:37:ed:49:40:f1:c3:a0:14:3f:
         31:6b:ce:8b:a9:e7:d3:a8:43:2e:37:72:55:55:a2:e8:68:7f:
         a5:64:40:23:31:dc:19:86:c7:00:3e:bb:a9:a3:9e:7c:82:c4:
         01:32:d3:63:32:12:e5:74:0a:b3:bb:3f:a4:9b:01:70:be:e9:
         48:07:e5:52:66:06:ae:2a:bb:81:83:a8:d7:e0:87:d5:4e:3e:
         4d:39:23:47:2c:86:d0:a1:eb:71:93:ea:67:6b:05:43:c1:b3:
         7e:e7:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:02:30 2025 by rpki-client