Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33322d3332203d3e20323733393931.roa
File:                     323830333a393864303a3a2f33322d3332203d3e20323733393931.roa (raw, json)
Hash identifier:          rsZM0SohxcrNR0NZS6MmKFyzD7mbqM46jyWE3jlIyOE=
Subject key identifier:   2B:60:0F:AB:18:96:95:F2:F4:EF:5A:3D:28:3C:53:7B:50:3E:A8:1F
Certificate issuer:       /CN=F253CEAAB15B4E845BF8382719CA02FE63CF0E76
Certificate serial:       5DE4784BF8DED350F7D29610E1C45371E1408DB0
Authority key identifier: F2:53:CE:AA:B1:5B:4E:84:5B:F8:38:27:19:CA:02:FE:63:CF:0E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33322d3332203d3e20323733393931.roa
Signing time:             Tue 12 Aug 2025 19:30:00 +0000
ROA not before:           Tue 12 Aug 2025 19:25:00 +0000
ROA not after:            Tue 11 Aug 2026 19:30:00 +0000
asID:                     273991
IP address blocks:        2803:98d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e4:78:4b:f8:de:d3:50:f7:d2:96:10:e1:c4:53:71:e1:40:8d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F253CEAAB15B4E845BF8382719CA02FE63CF0E76
        Validity
            Not Before: Aug 12 19:25:00 2025 GMT
            Not After : Aug 11 19:30:00 2026 GMT
        Subject: CN=2B600FAB189695F2F4EF5A3D283C537B503EA81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:31:ee:61:76:2b:82:02:8f:69:40:70:10:
                    10:96:c3:c4:bf:17:b5:97:fb:12:92:2e:a6:55:fa:
                    c3:e4:3d:d6:4c:ac:1c:b7:11:22:e2:e5:c7:d9:ee:
                    1a:bb:ee:f4:f2:95:ee:82:57:81:98:ca:16:06:a7:
                    1d:d9:6b:a0:ec:bc:ba:49:35:19:15:7d:8b:cd:9e:
                    8b:21:44:95:28:47:c6:35:b2:2a:71:5e:9d:43:c9:
                    e4:c6:73:dc:c7:39:70:b9:11:2d:e3:50:93:7b:f6:
                    59:16:7a:ec:25:e0:9d:b7:00:50:a0:c3:16:7d:86:
                    d0:57:00:17:7b:a2:e1:33:7f:6c:ed:62:3b:a8:c0:
                    be:c2:f2:16:06:57:af:04:13:a2:cd:2f:6c:62:89:
                    1c:8b:43:ea:04:64:e2:8c:e2:ed:e9:88:56:80:63:
                    48:18:f9:96:36:1c:d1:17:ec:3a:2a:e8:91:c4:b4:
                    8e:86:63:a5:2b:a8:74:5e:71:f7:03:8f:c8:ec:8f:
                    3d:a9:1e:c3:d1:87:28:18:c2:38:0a:6d:0c:46:29:
                    62:6a:07:df:3c:2b:0b:4e:25:a9:2b:d1:78:7a:22:
                    10:54:8b:40:1f:b8:e9:1c:2f:4a:6b:a3:98:96:de:
                    5d:a5:5b:86:69:6a:bb:01:d6:3e:30:ea:b2:30:59:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:0F:AB:18:96:95:F2:F4:EF:5A:3D:28:3C:53:7B:50:3E:A8:1F
            X509v3 Authority Key Identifier:
                keyid:F2:53:CE:AA:B1:5B:4E:84:5B:F8:38:27:19:CA:02:FE:63:CF:0E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F253CEAAB15B4E845BF8382719CA02FE63CF0E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E571E65D039B7C1A0DC8DC00E6D70F4A5220EE4D9961F845AB219EA16C7B044/0/323830333a393864303a3a2f33322d3332203d3e20323733393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:98d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:6f:37:d4:e3:9a:25:61:95:31:fd:4c:c1:53:16:01:36:
         97:8e:d7:06:57:4e:c3:de:a7:6e:d1:76:91:0c:85:b8:ff:f5:
         56:99:87:11:5b:9a:68:71:dc:53:68:b9:ea:d1:cc:bc:7d:b9:
         d9:fa:91:83:31:ab:d0:c6:41:4a:60:ce:bd:40:c7:3a:1b:83:
         34:00:1f:a5:56:e4:eb:cd:07:f5:75:98:26:aa:e3:d4:0d:e9:
         28:3a:3e:74:a4:d0:db:d6:56:c3:f8:e6:42:e4:d8:40:db:19:
         95:79:3a:ac:d4:7c:50:57:47:d5:00:34:45:64:b6:ad:39:2f:
         be:65:a1:29:44:f0:4e:3f:11:07:f0:3e:3b:1e:7b:82:6a:bc:
         68:e0:b2:c0:89:3b:00:73:25:6e:c7:58:ed:6a:f4:25:6b:15:
         36:78:a4:8f:03:0d:55:f1:ae:f1:47:f9:11:b3:4c:cd:f2:02:
         ce:80:84:2f:49:45:75:ee:06:3e:de:d9:1e:e8:1f:32:30:a5:
         49:e8:b0:0c:d4:e8:b4:9d:b7:77:91:f3:55:e7:69:48:3a:bd:
         eb:79:d6:fa:1c:db:92:a0:6d:fc:a4:6e:42:38:6d:74:a3:ea:
         82:98:2f:29:f9:26:99:a6:85:17:49:2b:bc:6b:62:1d:e6:32:
         57:82:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:33 2025 by rpki-client